Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File: oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier: IUppJGXM3CLUkHw20dJJ7RCqBK7X5T7RmmbwuN6m7dk=
Subject key identifier: 8E:B3:84:27:A2:BC:6D:47:39:74:2B:12:37:58:8D:A7:73:14:FD:91
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial: 019D37F70CC64BF63EB9C35374DAE8CE4052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: 4G9wBnQj2bLIhwU-J0N7Nhw1T6o.roa (hash: Ss9C5TAkahNNPv2NrvJMx+wEmDF2hJNXCum/fvM8j7Q=)
2: Vl6FMo5wU6v03xk_-33ZrOY3oKg.roa (hash: kIWRHZYG1x8ZuZJSnfYu/2Gl4pYaKJvwzf9u/k0+4/Y=)
3: eT2IWPcNjqqYvSRa6WeHp3LmJtA.roa (hash: fIsFP2V7Kpl6K2IEcKVfzsXOwzj5Bhe8+tMHJi7fIAI=)
4: fDPuMYjL7iwuQzRHQw3ok372mfU.roa (hash: zWt5a5APl7Cb8l+lYNIvqdjQJV2PNl8C2Gw5qS4KES8=)
5: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: +PGxK48o2OkeIXsEO6baNvgjCQKvx91w3EG5S4cF9t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0c:c6:4b:f6:3e:b9:c3:53:74:da:e8:ce:40:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=8eb38427a2bc6d4739742b1237588da77314fd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:31:e7:93:d9:ae:1f:a3:db:6f:6e:9b:50:
9c:d8:58:75:87:a3:fc:ca:97:1b:e3:2d:cf:49:f3:
a9:41:fb:ea:6b:a3:cf:fa:5f:95:96:fc:71:0a:bb:
a2:72:fe:a2:cc:05:a4:23:4a:7d:ba:d0:3b:d3:05:
ee:4d:6f:4c:63:18:58:cb:4f:55:ea:9f:6d:59:0f:
54:bc:48:79:80:d3:3a:2c:46:62:98:5b:91:38:5a:
f5:1c:8b:bc:1c:47:3a:4d:52:9f:c3:4f:03:5e:57:
99:b9:b9:32:9a:7d:50:65:0b:5f:b1:d1:0d:3d:ef:
8d:8a:01:4c:f2:06:65:17:04:f4:d3:a5:12:63:da:
a4:6a:31:f9:5e:97:34:b3:29:d7:a0:e1:1c:b8:ea:
6b:8c:77:93:32:e2:11:40:be:d0:22:de:59:13:22:
f9:0f:85:81:28:ea:40:08:b4:05:f5:0a:0a:d7:3a:
52:da:2b:c2:9d:16:e3:09:d2:72:11:ff:4d:85:b3:
17:c4:91:80:f7:5b:26:40:1b:32:18:74:8e:e1:fc:
25:c8:41:d2:9f:11:f7:ea:dd:e9:18:69:79:b8:af:
a3:a6:9b:24:41:0e:bd:78:3d:40:c8:45:45:a4:fc:
7a:19:1a:cc:0a:01:85:33:42:66:f0:66:8d:2f:16:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B3:84:27:A2:BC:6D:47:39:74:2B:12:37:58:8D:A7:73:14:FD:91
X509v3 Authority Key Identifier:
keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0c:44:10:df:08:ec:33:4a:99:1f:76:cf:e2:95:5f:7b:72:
86:fc:ed:60:c7:f7:53:89:08:cb:dc:82:0f:91:a0:64:be:2b:
9e:7a:86:c4:2c:af:e5:f6:f4:78:34:22:62:9f:8a:91:80:fe:
23:ff:5b:41:ad:00:6e:42:18:55:5d:55:92:6e:62:86:6f:e7:
f8:6f:9a:68:7f:3a:76:ac:98:57:7e:dd:7f:77:15:a1:3c:7f:
41:e6:53:49:d0:68:18:f7:db:7b:89:d6:4f:4c:95:d5:8d:c6:
c0:27:2f:d5:a4:c1:8e:4d:39:75:ea:70:d8:06:a9:09:43:b5:
fa:e9:6e:f1:03:71:46:1f:4a:7b:1b:db:6b:ac:97:57:1e:13:
c5:79:0e:3e:91:0d:85:63:b6:44:8e:6e:ce:e1:aa:26:17:0c:
07:c0:5d:b0:ff:00:fa:a8:53:a3:cb:f7:ee:66:b2:12:ce:92:
8a:7a:57:ad:3d:19:57:32:48:69:a9:ec:64:8c:5d:98:26:ae:
98:5e:f5:ba:77:ed:b8:08:9d:93:dd:74:1f:7a:40:23:50:10:
47:c3:99:86:88:1e:eb:f0:56:96:34:83:06:08:74:20:27:cd:
c5:1f:06:2b:a6:3a:08:89:18:ea:82:78:d4:b7:af:6e:10:d7:
d0:a6:cd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:52 2026 by rpki-client