Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: AvCk7Ih1mhKIPFhopIlPLZQyHEIizFCmincomUYXJaU=
Subject key identifier: 37:8F:35:AB:73:33:F1:56:21:38:90:62:B5:74:0E:3A:76:65:34:B2
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 019CE3D9C9E1F2A77909A4BE4C282E7FD037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 0486
Signing time: Thu 12 Mar 2026 21:00:26 +0000
Manifest this update: Thu 12 Mar 2026 21:00:26 +0000
Manifest next update: Fri 13 Mar 2026 21:00:26 +0000
Files and hashes: 1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: CapS6l0u9ErEVzTduaNRbj4vVfE7PcPsCN0ofNOJIxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:c9:e1:f2:a7:79:09:a4:be:4c:28:2e:7f:d0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Mar 12 21:00:26 2026 GMT
Not After : Mar 13 21:00:26 2026 GMT
Subject: CN=378f35ab7333f15621389062b5740e3a766534b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:e6:aa:37:56:6d:bc:7e:09:85:e4:22:26:
55:b5:0b:de:c6:18:d3:76:9e:7b:f6:73:1b:cd:39:
5a:a2:3f:8c:af:68:f2:9a:d2:dc:c0:cf:94:de:82:
a3:96:8e:c8:4a:b4:48:72:2b:ff:a9:f3:14:a0:8c:
89:6e:ea:04:64:d2:ac:94:aa:6d:6d:2a:4e:48:dc:
a3:4d:65:b9:0c:0e:5e:15:c7:96:71:c7:d1:4c:5f:
b2:51:99:9d:f1:fc:05:cc:20:e0:8e:93:2e:1d:52:
6e:48:39:b4:65:54:3d:29:c1:ff:99:8d:32:91:1d:
5f:dc:19:67:e6:79:af:9c:1f:d6:55:b9:10:01:b0:
ab:cd:96:8c:ec:1b:94:97:22:23:5b:70:f3:fe:6a:
ca:5f:69:98:ba:91:b8:72:41:2d:a3:b1:96:02:6e:
d7:41:26:77:6a:f5:56:4f:09:fe:79:c2:42:78:67:
cb:da:a5:fa:8b:ad:dc:e0:56:2f:fe:57:43:7d:bc:
1f:d2:5f:e9:5b:20:c9:b3:97:ff:5c:1d:8e:51:90:
2d:1a:6b:78:67:49:b3:c4:6c:cb:6e:a6:fd:02:92:
07:8f:c6:b8:e6:89:22:51:ea:09:a8:9a:1d:20:db:
99:59:6d:c3:9f:80:73:9f:8c:23:5c:9b:f7:be:d9:
1d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8F:35:AB:73:33:F1:56:21:38:90:62:B5:74:0E:3A:76:65:34:B2
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:43:46:4a:42:89:7b:75:e3:e7:90:fd:9a:4d:ce:8a:5c:02:
7e:92:1c:5c:3d:44:fb:fc:5a:af:64:bf:33:69:5d:7f:28:4d:
91:c4:42:45:e6:aa:48:4c:21:dc:85:22:be:14:ef:be:ea:21:
09:22:a3:0b:78:22:93:0d:6e:d5:88:43:a2:d6:07:be:62:cd:
92:7f:d1:68:0a:8d:f8:80:c1:18:ea:7d:75:5e:60:e9:bf:7c:
10:de:27:f7:1d:6f:b9:11:c2:f1:7d:14:a2:55:2f:07:01:fe:
d0:4c:5e:a0:10:6b:3b:dd:95:46:56:bb:b2:ca:0e:1b:ff:7d:
30:0d:ec:10:8b:84:a4:eb:e4:03:86:ca:4a:66:89:da:7f:14:
57:3b:23:79:ca:7e:17:f0:1d:7a:58:77:f0:7e:6a:96:ab:4d:
95:59:ed:21:a6:2e:38:7f:ff:58:48:2e:64:69:ac:35:85:60:
6b:9b:30:84:4d:62:c5:28:fc:72:4b:f5:5a:3a:b7:e3:08:fc:
95:73:49:24:3c:ae:d9:2c:9d:d2:0b:72:55:07:61:7e:d7:48:
8c:44:3a:2e:87:a2:f9:ad:22:b0:01:79:a4:da:7e:26:0c:ff:
c1:d7:32:49:c2:5a:f1:17:65:9b:cc:16:5e:2f:b6:0e:b1:59:
79:d6:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:52:04 2026 by rpki-client