Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
File: a-OcMb6T9W5jvSbVscBy3HdTGeY.mft (raw, json)
Hash identifier: woDYatK0t3g2t4MdWyebyBS/ll8FGr7dh6m+lSkWkJo=
Subject key identifier: 0F:7B:B2:EF:D4:23:1D:0C:EB:94:8D:3F:06:91:9B:A5:6B:89:20:B2
Authority key identifier: 6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
Certificate issuer: /CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Certificate serial: 019D394136A40757D7F1EDADFF4D52E11AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
Manifest number: 0660
Signing time: Sun 29 Mar 2026 11:01:08 +0000
Manifest this update: Sun 29 Mar 2026 11:01:08 +0000
Manifest next update: Mon 30 Mar 2026 11:01:08 +0000
Files and hashes: 1: a-OcMb6T9W5jvSbVscBy3HdTGeY.crl (hash: 6mN+f+L+TV6a0y/KYYB9EDXXG50pm1Zu8SNwtfLvNxQ=)
2: xmo5IxQ49b2iTuzQ5nnDoyN-_5c.roa (hash: TuBiRPDvmK33i1NU+I9Xz6NP+awkXIf9a5QeFcH5ZdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:36:a4:07:57:d7:f1:ed:ad:ff:4d:52:e1:1a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be39c31be93f56e63bd26d5b1c072dc775319e6
Validity
Not Before: Mar 29 11:01:08 2026 GMT
Not After : Mar 30 11:01:08 2026 GMT
Subject: CN=0f7bb2efd4231d0ceb948d3f06919ba56b8920b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f5:51:fd:f6:34:19:7c:c9:95:08:ce:a8:85:
ba:dc:8c:4b:b2:94:fb:2f:d0:f8:94:77:4a:5d:fa:
20:de:cf:06:ed:67:6e:32:c9:f1:e8:c8:71:c0:fb:
0a:22:93:6a:8f:9b:d3:32:fd:7b:35:5f:c0:44:e1:
76:e8:34:1c:e0:e7:a6:3c:0c:fa:e1:72:bd:3d:2c:
b2:bb:3c:08:b3:48:35:59:2b:85:54:8c:0f:63:68:
ab:d1:6c:35:5c:0d:10:37:26:d4:b4:85:94:49:e3:
55:5b:19:a0:de:77:b0:ce:bb:f0:f5:3d:64:80:b4:
27:99:a9:1c:ea:71:98:c8:9b:cc:2b:18:0b:bb:42:
e2:c3:ac:a3:dc:86:1e:ee:a9:45:d6:38:95:e8:e7:
84:3f:e3:b6:fc:7e:65:38:4d:05:6a:3c:90:df:65:
a5:eb:db:a2:f0:8b:e1:8d:e9:de:0e:4c:27:f8:69:
b1:90:78:a8:4c:36:6e:05:4b:fc:76:9d:ae:c1:ce:
d0:1d:d3:d6:95:c5:dc:62:f8:aa:b3:d8:cc:b0:4e:
99:da:af:87:6c:49:80:d9:36:36:d8:70:32:1b:a3:
79:94:22:a6:54:77:be:8c:2f:e4:f6:d0:34:0c:b7:
a9:e3:b2:4f:61:ce:ee:1a:7e:66:53:af:38:28:58:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7B:B2:EF:D4:23:1D:0C:EB:94:8D:3F:06:91:9B:A5:6B:89:20:B2
X509v3 Authority Key Identifier:
keyid:6B:E3:9C:31:BE:93:F5:6E:63:BD:26:D5:B1:C0:72:DC:77:53:19:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-OcMb6T9W5jvSbVscBy3HdTGeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/03c9d3-0e25-4cc7-96a3-117bf42941ca/1/a-OcMb6T9W5jvSbVscBy3HdTGeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8c:86:01:36:d5:dc:3a:97:3d:cf:2f:d5:54:0c:12:b4:48:
bf:f0:ce:e3:3e:73:04:c7:95:81:ac:39:6c:06:58:3c:14:33:
14:cc:14:10:7b:f8:ed:1e:10:15:8a:e5:e6:90:61:4b:6a:e5:
5f:b2:c4:dd:e1:7d:8e:65:21:17:7f:e9:26:e7:31:2d:f0:3a:
ae:ba:b5:c1:5e:40:61:3e:0d:80:34:3a:58:d0:48:eb:4d:13:
1e:c1:5e:6c:e5:1b:50:bc:02:c7:52:6e:d3:41:47:c5:8e:4a:
b2:00:a5:da:3d:ae:6b:17:72:73:fe:1d:27:50:ab:0e:47:ae:
81:93:d9:7a:ab:25:fd:d5:22:d3:e9:0f:0a:38:2d:07:e7:4e:
ea:3f:dd:98:ff:3a:0d:7e:f2:09:e4:b4:75:02:04:d4:c7:8a:
86:eb:b0:73:89:56:2b:e4:0f:a0:33:37:b3:b2:f5:6b:d9:bf:
55:0f:da:74:8f:e5:3f:84:f3:8c:81:fe:bb:17:42:6b:2b:b0:
d0:02:c8:68:6f:48:9d:63:58:5b:ab:34:ae:93:12:01:da:42:
3c:1b:e6:07:6b:62:4f:4b:24:57:82:1f:5d:ec:99:e7:e0:ba:
12:42:91:a2:55:b5:46:2f:bc:7d:8e:02:f6:87:41:b5:c2:52:
3a:96:47:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:08 2026 by rpki-client