Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
File: mOUyD4Vr6C6odOktbYC8b5l4MA4.mft (raw, json)
Hash identifier: b3moLZkB1eIN7sBGv4LelixTB1BV8G3IG4RQhYKgfCU=
Subject key identifier: BB:D0:D9:D3:ED:7F:21:86:D0:BC:93:20:24:52:DC:70:B1:E0:FE:52
Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Certificate serial: 019CE5C95CCEA5CBD32D465E96EA8DCA59A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
Manifest number: 0219
Signing time: Fri 13 Mar 2026 06:01:44 +0000
Manifest this update: Fri 13 Mar 2026 06:01:44 +0000
Manifest next update: Sat 14 Mar 2026 06:01:44 +0000
Files and hashes: 1: 46CB3rmq7ghb0IOigVJMslc8LZI.roa (hash: iNpxmitmZCNCk+8flAyzDSyitulva1I3mwpI1j7ulR8=)
2: cXM4klbaacUguvuXRN4gU4Cio9A.roa (hash: TvSKvxbQqZ/2OHUvXcP+0jqJAZh3aKDn2NH8HHVBK/A=)
3: mOUyD4Vr6C6odOktbYC8b5l4MA4.crl (hash: J1gDEbv6TJFXXBYBuj18rkLEz36TY1FCMrcC3anjmBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:5c:ce:a5:cb:d3:2d:46:5e:96:ea:8d:ca:59:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e
Validity
Not Before: Mar 13 06:01:44 2026 GMT
Not After : Mar 14 06:01:44 2026 GMT
Subject: CN=bbd0d9d3ed7f2186d0bc93202452dc70b1e0fe52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:f1:60:cb:51:df:ba:18:84:fe:b5:99:44:
ea:47:97:6e:fb:e6:6f:cf:d1:2c:b3:cd:f7:33:1e:
75:99:bc:e7:83:bf:bd:70:1b:98:3e:35:18:9f:8b:
ba:e5:00:76:87:34:39:b0:3e:57:b8:39:5c:56:61:
b1:24:1f:0d:64:d7:5a:93:85:8f:48:1d:45:36:85:
0f:de:30:73:76:7a:42:e1:8a:d2:e2:9e:37:f3:69:
64:4a:69:6e:0e:36:13:04:ef:9c:bd:cb:dd:e1:ab:
87:d9:b6:f0:97:0b:fd:79:d5:ad:a4:61:96:de:ba:
ba:8b:ad:51:f0:61:d1:1f:0a:11:63:64:f6:e1:3d:
f8:67:d2:67:5f:a7:4a:8b:68:5e:e2:3b:d6:b1:9a:
e3:24:28:4e:12:64:bb:66:60:6e:a9:39:44:9c:ef:
d4:d8:c6:88:fb:69:1a:aa:c1:a2:cc:f1:79:ad:1d:
47:b1:d3:90:30:49:6c:87:6c:7d:e4:d7:60:1c:7a:
f4:5a:b9:95:2c:2c:e4:3f:b8:23:64:c9:25:19:ad:
3e:28:ca:11:77:f8:64:6c:27:2c:98:a3:0f:67:f0:
7d:72:16:3a:a0:29:6c:2a:0d:7c:e6:09:54:d2:0c:
b3:0a:3c:0e:de:c3:e5:13:a4:35:05:fe:33:0a:70:
af:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D0:D9:D3:ED:7F:21:86:D0:BC:93:20:24:52:DC:70:B1:E0:FE:52
X509v3 Authority Key Identifier:
keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:03:d7:f2:b6:ad:b6:b8:d1:13:ad:ee:3e:d8:8f:8b:60:0a:
73:c3:53:40:d1:e3:f6:a5:00:06:67:87:d9:e6:06:a5:2f:e3:
12:2a:d7:4b:ca:5c:8f:84:fd:b2:27:9d:b1:0e:bb:d6:e2:b2:
cf:ae:fc:98:42:0f:8b:9c:ec:4d:56:29:90:d9:45:fd:26:bc:
c7:d8:64:a6:14:a2:82:43:de:b9:95:09:94:e0:cf:19:1b:1a:
b3:d7:40:1c:ec:51:56:10:04:99:41:aa:c5:5f:4c:c3:fb:3b:
4a:62:f7:56:99:ce:dd:30:42:10:dc:e1:07:51:eb:52:02:33:
53:5b:20:c4:eb:52:6c:c8:71:63:c6:48:56:5b:81:33:22:b8:
18:e9:03:ea:02:6e:62:75:5a:d3:89:34:64:22:4e:4a:99:ad:
b0:c2:8d:45:2a:21:8c:d1:95:20:5d:37:f2:61:e1:7b:be:20:
a7:5c:60:3a:d0:20:9d:c5:77:a5:f8:ad:f9:6e:37:a3:a0:bf:
7a:96:00:15:70:ff:08:73:dc:bf:82:ba:04:8d:07:ea:cc:8e:
74:fd:74:0d:ca:1a:f3:19:bc:83:25:93:c0:1f:78:d0:e3:b4:
ba:71:b6:27:17:9e:ec:be:e5:b5:72:cd:bb:d1:32:f9:46:f8:
6e:68:a3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:27:16 2026 by rpki-client