Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
File: Ooz8_rg-iPNror8kRduewegvDVQ.mft (raw, json)
Hash identifier: oIenwfdpsgwlPdc8N/sh5RG8hHcNUPG8PohywC79SJQ=
Subject key identifier: 30:B4:68:49:0C:41:A0:A9:7D:EA:16:68:69:C0:E7:EE:A6:22:EF:21
Authority key identifier: 3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
Certificate issuer: /CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Certificate serial: 019D37F76CE18A9D32C59204225EFFF242D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: Ooz8_rg-iPNror8kRduewegvDVQ.crl (hash: FezlJyGkm04wBmw+2O8bV+K950KMkTGcqu+AwAzkwKk=)
2: z0CueOCsUcgJjTlUBl8xuP0ejIo.roa (hash: OHQraT5vhktcGhKnSXjBbZgLeUySm12jN55KrjwZnfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6c:e1:8a:9d:32:c5:92:04:22:5e:ff:f2:42:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8cfcfeb83e88f36ba2bf2445db9ec1e82f0d54
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=30b468490c41a0a97dea166869c0e7eea622ef21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8a:8a:2b:ff:a0:70:8f:45:a3:8b:68:7a:3c:
3c:55:4a:b8:f3:64:d9:ca:65:1a:8b:ec:23:4c:f3:
2b:4e:f0:3d:8d:4c:58:ce:f6:1c:4f:75:ab:79:8b:
98:bd:a9:2e:3a:73:15:d2:7e:04:72:8c:da:6d:5d:
17:6a:b8:a4:b9:23:77:2e:f7:44:44:e0:b9:08:bd:
84:58:e2:f0:44:65:80:45:bc:6c:d8:d3:09:a1:e1:
5e:1e:73:1c:51:ee:d4:f1:b5:41:be:e0:b8:82:9c:
13:b3:0e:fc:32:9b:85:77:52:1e:76:55:b9:a0:b8:
68:e2:59:d0:42:1c:6c:4b:ea:a3:af:d0:2b:c4:4e:
1a:6c:d5:f6:4c:19:da:28:4c:20:d3:fd:61:54:77:
bb:6c:b8:0e:0f:84:c8:a1:a8:fb:42:af:54:c0:83:
20:e3:db:d7:d0:3c:e8:17:6c:4a:a4:7e:67:cc:07:
1d:e5:a8:26:5b:13:ee:e7:c2:fe:9d:2c:90:34:7e:
96:a9:71:e9:63:97:a0:c6:63:98:9d:f6:27:b4:87:
80:4e:8a:bc:d4:48:2b:93:c5:21:4e:78:d8:23:b4:
30:8e:40:8c:41:9a:56:8e:89:e5:66:b3:09:c4:bc:
6b:c2:d4:04:d2:95:d4:92:50:3c:42:e7:fc:f5:de:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B4:68:49:0C:41:A0:A9:7D:EA:16:68:69:C0:E7:EE:A6:22:EF:21
X509v3 Authority Key Identifier:
keyid:3A:8C:FC:FE:B8:3E:88:F3:6B:A2:BF:24:45:DB:9E:C1:E8:2F:0D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooz8_rg-iPNror8kRduewegvDVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/902c1a-29f5-48dd-ada1-6a4eb37a33cc/1/Ooz8_rg-iPNror8kRduewegvDVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:90:44:8a:13:1e:af:07:3f:e5:3f:3e:ac:92:64:5e:c1:2f:
f2:e4:c0:b8:92:19:42:11:fb:d0:1c:8a:29:6e:b7:cc:5c:f5:
3d:86:8f:d4:eb:7e:8f:cc:40:d5:67:71:e9:6a:90:f7:21:12:
c7:03:d2:cf:d8:27:86:c0:46:7c:c4:ea:b8:2a:5e:20:80:b2:
34:1f:9b:d6:2b:e1:4e:02:5b:63:06:5d:46:aa:77:e1:f2:6b:
09:b4:f1:74:a7:44:32:e3:c3:91:c4:d3:09:80:bf:cc:9b:9d:
d4:88:ee:47:98:74:64:b4:83:a2:05:83:92:e5:b1:27:42:14:
8b:3a:47:f5:e6:f9:42:9a:9f:ac:a8:11:fd:3e:14:95:7b:6b:
ce:af:ec:64:d0:7d:26:da:27:76:18:c1:12:bf:ee:21:88:e3:
15:da:02:fb:7a:18:d0:f9:ea:fb:31:df:40:dc:18:6c:3a:98:
62:7a:09:9b:77:66:79:b3:ca:63:fb:24:18:f3:ab:f0:05:bf:
7d:85:a0:b9:79:a1:40:23:c2:96:91:a8:84:5d:b9:0a:24:7b:
a2:cd:f5:dd:81:48:4e:e3:51:52:33:69:a3:12:01:cf:c2:ba:
14:dc:74:da:8e:0e:4b:95:86:16:b3:13:a7:4e:b3:b2:50:1c:
76:e0:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:24 2026 by rpki-client