Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: P3xU4guPaHpCkHBJvELQVDM+XyFT5PO8a+/dvqqDL14=
Subject key identifier: E8:A9:79:8E:7B:93:82:DC:69:08:EB:46:18:C2:01:67:3A:0A:8D:E5
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 019CE1B44FE6481E402ECF798E189AC7EE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 0899
Signing time: Thu 12 Mar 2026 11:00:16 +0000
Manifest this update: Thu 12 Mar 2026 11:00:16 +0000
Manifest next update: Fri 13 Mar 2026 11:00:16 +0000
Files and hashes: 1: 1-dKs6JiGc-gWNM_u3hT68Z-M9-E.roa (hash: NUuaKTsuVI94pE+iA9XsbEXpRar3w3VZVCIsvU2Qp6M=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: oRQtdFV2jkcWEAtUdCf61GWgGmJt2cL1fHhRUQ63tHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 11:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:b4:4f:e6:48:1e:40:2e:cf:79:8e:18:9a:c7:ee:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Mar 12 11:00:16 2026 GMT
Not After : Mar 13 11:00:16 2026 GMT
Subject: CN=e8a9798e7b9382dc6908eb4618c201673a0a8de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:64:45:e7:a9:81:48:84:89:a6:51:29:2c:
f5:93:dd:79:97:ba:4f:9a:ec:14:dd:07:95:07:52:
74:40:95:4e:4e:75:3a:4f:da:8b:21:f8:16:ef:99:
a0:48:d1:5b:83:1f:bb:28:8a:d7:17:8f:4f:cd:0b:
e3:37:8d:fb:d7:15:ed:63:bb:11:91:5d:74:30:84:
56:bd:85:35:b3:ca:7b:c7:66:bc:28:d0:40:90:6d:
ea:a3:77:71:a9:4e:7e:66:d7:73:40:b9:0d:a6:3b:
4b:18:82:d0:85:6d:d0:2e:31:d8:94:a1:ef:cb:df:
29:a6:1f:59:c3:37:1f:8e:5a:12:e4:9f:f3:7f:26:
81:3b:7e:14:2f:e2:0e:8f:5b:4b:4a:8b:36:e7:d2:
97:80:b3:cc:52:51:79:8e:1c:e4:25:db:3b:d8:14:
51:82:62:29:b9:fc:1e:c9:c6:d1:2b:f0:17:d1:56:
38:a7:50:da:d5:cc:ed:d0:d5:fa:56:6e:98:e7:18:
21:e2:d7:72:51:0b:a7:4f:5c:a8:d9:d5:17:48:a6:
e3:ba:39:73:f1:e3:82:1e:8a:02:30:61:33:84:20:
b8:fd:2c:1f:5e:cf:ac:0f:83:7e:5d:5f:d4:91:34:
df:d2:7a:46:86:0c:68:2b:9b:36:5a:35:0c:20:78:
15:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A9:79:8E:7B:93:82:DC:69:08:EB:46:18:C2:01:67:3A:0A:8D:E5
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2f:4d:23:03:1d:58:50:be:b7:bc:2b:52:c0:f9:9f:a0:a8:
eb:f0:16:24:85:d2:9e:66:6b:e9:75:a1:75:6e:99:9a:90:6f:
a9:31:de:29:a4:c9:4a:e8:ea:90:8d:0e:6c:dd:dd:d2:92:f6:
50:3d:7f:0c:9f:2f:78:c7:66:69:6d:47:88:b0:ae:d9:44:01:
b2:40:2b:1e:bc:75:54:4a:b0:0c:4c:4f:1c:c8:e6:64:07:46:
ae:76:19:58:42:aa:2d:6a:4c:58:4b:40:d1:7b:bb:f3:fc:94:
33:01:1e:f7:50:1d:3c:36:2e:46:77:81:73:74:15:45:02:fd:
26:1e:dd:4d:17:d2:48:43:a6:e8:75:8a:ea:1d:ee:02:aa:50:
ef:26:92:e0:b3:f4:43:fd:83:bb:f8:a8:d0:f2:e4:18:ce:84:
62:2f:80:36:f1:c0:05:55:f1:f1:c0:2b:fb:ad:f7:6a:44:86:
f2:bf:29:4b:de:e3:4b:fc:4a:0d:be:95:5d:3a:7e:36:10:66:
cc:6f:cb:73:5a:91:87:7c:39:39:e7:af:09:5d:d6:d1:fc:55:
5c:46:e3:52:9b:fe:50:80:01:36:28:0a:04:57:2a:3d:8a:78:
bb:fa:2e:28:66:19:27:6a:1a:ff:78:fb:2d:bf:6b:15:1f:cf:
3a:8d:97:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:53 2026 by rpki-client