Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
File: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft (raw, json)
Hash identifier: iqnWey/j9C+oPn4t+1Lmqh1Es2tiFKCdLUZoZ2H7u8Y=
Subject key identifier: 7E:C8:D7:09:A3:30:E3:49:BA:ED:65:08:7C:0C:17:BD:27:BE:E1:B7
Authority key identifier: 39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
Certificate issuer: /CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Certificate serial: 019CE71241A63B111DCEDC27866E1512E237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
Manifest number: 0D88
Signing time: Fri 13 Mar 2026 12:00:58 +0000
Manifest this update: Fri 13 Mar 2026 12:00:58 +0000
Manifest next update: Sat 14 Mar 2026 12:00:58 +0000
Files and hashes: 1: OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl (hash: I66fXV8m8I7VRfDj09KSLsB7+WwH8GtCkmcyscEtlEc=)
2: UFBgy25q3CguK3nxfqwvatepW1g.roa (hash: m6Q6Vl1NfvutDppfODeVLNYdAatkJRM43X4ANyU2Y1Q=)
3: opow8uP9IKSNWNqVgii4cTwADfA.roa (hash: +b/EweslPo3iR9ssvZX7aiO4HVHajEP37IxcMi09yZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:12:41:a6:3b:11:1d:ce:dc:27:86:6e:15:12:e2:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a3cebb811046a0966e9554d07e5d16b36dbf04
Validity
Not Before: Mar 13 12:00:58 2026 GMT
Not After : Mar 14 12:00:58 2026 GMT
Subject: CN=7ec8d709a330e349baed65087c0c17bd27bee1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f5:85:3d:86:66:03:d5:40:97:9c:40:38:b0:
fa:a0:1d:37:7a:ad:eb:eb:91:a0:86:fe:4f:b6:17:
5c:01:92:a4:b3:da:f6:4c:a9:03:39:1d:c4:5f:eb:
b9:b4:48:4d:c9:94:ce:47:16:68:08:c9:e3:9b:7d:
37:80:c8:4b:3c:3a:4a:10:3b:23:77:5b:33:f9:4d:
4f:70:24:5c:7c:f3:d4:74:f4:5f:21:9e:6e:bc:77:
bb:71:a4:9d:de:20:11:eb:3a:7d:60:e2:f4:7d:19:
36:df:2f:89:6b:08:6d:95:97:6f:28:3c:0e:18:de:
60:67:fb:ee:31:45:92:d3:66:e5:75:34:13:ee:16:
db:31:1b:0a:84:dd:29:7f:84:fb:dd:d6:f4:2e:a9:
c8:28:68:fc:f9:64:78:b5:7a:e9:1c:34:fe:0e:f1:
44:f6:b1:d8:dd:58:bf:e0:89:18:d9:d0:6d:55:67:
77:57:11:ad:aa:26:8b:25:ce:82:5c:04:e7:c1:1a:
ec:e5:d9:e5:97:2d:a7:10:7f:e0:9e:7e:cf:cc:88:
c2:88:66:f7:f6:9f:d9:0d:c6:a0:db:6d:19:62:02:
f1:c0:9b:46:ec:b6:c4:ef:0f:03:96:45:1e:dc:11:
1f:e9:f0:2b:fc:a9:fa:8a:c5:f4:15:af:6e:db:27:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C8:D7:09:A3:30:E3:49:BA:ED:65:08:7C:0C:17:BD:27:BE:E1:B7
X509v3 Authority Key Identifier:
keyid:39:A3:CE:BB:81:10:46:A0:96:6E:95:54:D0:7E:5D:16:B3:6D:BF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d84a54-188f-4faf-9d45-6f21f4c751f3/1/OaPOu4EQRqCWbpVU0H5dFrNtvwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4d:1e:53:1e:ab:db:8b:79:dd:17:dd:a1:ad:02:8e:bf:ad:
04:40:9f:57:26:1d:f8:c8:1e:1e:71:72:29:56:f2:7e:4f:93:
90:20:9f:cf:cb:a4:b1:6b:9a:8e:c3:23:bf:f7:70:6b:85:ee:
80:81:70:00:5f:aa:fc:8c:96:d9:68:fe:86:19:1c:89:d7:c4:
40:9f:e8:4c:1b:61:ae:69:16:7c:2d:a4:9f:7e:9c:a0:70:68:
8c:76:2b:dd:b6:e0:e9:90:b9:24:3f:07:2b:38:25:dd:01:6b:
3b:c6:f7:b0:92:97:dd:4b:23:c7:f2:8f:0a:a4:00:e7:dd:64:
6d:76:2d:ae:a5:4b:d2:f8:5c:b6:d0:74:1a:31:65:98:96:56:
e5:08:1c:85:d2:01:91:63:7d:a5:76:8b:b5:7f:76:6f:79:78:
28:89:79:b2:58:2f:c1:5b:f1:ba:7c:35:2e:a1:51:a1:0d:bc:
a8:29:11:42:20:c9:ab:88:d3:28:e5:c8:af:3c:15:90:62:20:
af:43:2f:ce:e7:e0:9e:a9:e6:11:8f:a5:5e:9b:7f:8a:bc:14:
28:b8:a3:63:f5:56:41:2d:09:ee:3e:ad:08:e5:ac:84:86:b5:
e5:1a:c7:b5:05:81:dc:5f:0d:31:47:d5:5a:86:17:f6:54:be:
91:08:d8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:09:40 2026 by rpki-client