Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
File: OZPVTmOQgKRsP-PViqh-MF22mtE.mft (raw, json)
Hash identifier: NHNmAwXJ789MA+B8ZAEiR86LqfQYzM8g8aAefvMYF9I=
Subject key identifier: 61:DC:80:13:6E:87:85:2F:97:59:BE:6B:2C:45:8E:19:2C:A9:E3:8D
Authority key identifier: 39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
Certificate issuer: /CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Certificate serial: 019D37F77A4A0A78702A4E7DECFB1E037579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
Manifest number: 1551
Signing time: Sun 29 Mar 2026 05:00:58 +0000
Manifest this update: Sun 29 Mar 2026 05:00:58 +0000
Manifest next update: Mon 30 Mar 2026 05:00:58 +0000
Files and hashes: 1: 4wCH1xXH2AmEqNEibg1P7FM72SE.roa (hash: 1jaXMinq6qu7nzoECfPCDfNYeYpFgouOjB2jk7Nl0Sw=)
2: OZPVTmOQgKRsP-PViqh-MF22mtE.crl (hash: 4EpMDqkYYWFRWOwD26tPmJTpiOd3Y0jjh/hu5CCPakc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7a:4a:0a:78:70:2a:4e:7d:ec:fb:1e:03:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3993d54e639080a46c3fe3d58aa87e305db69ad1
Validity
Not Before: Mar 29 05:00:58 2026 GMT
Not After : Mar 30 05:00:58 2026 GMT
Subject: CN=61dc80136e87852f9759be6b2c458e192ca9e38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:35:5f:a1:a1:ba:2a:76:b3:03:65:ba:ae:
ba:33:dc:a1:c5:ef:99:5a:cc:2e:2c:18:f2:bb:3c:
fc:91:0b:28:24:fa:ca:48:b6:f6:b3:4c:96:70:0b:
23:d4:d0:7d:45:ab:0e:b9:b9:e2:80:eb:f4:d4:3c:
8f:68:d4:5f:56:31:11:22:54:f5:d1:9c:b6:1c:51:
f0:6a:9f:26:14:95:52:cc:76:fb:5e:65:18:17:09:
21:d9:a7:99:21:b2:20:9a:75:c8:fc:dd:44:1d:ba:
60:c5:b3:f3:0c:25:1d:b6:76:e1:50:18:fd:47:12:
2d:d2:f8:49:10:bf:23:f0:8b:b9:1b:29:68:ae:58:
c2:6a:4d:c5:47:55:4d:5a:6e:aa:c6:e9:fc:aa:5a:
37:51:c4:45:8e:81:22:f8:d0:47:34:d5:0a:24:1e:
41:62:01:43:16:59:13:2c:99:8a:bf:3e:24:38:e9:
5d:e9:06:7b:88:79:1e:04:38:08:46:66:0d:24:0e:
f6:77:43:3f:b3:4e:d1:22:1a:b7:b4:56:ab:84:0e:
d1:e5:dd:5d:6d:82:a0:d3:52:e0:d4:46:be:34:ce:
e4:f1:c7:18:df:fb:97:36:65:c6:59:47:4f:2e:32:
09:f2:85:00:8c:54:57:4c:ae:4b:f5:ac:3a:fc:5c:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DC:80:13:6E:87:85:2F:97:59:BE:6B:2C:45:8E:19:2C:A9:E3:8D
X509v3 Authority Key Identifier:
keyid:39:93:D5:4E:63:90:80:A4:6C:3F:E3:D5:8A:A8:7E:30:5D:B6:9A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZPVTmOQgKRsP-PViqh-MF22mtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/80959d-f5c4-4ac9-ad13-d48fbc1a243b/1/OZPVTmOQgKRsP-PViqh-MF22mtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ca:d2:56:35:6a:28:a0:c2:ec:5c:21:41:b9:0b:4c:b5:41:
6d:d4:62:15:ff:8f:93:8c:dd:d2:cc:ac:3b:08:6f:ee:48:f6:
bf:86:09:08:ae:a3:4e:47:e4:35:c1:02:a9:6e:55:f4:6f:c9:
fa:8d:33:c2:e3:b9:48:d4:04:a4:02:cb:d9:56:8b:82:dc:94:
d1:e5:93:8b:85:2b:ee:7c:1a:bf:df:c5:79:26:3e:46:5c:4b:
3d:4f:e9:44:e0:75:48:14:1b:10:39:66:87:32:c4:7f:ba:fc:
b8:ea:f3:cf:d3:c8:18:95:a9:bf:76:3e:00:4d:6d:65:e2:8a:
af:62:e6:da:d2:a5:a2:80:53:d7:b4:ce:57:78:5f:b4:3c:54:
a9:85:ff:dd:ef:b6:3d:47:c0:11:76:22:eb:c4:46:99:e2:e4:
41:09:1f:d2:dd:e4:f3:86:df:58:4e:86:62:35:0b:67:8a:e1:
cb:ad:1c:ab:99:37:91:7c:63:26:c3:e2:b0:5c:82:f5:46:8d:
21:e7:a8:80:2c:72:0a:d9:64:80:8f:0b:83:a3:88:71:29:dd:
70:cb:b3:e3:b2:27:d9:82:89:b5:eb:a2:f8:cd:ec:c6:11:5b:
72:72:02:66:e8:38:62:53:cf:61:0a:bd:5d:dd:70:0d:10:c2:
cb:67:24:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:31 2026 by rpki-client