Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: 4Bf05I2eZRzIphi4LRPH8lFBk6EHg/NZxdpZ7fVZlpg=
Subject key identifier: D8:4D:73:E2:A8:93:3A:35:E5:49:B5:D4:A5:CB:DF:94:E7:FD:4B:E6
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 019D390A0973A567072B3719C2E6DFE6D14A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 14B8
Signing time: Sun 29 Mar 2026 10:00:51 +0000
Manifest this update: Sun 29 Mar 2026 10:00:51 +0000
Manifest next update: Mon 30 Mar 2026 10:00:51 +0000
Files and hashes: 1: 1-hcdN0H8sYbxU2FJ2TIpbt1wrcs.roa (hash: +oHH/wDqJPdzoao+MeKrBaUm4lv6BOEi7Q0L1v4HB8k=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: D+x/SaT6GbZPg0LziRIPlsXavZ1JtB/SyqZSoEvFHXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:09:73:a5:67:07:2b:37:19:c2:e6:df:e6:d1:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Mar 29 10:00:51 2026 GMT
Not After : Mar 30 10:00:51 2026 GMT
Subject: CN=d84d73e2a8933a35e549b5d4a5cbdf94e7fd4be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:ba:71:68:65:7b:7a:d5:d0:82:14:4c:75:
af:0d:ac:98:af:c2:c5:3f:6e:db:48:bb:95:2a:3d:
8b:b5:c6:99:69:69:c9:9a:6b:38:87:0a:5f:a0:3c:
4b:90:9d:22:fb:b5:13:36:a0:1a:4f:65:b1:17:85:
da:6d:f4:15:39:a9:6d:4c:32:fe:53:40:69:20:21:
f2:8e:ce:43:6f:d1:07:55:84:7d:bf:a6:08:59:f7:
49:e9:c7:86:3d:26:9c:d6:6a:5a:2a:6d:1b:5d:df:
b6:cc:56:28:f5:e1:50:0f:84:a6:fe:03:73:f1:eb:
1b:3b:11:2e:ca:4b:8f:77:ee:a6:fb:ca:27:96:09:
9c:06:c9:3b:c4:18:43:fd:cb:99:00:66:5f:40:c8:
5c:25:1f:5f:eb:d3:e8:1e:4d:33:67:b1:47:7e:ca:
fb:30:f5:30:5c:a1:e9:cd:94:57:ea:aa:ce:d5:1f:
92:7c:00:7c:41:15:ae:43:02:e6:cc:67:3b:ab:97:
da:a6:5e:30:65:82:89:1b:43:ef:91:9d:0a:65:e3:
4b:91:31:bf:09:4b:6e:cd:de:0e:42:19:1a:ea:3a:
a9:11:90:24:cb:4f:f2:37:83:5c:5f:49:e5:4d:70:
29:f2:2d:89:a2:63:83:fe:26:8b:94:41:bc:4f:b5:
da:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:73:E2:A8:93:3A:35:E5:49:B5:D4:A5:CB:DF:94:E7:FD:4B:E6
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:9a:ee:b7:5f:4f:96:5a:80:0c:25:09:b0:f2:70:4f:0c:
67:46:33:a4:a1:6f:47:66:55:33:d1:59:b7:03:f0:db:cb:e2:
23:de:0b:43:99:23:e2:a9:4a:ff:19:3a:e3:f6:a3:20:5d:0c:
fd:fd:f1:11:63:74:65:2e:b3:da:12:48:fd:57:a6:d4:85:e2:
36:71:ed:17:7e:18:20:e2:d1:c8:b6:db:13:8c:1d:d6:3d:69:
a9:ea:91:d8:16:2c:e9:e1:bc:34:f9:19:b2:70:dc:a8:4d:54:
65:fa:e4:a3:58:6e:3f:ca:18:2f:c4:eb:0d:1c:a4:75:1d:f5:
c6:2f:54:72:48:29:26:07:40:d5:e5:dc:cd:77:d7:43:aa:b3:
25:46:7b:50:a1:21:5e:59:19:9d:b5:6d:c8:22:74:7f:83:9b:
3c:13:0a:f8:31:1c:0b:3c:8a:80:a1:ad:c0:5a:8f:03:db:d5:
70:63:b0:6b:2d:d7:ee:ee:93:0c:1e:bd:82:f1:1a:65:0b:51:
4c:af:b8:32:07:01:ca:09:16:9a:0d:02:b3:87:3d:da:33:d8:
c9:7e:cf:75:42:a2:a5:2f:b6:2f:52:af:aa:d0:9e:7f:00:71:
ed:6c:5d:cb:82:a5:12:e1:00:88:da:0f:66:22:60:05:7c:d5:
09:88:7a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:26 2026 by rpki-client