Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: +Y1UhJEFOgARFSKDTqyBnSVyiVfr/JoHAkK4yrptb4s=
Subject key identifier: EF:B4:FF:98:41:E4:EC:B1:D6:3F:A4:4C:24:A9:4B:63:CF:FC:DE:22
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 019D38D2F7C2B773AF55FC27F1E12CD1F8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 1472
Signing time: Sun 29 Mar 2026 09:00:43 +0000
Manifest this update: Sun 29 Mar 2026 09:00:43 +0000
Manifest next update: Mon 30 Mar 2026 09:00:43 +0000
Files and hashes: 1: GhCvmgJfuG506WuiaBMBgDUJQZU.roa (hash: I8NuJF/bk5fAsj3b12qVIfzMf7umbiG0VV3yAbXwHJo=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: 29J93f7poXhfPMVfUzV96d6+2aeZ74M5FtTLdP8qCjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f7:c2:b7:73:af:55:fc:27:f1:e1:2c:d1:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Mar 29 09:00:43 2026 GMT
Not After : Mar 30 09:00:43 2026 GMT
Subject: CN=efb4ff9841e4ecb1d63fa44c24a94b63cffcde22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d1:d5:60:95:3d:74:9e:7c:28:46:25:cf:75:
d6:24:a8:52:d1:e4:df:5e:17:d3:65:65:a6:94:9a:
ff:eb:2f:4c:8f:09:6d:f4:69:a3:8b:b8:b0:02:91:
7a:da:9a:a1:a4:0d:ca:72:ad:64:8c:f3:6f:20:2d:
ee:49:c1:d5:c7:76:88:6d:a0:fe:9d:cd:cb:c1:00:
3b:ea:87:ff:f9:c4:c5:41:2b:c8:91:ba:ff:29:fd:
db:52:57:b6:ce:1f:49:9e:06:53:af:d0:5a:79:d4:
dd:c5:74:9e:59:2c:0f:42:1b:b1:d0:02:95:9b:a7:
d4:54:1a:6f:93:62:1d:fa:57:6f:1b:e2:11:d6:f0:
17:5d:13:dc:e9:36:46:c3:bb:d9:3c:3d:25:43:72:
b1:25:00:5d:84:10:ef:71:25:67:6f:f5:23:b5:f4:
76:61:77:96:1f:78:a0:52:1f:ef:54:ec:a0:9d:1a:
16:ab:f2:2a:e1:00:25:ea:cf:df:65:18:9a:24:ab:
9e:4a:1e:01:a1:0a:50:b4:33:d1:fc:53:7f:4b:20:
b5:38:17:cd:40:c5:cb:ad:4a:f3:51:2c:68:4b:f4:
e1:d6:8e:d2:85:b6:aa:6b:9b:09:0d:22:83:3d:68:
20:9d:79:9a:8c:ef:00:66:a1:b9:69:75:ce:a0:a1:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:FF:98:41:E4:EC:B1:D6:3F:A4:4C:24:A9:4B:63:CF:FC:DE:22
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ba:45:2c:12:d1:62:ef:77:88:f3:61:49:fb:c9:db:34:5f:
2a:a9:f7:02:e9:aa:c9:c7:5a:1e:3c:c8:17:c7:88:eb:78:9a:
d8:9c:ff:6d:8d:ba:44:5e:23:6b:17:15:27:b1:57:ab:3e:7e:
3b:a7:1c:c1:50:02:2a:c0:d5:4a:53:e0:b5:59:05:9b:d6:6b:
41:e3:d4:c9:04:84:96:81:9f:78:bd:ef:1c:11:b5:dd:18:0c:
af:aa:2d:2b:f1:1f:d0:d1:cc:79:3d:bf:58:f2:57:05:ca:a5:
98:b6:9d:5b:09:ca:8a:fe:c9:1c:48:fe:c4:82:e8:1f:80:95:
84:0c:08:36:f2:9a:49:57:22:b8:bb:d2:28:9b:6c:69:6e:e5:
d3:3b:32:7d:b2:0c:0a:08:71:b7:b4:c8:c4:d1:92:cf:c6:3e:
32:42:0a:96:cd:c0:3a:83:0a:83:66:0d:b0:c9:ac:48:c6:f0:
8a:88:f6:40:be:6e:25:d4:ff:a0:cf:58:35:6f:9a:3c:2d:3c:
a0:0f:38:cb:3b:67:ca:7d:66:97:30:d1:bd:f5:36:5e:ee:a2:
ba:a1:48:7c:18:aa:c8:5b:1d:2d:cf:d0:21:14:8d:da:48:ca:
c4:0e:f9:11:53:71:61:a8:82:59:75:23:fd:a2:38:55:ce:12:
7b:01:0d:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040vfCt3OvVfwn8eEs0fjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0
M2I0Y2IwHhcNMjYwMzI5MDkwMDQzWhcNMjYwMzMwMDkwMDQzWjAzMTEwLwYDVQQD
EyhlZmI0ZmY5ODQxZTRlY2IxZDYzZmE0NGMyNGE5NGI2M2NmZmNkZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NHVYJU9dJ58KEYlz3XWJKhS0eTf
XhfTZWWmlJr/6y9Mjwlt9Gmji7iwApF62pqhpA3Kcq1kjPNvIC3uScHVx3aIbaD+
nc3LwQA76of/+cTFQSvIkbr/Kf3bUle2zh9JngZTr9BaedTdxXSeWSwPQhux0AKV
m6fUVBpvk2Id+ldvG+IR1vAXXRPc6TZGw7vZPD0lQ3KxJQBdhBDvcSVnb/UjtfR2
YXeWH3igUh/vVOygnRoWq/Iq4QAl6s/fZRiaJKueSh4BoQpQtDPR/FN/SyC1OBfN
QMXLrUrzUSxoS/Th1o7Shbaqa5sJDSKDPWggnXmajO8AZqG5aXXOoKGSNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+0/5hB5Oyx1j+kTCSpS2PP/N4iMB8GA1UdIwQY
MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt
NzQ4Zjc4NzgzODhhLzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh
LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrpFLBLR
Yu93iPNhSfvJ2zRfKqn3AumqycdaHjzIF8eI63ia2Jz/bY26RF4jaxcVJ7FXqz5+
O6ccwVACKsDVSlPgtVkFm9ZrQePUyQSEloGfeL3vHBG13RgMr6otK/Ef0NHMeT2/
WPJXBcqlmLadWwnKiv7JHEj+xILoH4CVhAwINvKaSVciuLvSKJtsaW7l0zsyfbIM
Cghxt7TIxNGSz8Y+MkIKls3AOoMKg2YNsMmsSMbwioj2QL5uJdT/oM9YNW+aPC08
oA84yztnyn1mlzDRvfU2Xu6iuqFIfBiqyFsdLc/QIRSN2kjKxA75EVNxYaiCWXUj
/aI4Vc4SewENOw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:10 2026 by rpki-client