
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier: H8avlq48IjM963Pu9HgXrPQinKrkHgyXyWqH+q9ESj0=
Subject key identifier: C3:E0:79:6E:29:8E:C5:48:3C:93:8D:BD:0A:F7:C1:B3:7C:1A:EC:05
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 019CD8B1A1B6F7D4181EAE6EC271AA1A10BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number: 1863
Signing time: Tue 10 Mar 2026 17:00:45 +0000
Manifest this update: Tue 10 Mar 2026 17:00:45 +0000
Manifest next update: Wed 11 Mar 2026 17:00:45 +0000
Files and hashes: 1: 1D6VdZ93vriFw0vJq3zsA_SVHYQ.roa (hash: wfcEJ94VdVBOXkIE/uYqWDRHCjqI3CAKjspAjKdc5FA=)
2: 6ANG8OJh4OznV_DcZX5PWVtHheM.roa (hash: NqWuvD35Q6Kj2pzaFTf900GyG3MSTmGkmgkkAWcoTkE=)
3: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: oTXr5JTxeKckyxfLDWhmsD+IrwWbjwLvDzkk1gCS4U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 15:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:b1:a1:b6:f7:d4:18:1e:ae:6e:c2:71:aa:1a:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Mar 10 17:00:45 2026 GMT
Not After : Mar 11 17:00:45 2026 GMT
Subject: CN=c3e0796e298ec5483c938dbd0af7c1b37c1aec05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:34:49:3c:20:13:34:a7:44:09:4d:cb:a9:ec:
3e:b3:63:6e:16:e9:bc:7c:75:e0:85:cf:82:bc:f5:
3c:b8:53:02:a2:ef:40:4a:fa:e8:65:b4:3d:7c:ac:
0e:a0:d1:3e:47:54:f6:bb:5d:16:77:32:4d:94:a0:
fd:1c:07:22:c0:a5:5e:a2:2c:61:dd:fe:71:f0:e1:
d7:35:90:ca:e9:a9:25:15:73:31:5a:18:17:99:a1:
57:a7:f1:d3:f1:3c:6c:5e:3b:85:67:48:cc:e8:1e:
d5:81:75:94:41:0b:fe:70:30:27:8b:97:c0:38:1a:
19:e1:c6:82:12:0d:59:51:84:44:7c:a5:18:81:b1:
4d:b7:67:48:7b:d5:8a:a7:ac:27:6a:57:05:46:20:
6d:b7:38:76:23:c1:80:d7:d8:d9:88:a5:10:06:a3:
71:c6:f8:d8:14:31:49:a6:0d:ac:a5:b4:fd:e0:98:
00:90:b3:ba:ba:90:6f:fe:e2:7b:74:b5:ce:01:6c:
5c:31:96:f3:37:dd:f1:6f:a3:d5:e6:80:9f:07:e8:
53:ff:82:09:fb:28:c5:a9:5e:9d:6c:88:5d:ed:cc:
2a:de:58:fd:c8:ee:b6:4c:6f:db:e4:0a:00:c9:6e:
09:70:e2:d9:4f:24:2e:91:3b:c6:cb:6b:ec:2a:3b:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:79:6E:29:8E:C5:48:3C:93:8D:BD:0A:F7:C1:B3:7C:1A:EC:05
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e4:92:6e:f5:ab:97:63:f5:86:94:f9:e8:a2:be:20:2a:12:
17:5b:d1:8c:46:4b:87:77:7f:d7:25:57:20:ce:34:94:97:62:
39:3c:c9:20:33:dc:f4:af:e6:7f:23:60:9e:f3:b4:33:20:4d:
00:04:bf:bf:d3:83:fe:ff:19:1f:1d:68:42:be:9e:e8:a3:d4:
c0:1f:34:de:9e:a6:43:70:bb:63:14:f0:d1:c7:2c:f9:69:be:
74:6e:1f:5f:32:fc:29:7c:30:8a:7b:4f:e0:e8:23:e2:a5:76:
28:6d:cb:90:bc:97:5e:70:c6:67:13:61:de:f7:e3:3c:ed:f8:
59:42:97:ba:1d:60:92:47:cb:84:6b:68:de:ad:1f:1c:a9:db:
3e:87:ba:ea:6f:a6:fe:f0:9b:e1:e6:0f:9a:48:a9:03:d8:20:
33:c5:3e:c9:ab:23:66:b3:4c:89:08:41:28:5f:ca:9d:69:a8:
eb:de:de:bf:42:ef:44:45:9f:34:9b:9e:ba:94:b9:5c:21:c9:
85:8f:b5:b8:af:7a:e8:4f:98:ac:69:89:f0:d7:26:2a:bd:c8:
47:38:87:84:fa:6a:31:93:fb:76:1f:99:d1:c1:81:bb:ac:73:
d8:4f:dc:7a:9a:84:68:c0:f8:a5:d4:f4:7b:33:57:39:c3:73:
a1:45:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 20:32:35 2026 by rpki-client