Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: 6OR8Q2Qe+UZi9F+T8kY0+HcMmih/IAKkLZ/K5glucqo=
Subject key identifier: 75:BA:37:D8:0B:F9:57:6F:DA:18:4B:1F:2D:EB:2F:99:1B:F9:CA:FF
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019CCA5191B633B34143CEE80370BDD5FC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0EF8
Signing time: Sat 07 Mar 2026 22:01:09 +0000
Manifest this update: Sat 07 Mar 2026 22:01:09 +0000
Manifest next update: Sun 08 Mar 2026 22:01:09 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: 4n1aEzyzV/BsPxzYozSOb7pj+P4TLJaBa3sRZqzjNdY=)
2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:51:91:b6:33:b3:41:43:ce:e8:03:70:bd:d5:fc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Mar 7 22:01:09 2026 GMT
Not After : Mar 8 22:01:09 2026 GMT
Subject: CN=75ba37d80bf9576fda184b1f2deb2f991bf9caff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:14:88:8b:6c:58:07:8a:6b:f2:fd:3e:9b:
85:71:05:27:98:9d:05:85:5a:f3:13:31:12:de:d0:
e8:ea:c3:6d:8a:f9:da:64:5c:ba:c1:82:05:19:00:
b4:f3:93:28:67:c9:be:53:23:60:a4:85:6e:ad:d3:
ba:11:e2:33:ed:ea:32:bb:61:cb:a6:2b:c8:d6:88:
f6:a0:df:0d:65:54:36:f0:bd:f8:fd:f3:a8:b6:c4:
69:cd:93:59:be:89:aa:06:dd:75:a4:78:06:1e:c7:
ae:37:e4:fe:05:b0:da:f3:9e:b0:53:50:6f:a8:de:
b5:4b:2b:ca:ff:75:38:32:5f:e0:ad:5d:bc:35:bd:
d7:c9:9e:6a:95:1e:fe:e0:76:cf:d1:78:8b:54:79:
36:45:40:ae:1a:fa:4c:3c:d8:49:61:22:d1:86:02:
cb:30:90:bc:75:e6:96:11:06:2a:ab:7c:cc:cb:e1:
a5:1a:93:7a:fa:96:cb:61:77:df:8c:d6:6b:d8:3d:
2c:f8:bb:23:14:0b:f1:ef:d0:07:0a:a9:c4:40:33:
4a:08:02:12:f6:f3:9e:93:66:de:1d:1e:f2:f5:10:
7d:a2:46:38:55:e6:7a:1e:aa:e7:76:29:96:a1:fe:
a1:fb:e8:53:d3:0f:77:db:53:b7:3f:a0:24:a5:0c:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BA:37:D8:0B:F9:57:6F:DA:18:4B:1F:2D:EB:2F:99:1B:F9:CA:FF
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:25:77:be:21:a0:da:b1:5b:46:e7:cf:04:d0:18:5a:4b:8e:
62:96:54:6a:c1:45:6e:cc:44:23:d7:11:af:45:6c:17:24:1d:
f7:78:93:3b:88:ef:8f:62:c4:90:fe:d0:bb:17:ba:de:9b:86:
2a:86:6a:74:ec:24:9d:32:1c:98:97:b4:ee:9c:d0:97:2c:24:
4b:e1:cf:25:a7:d9:39:36:3d:e4:26:ca:ba:e7:89:d2:9a:50:
4e:5e:eb:7b:2d:3b:a2:f3:e0:1d:7c:6a:2a:92:3e:fe:79:7a:
d0:1b:a2:43:fe:6e:bb:13:64:65:12:3d:9a:d4:53:21:4b:a1:
2e:34:9e:a2:6c:35:a2:92:a0:12:08:f0:30:b7:9b:a4:f8:3c:
41:ac:8c:2a:42:c2:a2:39:1c:6d:c2:1c:8d:a2:90:ea:f1:f9:
1c:20:5b:32:1b:29:56:41:ca:f5:c8:0d:fe:df:2c:ae:a0:bf:
fb:c8:66:30:1f:4b:29:3d:ee:d3:d1:82:5b:24:47:17:33:78:
0f:4e:00:b5:05:d3:c7:5d:7f:8d:f6:f8:d6:96:c9:df:9f:5a:
c8:fc:f3:5f:46:f0:94:88:a9:7f:a4:46:b2:07:94:7c:96:9e:
7b:f6:ba:9b:2e:45:c4:ac:17:fa:fd:e9:e0:0c:79:42:31:1d:
2b:b2:e1:1d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZzKUZG2M7NBQ87oA3C91fwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhODFkYzQ2Y2NlMzljMTZjMjQzOTZmNTVlNjI2M2E2Njlj
N2U3NjkwHhcNMjYwMzA3MjIwMTA5WhcNMjYwMzA4MjIwMTA5WjAzMTEwLwYDVQQD
Eyg3NWJhMzdkODBiZjk1NzZmZGExODRiMWYyZGViMmY5OTFiZjljYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv60UiItsWAeKa/L9PpuFcQUnmJ0F
hVrzEzES3tDo6sNtivnaZFy6wYIFGQC085MoZ8m+UyNgpIVurdO6EeIz7eoyu2HL
pivI1oj2oN8NZVQ28L34/fOotsRpzZNZvomqBt11pHgGHseuN+T+BbDa856wU1Bv
qN61SyvK/3U4Ml/grV28Nb3XyZ5qlR7+4HbP0XiLVHk2RUCuGvpMPNhJYSLRhgLL
MJC8deaWEQYqq3zMy+GlGpN6+pbLYXffjNZr2D0s+LsjFAvx79AHCqnEQDNKCAIS
9vOek2beHR7y9RB9okY4VeZ6HqrndimWof6h++hT0w9321O3P6AkpQzESQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHW6N9gL+Vdv2hhLHy3rL5kb+cr/MB8GA1UdIwQY
MBaAFPqB3EbM45wWwkOW9V5iY6Zpx+dpMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1vSGNSc3pqbkJiQ1E1YjFYbUpqcG1uSDUyay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvOGYwMTgwLTJiNWItNDQxOS1hZDM2
LWY0YjhjYTM3YTFmYi8xLzEtb0hjUnN6am5CYkNRNWIxWG1KanBtbkg1MmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzNjLzhmMDE4MC0yYjViLTQ0MTktYWQzNi1mNGI4Y2EzN2Ex
ZmIvMS8xLW9IY1JzempuQmJDUTViMVhtSmpwbW5INTJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiV3
viGg2rFbRufPBNAYWkuOYpZUasFFbsxEI9cRr0VsFyQd93iTO4jvj2LEkP7Quxe6
3puGKoZqdOwknTIcmJe07pzQlywkS+HPJafZOTY95CbKuueJ0ppQTl7rey07ovPg
HXxqKpI+/nl60BuiQ/5uuxNkZRI9mtRTIUuhLjSeomw1opKgEgjwMLebpPg8QayM
KkLCojkcbcIcjaKQ6vH5HCBbMhspVkHK9cgN/t8srqC/+8hmMB9LKT3u09GCWyRH
FzN4D04AtQXTx11/jfb41pbJ359ayPzzX0bwlIipf6RGsgeUfJaee/a6my5FxKwX
+v3p4Ax5QjEdK7LhHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 8 04:20:01 2026 by rpki-client