Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: IWp1JVo3sP+/cSIZN71XP/tZXsIHvPECAfu3hrUU7JA=
Subject key identifier: B7:6D:DF:F8:B5:E3:F7:6C:0F:4F:FE:6E:F1:AF:89:7F:F7:8A:F3:08
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 019D39782B42FF1C94D85E83751DCE1FFDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 12CE
Signing time: Sun 29 Mar 2026 12:01:09 +0000
Manifest this update: Sun 29 Mar 2026 12:01:09 +0000
Manifest next update: Mon 30 Mar 2026 12:01:09 +0000
Files and hashes: 1: DSJIzkN5q_rXnrR_sSD03uwjKLk.roa (hash: RgGL0auNuSKpj8cmVmNM1N0Gw/VXT4lpjwBiD7OAxgM=)
2: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: rrmng42QAzgGH9gtU03ao2Hby9wA4Owp/7nPVWZioF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:2b:42:ff:1c:94:d8:5e:83:75:1d:ce:1f:fd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Mar 29 12:01:09 2026 GMT
Not After : Mar 30 12:01:09 2026 GMT
Subject: CN=b76ddff8b5e3f76c0f4ffe6ef1af897ff78af308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:89:47:ad:1a:c3:86:4a:a0:d3:19:5f:4f:
15:a0:44:8b:a1:72:ad:63:8e:9a:01:b1:96:40:19:
74:5d:56:5b:b8:52:40:56:53:ad:0a:1b:4d:9c:68:
38:b2:ac:a6:37:5c:07:d1:18:51:52:45:21:a4:10:
dd:87:91:2a:c4:c2:f4:90:6a:34:f4:69:26:42:3d:
c5:71:f7:da:13:86:b1:1e:59:88:7c:c4:dc:b7:72:
ff:07:9a:07:9c:98:c9:8e:79:58:ca:81:6a:cf:b4:
a8:77:e9:27:f8:99:ef:6a:06:9b:9b:df:18:54:58:
74:5a:92:6b:9e:cb:15:b3:21:d0:3e:c0:9d:f5:4d:
1b:51:2c:3b:1c:fc:7a:d2:f4:d9:24:82:1a:27:05:
4d:b3:e7:8a:c0:38:83:17:08:35:bf:f8:ad:47:c5:
94:c8:bd:46:15:3e:16:62:26:19:5c:be:6f:37:e7:
d4:b6:da:09:a9:a7:26:fc:d7:7f:94:4b:d9:c0:f3:
e1:94:d2:e4:89:7a:30:bc:83:7c:1b:ad:ab:70:9b:
2d:fa:70:5b:8d:0a:40:49:69:af:e3:38:dd:81:18:
17:6f:e2:5d:37:e4:e4:ed:9a:99:23:05:8e:bc:a3:
f0:b6:da:76:c1:64:b3:d4:f5:af:cb:f4:d4:ff:03:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6D:DF:F8:B5:E3:F7:6C:0F:4F:FE:6E:F1:AF:89:7F:F7:8A:F3:08
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:02:11:8d:fa:d3:42:1b:73:01:ca:a4:5a:34:21:f4:21:05:
a0:83:95:21:b5:8f:0f:e1:0f:6e:da:28:5e:23:db:5a:2d:47:
03:5f:bf:a4:72:58:02:d5:7f:8d:84:16:9a:23:b1:5e:6f:5a:
a2:63:a6:e4:b6:b1:9a:97:92:5c:59:ca:53:2d:d6:5f:1d:75:
9f:62:61:a5:be:3d:f1:28:65:73:fc:8c:cd:ec:34:1f:aa:0a:
b0:2a:c1:2b:b6:5a:f2:3b:8c:78:69:f0:43:c0:13:f3:c5:77:
00:41:32:44:93:8a:d9:83:70:8b:de:29:63:cb:ac:32:cd:2f:
ff:7a:35:28:96:1a:d1:6f:27:47:0e:d4:77:5f:87:24:c3:25:
61:48:fe:21:21:a3:46:d6:24:1f:f1:27:df:e0:a4:a4:23:3f:
6b:c7:1f:b3:2c:6b:87:29:ad:25:8b:58:d6:fa:dc:93:63:3a:
3b:58:47:61:58:e7:3d:cc:46:6b:ff:48:52:3f:5f:71:aa:59:
b1:4e:6a:ce:df:c8:ce:d8:a6:5e:ec:06:9b:02:37:74:fa:07:
d4:d2:1c:73:16:31:ea:bc:13:a4:84:fa:c0:6e:84:68:0b:6b:
86:c8:9a:c1:75:4f:c8:1e:c4:1c:fa:e1:34:e7:9c:df:8b:c7:
35:ff:3f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:29 2026 by rpki-client