Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
File: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft (raw, json)
Hash identifier: uNhgvdJGYL5VdYMNxirljpMDa6QFMqQUTxoFRVQlYFg=
Subject key identifier: 49:B1:C3:27:C1:8F:9C:B9:BB:D9:22:D1:C6:73:E6:17:E8:09:E8:14
Authority key identifier: A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
Certificate issuer: /CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Certificate serial: 019CE3D9F553E2C6B3D258B97F1AD0E9695C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
Manifest number: 0802
Signing time: Thu 12 Mar 2026 21:00:38 +0000
Manifest this update: Thu 12 Mar 2026 21:00:38 +0000
Manifest next update: Fri 13 Mar 2026 21:00:38 +0000
Files and hashes: 1: 3_ICGJ04_o-B78xtxe-BL1771oM.roa (hash: ISb9BZPlnND5DSOlgTsgHag+YAm+Sabx40NlDe58dfY=)
2: oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl (hash: EwfhhUZ+FPGwNDx84L8/CdrHDLVw9ajymBmnJV4OYWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:f5:53:e2:c6:b3:d2:58:b9:7f:1a:d0:e9:69:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15b19638611f3e1f7644a7e3bb71d0ca374919e
Validity
Not Before: Mar 12 21:00:38 2026 GMT
Not After : Mar 13 21:00:38 2026 GMT
Subject: CN=49b1c327c18f9cb9bbd922d1c673e617e809e814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:73:bd:f5:5a:17:40:37:3f:0d:22:75:97:48:
45:5f:94:1d:a8:79:26:38:34:e4:04:7a:f9:d7:80:
50:d8:4f:ed:80:93:af:de:55:0d:17:e8:25:0c:ff:
94:03:39:af:6b:8b:d0:ff:84:b3:ca:d0:20:14:25:
1c:9d:40:de:b1:bf:35:51:99:96:08:cf:f2:cd:e6:
53:ff:a3:88:fa:40:8e:9b:36:cd:3c:26:bf:d7:3c:
e4:0f:a6:59:5a:c7:66:7c:68:0f:1f:5b:94:ab:41:
86:07:93:ce:1b:10:66:76:6e:a2:a0:83:79:a0:5e:
68:1a:36:f3:cf:2e:34:b1:87:aa:b4:be:f5:eb:ca:
d8:f5:a2:34:37:60:a5:85:24:c5:2e:fa:32:ea:01:
21:5f:4b:3f:1a:3f:06:f3:f9:c6:be:05:f1:fc:a9:
95:e7:f9:7b:f5:7b:7e:19:19:0c:70:43:1f:df:00:
50:1a:89:1c:d1:2f:42:a5:6c:e8:1a:5c:f9:43:33:
b0:f4:94:7e:8d:41:a1:d2:35:d9:b5:11:dd:47:6d:
35:d7:a9:3f:c0:c8:eb:da:43:4c:2e:37:e1:5c:59:
e4:c8:6f:0a:a8:95:07:a1:87:83:c3:c9:fd:af:2f:
99:c3:41:d1:ce:d9:e4:02:9b:d1:74:53:11:f2:e2:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B1:C3:27:C1:8F:9C:B9:BB:D9:22:D1:C6:73:E6:17:E8:09:E8:14
X509v3 Authority Key Identifier:
keyid:A1:5B:19:63:86:11:F3:E1:F7:64:4A:7E:3B:B7:1D:0C:A3:74:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b57852-1fd7-40fd-91ff-12518429fa63/1/oVsZY4YR8-H3ZEp-O7cdDKN0kZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:55:c2:4e:3d:da:2e:f9:c8:35:e5:e3:b8:a0:48:a5:18:13:
44:0f:9e:e2:46:e2:51:06:2a:47:f5:92:7b:ee:b4:39:7a:e6:
7d:7e:f0:21:9c:b9:cb:4b:5a:b0:af:5e:04:4a:40:68:e4:73:
f6:ef:ed:2b:c9:7d:13:8a:c5:c8:fb:ac:81:fc:11:5c:fc:94:
2f:e3:69:93:4c:c6:7e:cf:34:46:cf:e2:89:25:41:c4:cc:34:
a4:af:11:46:ae:19:cb:6e:a7:a1:13:7b:b2:77:c1:4c:7a:98:
fb:d1:08:81:7a:cc:38:ff:f0:b4:bc:3d:55:03:2b:a1:19:ae:
e0:c5:37:d2:b4:84:19:2e:af:89:51:d1:20:07:33:12:a8:ae:
c6:c0:52:9c:f2:b1:a7:0b:05:80:b7:c6:ea:80:0a:53:9b:fc:
5a:af:77:35:cf:0a:d5:15:03:c0:99:08:d9:be:e3:fe:f7:f9:
30:f3:e7:e4:de:f1:02:6e:f2:03:66:0d:1f:1e:04:6e:a9:24:
3e:04:2f:06:0d:4f:32:b2:34:7c:30:0f:fd:4d:78:72:b1:26:
a5:ee:a4:6f:f4:4e:d0:c2:a5:84:ac:68:36:bc:5a:60:cb:13:
8c:56:ac:b3:88:07:e2:a3:5c:57:c3:d0:fa:b3:d8:54:34:f5:
08:ea:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:24:58 2026 by rpki-client