Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
File: oWldVVgkHgSoctwTRomPLOpw3-c.mft (raw, json)
Hash identifier: enQbeJbmGSbUt66Er0UtQXmLWK9BVIRg+Oe9rOqY4g4=
Subject key identifier: 64:32:4A:A8:A9:82:0B:8C:1A:F9:AD:64:63:3C:42:88:5F:B4:51:CC
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial: 019D390A3655AE83A9C3883F997CE26A5298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
Manifest number: 0853
Signing time: Sun 29 Mar 2026 10:01:03 +0000
Manifest this update: Sun 29 Mar 2026 10:01:03 +0000
Manifest next update: Mon 30 Mar 2026 10:01:03 +0000
Files and hashes: 1: UEDe2YcCkK60qxLQ7EMjKMaLeVk.roa (hash: 9ZEiLEpeNHQPSSjaHm5KtU2EfQDw++56segRjLKG218=)
2: oWldVVgkHgSoctwTRomPLOpw3-c.crl (hash: I7dm0URcdRpiVOIH3uqJAzU1BgGDrnZZvstJ1zVh3xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:36:55:ae:83:a9:c3:88:3f:99:7c:e2:6a:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Validity
Not Before: Mar 29 10:01:03 2026 GMT
Not After : Mar 30 10:01:03 2026 GMT
Subject: CN=64324aa8a9820b8c1af9ad64633c42885fb451cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:4e:bd:e5:85:58:bf:16:df:c1:ce:44:2a:
87:7d:44:19:06:7c:d1:3c:05:28:14:b9:97:40:0c:
89:5f:e6:67:ce:e3:e2:58:d1:23:9b:6d:2e:67:f6:
4e:71:87:09:c2:5b:e9:3e:a0:2b:2e:9a:29:de:2b:
78:eb:44:91:4c:0e:2c:45:4f:fb:77:88:4c:6e:4b:
0d:9c:69:27:d3:3d:fd:63:f8:f9:75:33:32:81:b4:
7a:0e:96:81:ed:65:3b:90:3b:de:f2:1b:dd:2f:07:
c3:1c:17:8c:1f:12:d7:6a:55:5a:25:02:7c:a6:e8:
b8:8b:12:67:94:9c:cf:b6:50:d1:de:4e:ef:04:7c:
c9:49:7b:34:22:5c:46:05:ca:45:a5:08:d5:00:e3:
30:88:5e:92:84:b1:27:8e:83:b1:e0:63:73:53:89:
a6:eb:52:51:5d:5d:13:c4:30:86:94:7e:3f:b1:6b:
d9:83:27:1a:af:55:9e:cc:51:73:58:28:aa:f7:e7:
49:e3:3d:f8:12:e9:16:6f:7a:2e:d3:ea:72:90:04:
33:3e:71:e3:06:70:15:bf:6b:20:cf:59:c2:f0:d5:
1b:74:8b:4b:dd:24:a2:2d:6f:a3:c4:1e:7c:6c:ae:
22:ab:11:52:05:fc:b2:37:1e:35:06:e1:6a:82:49:
90:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:32:4A:A8:A9:82:0B:8C:1A:F9:AD:64:63:3C:42:88:5F:B4:51:CC
X509v3 Authority Key Identifier:
keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ff:6c:d6:eb:7d:18:34:03:e7:00:53:db:51:5a:8a:1b:1c:
a9:c1:bf:15:ab:56:18:58:48:96:a7:62:80:aa:e8:93:a4:70:
2a:d7:ec:31:ae:ce:58:2b:40:07:f9:fb:f1:2b:9d:1f:b0:37:
a7:98:57:b4:74:8d:cd:e8:fa:31:7b:0b:41:dc:f7:ef:1d:6a:
53:db:49:4d:41:05:a5:f8:4c:c8:c2:0d:18:2d:8d:77:76:cb:
cb:b4:0c:b1:85:22:94:d5:9c:e8:2f:0d:51:61:41:2b:da:3e:
9d:c7:7f:65:4f:5d:5e:5a:9a:c4:8f:d0:17:e3:ca:e8:50:28:
89:50:9f:f9:16:3b:b7:75:07:51:37:27:99:53:ab:e2:d4:58:
e6:bd:94:45:04:7b:9f:47:dc:76:7c:2e:b8:d6:9e:b9:73:20:
89:47:c8:82:fa:4c:60:01:bf:33:b9:d4:28:e0:14:f4:e1:5a:
85:9f:e1:b8:ce:09:cd:94:6d:e4:a4:13:3d:02:14:9c:48:ef:
87:ce:c6:94:9f:b8:07:bc:59:c8:4a:9b:1e:7d:7c:8a:00:18:
83:45:9c:00:36:82:70:ca:d8:01:7c:0b:46:87:46:92:a4:25:
d5:95:0e:0b:60:3a:a0:c6:74:dd:38:e3:5e:27:5f:66:28:3a:
c0:37:f9:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CjZVroOpw4g/mXzialKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjk1ZDU1NTgyNDFlMDRhODcyZGMxMzQ2ODk4ZjJjZWE3
MGRmZTcwHhcNMjYwMzI5MTAwMTAzWhcNMjYwMzMwMTAwMTAzWjAzMTEwLwYDVQQD
Eyg2NDMyNGFhOGE5ODIwYjhjMWFmOWFkNjQ2MzNjNDI4ODVmYjQ1MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsflOveWFWL8W38HORCqHfUQZBnzR
PAUoFLmXQAyJX+ZnzuPiWNEjm20uZ/ZOcYcJwlvpPqArLpop3it460SRTA4sRU/7
d4hMbksNnGkn0z39Y/j5dTMygbR6DpaB7WU7kDve8hvdLwfDHBeMHxLXalVaJQJ8
pui4ixJnlJzPtlDR3k7vBHzJSXs0IlxGBcpFpQjVAOMwiF6ShLEnjoOx4GNzU4mm
61JRXV0TxDCGlH4/sWvZgycar1WezFFzWCiq9+dJ4z34EukWb3ou0+pykAQzPnHj
BnAVv2sgz1nC8NUbdItL3SSiLW+jxB58bK4iqxFSBfyyNx41BuFqgkmQJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQySqipgguMGvmtZGM8QohftFHMMB8GA1UdIwQY
MBaAFKFpXVVYJB4EqHLcE0aJjyzqcN/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYt
ZjViYTRmZTJiZjU0LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYtZjViYTRmZTJiZjU0
LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv9s1ut9
GDQD5wBT21FaihscqcG/FatWGFhIlqdigKrok6RwKtfsMa7OWCtAB/n78SudH7A3
p5hXtHSNzej6MXsLQdz37x1qU9tJTUEFpfhMyMINGC2Nd3bLy7QMsYUilNWc6C8N
UWFBK9o+ncd/ZU9dXlqaxI/QF+PK6FAoiVCf+RY7t3UHUTcnmVOr4tRY5r2URQR7
n0fcdnwuuNaeuXMgiUfIgvpMYAG/M7nUKOAU9OFahZ/huM4JzZRt5KQTPQIUnEjv
h87GlJ+4B7xZyEqbHn18igAYg0WcADaCcMrYAXwLRodGkqQl1ZUOC2A6oMZ03Tjj
XidfZig6wDf5Ig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:56 2026 by rpki-client