Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
File: oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft (raw, json)
Hash identifier: JESXETd9ey0zktgyCAE19xCG8cFWlx4HUYWhm8keId8=
Subject key identifier: FF:0F:EA:29:C1:F6:CC:24:F0:8A:E5:4F:05:E6:DD:97:85:1F:A6:1B
Authority key identifier: A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
Certificate issuer: /CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Certificate serial: 019CE410D410459B86BA63098DBC0DA6E283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
Manifest number: 09D6
Signing time: Thu 12 Mar 2026 22:00:33 +0000
Manifest this update: Thu 12 Mar 2026 22:00:33 +0000
Manifest next update: Fri 13 Mar 2026 22:00:33 +0000
Files and hashes: 1: AtniHnWS_m5XJnsdI3EUIOstzH4.roa (hash: KMRx9/qM9+4wF0F9XLzExOU323HbvcZo4zC4bgJQesg=)
2: oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl (hash: piDuX586L6ythASXwirwYYoFkHtWbPUnNFXtS44IkLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:d4:10:45:9b:86:ba:63:09:8d:bc:0d:a6:e2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e3128fd09dc18e66ee4212a7e64f3e4e74a814
Validity
Not Before: Mar 12 22:00:33 2026 GMT
Not After : Mar 13 22:00:33 2026 GMT
Subject: CN=ff0fea29c1f6cc24f08ae54f05e6dd97851fa61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:eb:52:7c:71:e8:f0:95:cc:67:03:d9:3e:
71:7b:bd:cc:14:d5:5d:48:86:96:26:a3:f3:7e:32:
90:12:ed:7f:aa:78:03:4e:b2:07:f9:b0:49:98:7d:
77:ec:7e:9e:93:7a:3e:6c:48:c6:4c:c9:72:57:64:
07:82:2b:ec:6e:fc:a2:24:90:84:76:2c:d3:0d:24:
20:29:da:43:7b:a0:3b:9b:31:59:61:08:83:c2:08:
ce:c7:83:99:b8:93:5c:fe:f6:7c:59:1e:dd:25:0a:
2b:4d:88:79:ec:53:b0:b7:c4:3a:31:79:8b:9d:6c:
83:43:5a:de:de:6e:b3:2a:98:7d:cb:27:d4:24:1f:
d6:ac:b1:38:20:ab:67:28:9a:72:ea:e9:07:38:e0:
08:f8:11:04:ee:e9:7e:7b:50:48:e2:87:c7:70:02:
5f:1b:65:f1:57:71:ac:e6:78:ec:e9:f5:9b:89:88:
4a:5d:f2:1e:fc:4e:2a:db:a2:2b:3c:12:5c:7a:03:
b3:18:17:a0:25:e4:93:3f:e2:dd:b9:12:da:57:2a:
23:de:66:bb:84:44:bb:12:5c:da:c7:07:2b:84:fc:
25:e6:36:6c:a3:4a:c5:5a:5e:99:3b:67:3d:da:a4:
52:9c:71:87:b8:e7:d8:e7:7e:89:3d:72:6b:e5:01:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:0F:EA:29:C1:F6:CC:24:F0:8A:E5:4F:05:E6:DD:97:85:1F:A6:1B
X509v3 Authority Key Identifier:
keyid:A0:E3:12:8F:D0:9D:C1:8E:66:EE:42:12:A7:E6:4F:3E:4E:74:A8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOMSj9CdwY5m7kISp-ZPPk50qBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0b4e73-a154-4059-b622-8fd5caba54e9/1/oOMSj9CdwY5m7kISp-ZPPk50qBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:79:dc:e8:9d:b1:8c:25:f2:e3:31:26:10:c5:73:55:eb:15:
1d:04:a7:71:6c:93:e9:ac:5d:84:56:6c:89:03:8d:be:41:ac:
96:63:18:92:e0:d5:eb:ef:3b:13:98:a9:38:a1:78:c1:54:a3:
6f:a9:4f:67:fa:24:b6:5a:df:13:d0:d1:99:e0:3f:d7:ea:97:
a2:20:2c:28:a0:42:9d:0b:dd:b4:2c:10:fa:5f:d0:9b:06:2d:
05:fe:95:5b:90:52:1f:fe:92:9d:85:46:e4:ef:05:97:c1:6c:
ed:dd:14:05:b7:c1:5d:03:aa:1a:ee:bf:b3:27:18:76:16:04:
75:d4:72:fb:bf:58:db:b3:e4:6e:39:39:02:0e:e0:b7:56:88:
8f:3a:cb:4f:0a:54:c7:18:e1:d6:cf:8e:46:00:cd:20:09:31:
69:21:55:b2:d9:34:f9:d5:83:f3:a1:40:c7:4a:d6:36:be:3f:
28:ac:a5:98:89:72:b2:9b:93:72:2a:02:91:96:2e:3b:ec:17:
23:73:57:11:1f:d3:5c:6f:ab:ae:a7:90:5d:78:45:fd:46:92:
8d:0d:7a:b9:1a:1a:2f:61:ee:d8:bc:b5:72:7f:07:93:40:3f:
4f:0e:f2:1b:f5:13:3d:72:6d:3c:ad:3c:8b:67:ba:66:17:bc:
8e:90:ff:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkENQQRZuGumMJjbwNpuKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTMxMjhmZDA5ZGMxOGU2NmVlNDIxMmE3ZTY0ZjNlNGU3
NGE4MTQwHhcNMjYwMzEyMjIwMDMzWhcNMjYwMzEzMjIwMDMzWjAzMTEwLwYDVQQD
EyhmZjBmZWEyOWMxZjZjYzI0ZjA4YWU1NGYwNWU2ZGQ5Nzg1MWZhNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZXrUnxx6PCVzGcD2T5xe73MFNVd
SIaWJqPzfjKQEu1/qngDTrIH+bBJmH137H6ek3o+bEjGTMlyV2QHgivsbvyiJJCE
dizTDSQgKdpDe6A7mzFZYQiDwgjOx4OZuJNc/vZ8WR7dJQorTYh57FOwt8Q6MXmL
nWyDQ1re3m6zKph9yyfUJB/WrLE4IKtnKJpy6ukHOOAI+BEE7ul+e1BI4ofHcAJf
G2XxV3Gs5njs6fWbiYhKXfIe/E4q26IrPBJcegOzGBegJeSTP+LduRLaVyoj3ma7
hES7ElzaxwcrhPwl5jZso0rFWl6ZO2c92qRSnHGHuOfY536JPXJr5QHEyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8P6inB9swk8IrlTwXm3ZeFH6YbMB8GA1UdIwQY
MBaAFKDjEo/QncGOZu5CEqfmTz5OdKgUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjIt
OGZkNWNhYmE1NGU5LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wYjRlNzMtYTE1NC00MDU5LWI2MjItOGZkNWNhYmE1NGU5
LzEvb09NU2o5Q2R3WTVtN2tJU3AtWlBQazUwcUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHnc6J2x
jCXy4zEmEMVzVesVHQSncWyT6axdhFZsiQONvkGslmMYkuDV6+87E5ipOKF4wVSj
b6lPZ/oktlrfE9DRmeA/1+qXoiAsKKBCnQvdtCwQ+l/QmwYtBf6VW5BSH/6SnYVG
5O8Fl8Fs7d0UBbfBXQOqGu6/sycYdhYEddRy+79Y27Pkbjk5Ag7gt1aIjzrLTwpU
xxjh1s+ORgDNIAkxaSFVstk0+dWD86FAx0rWNr4/KKylmIlyspuTcioCkZYuO+wX
I3NXER/TXG+rrqeQXXhF/UaSjQ16uRoaL2Hu2Ly1cn8Hk0A/Tw7yG/UTPXJtPK08
i2e6Zhe8jpD/YQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 07:26:50 2026 by rpki-client