Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: D356DSKI0YSs167+UiXdb+UO9I9jC3pW2d4wmuSHw9Q=
Subject key identifier: 5F:8F:33:0C:3E:BB:92:AB:26:71:75:5D:1D:28:7B:4E:F9:77:AD:7D
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 019DAF7CF00CEC893F5BFBE13E0C27C5CB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 0803
Signing time: Tue 21 Apr 2026 10:01:33 +0000
Manifest this update: Tue 21 Apr 2026 10:01:33 +0000
Manifest next update: Wed 22 Apr 2026 10:01:33 +0000
Files and hashes: 1: Z-WbSmra_G1kvyx-Bej3vkhtQis.roa (hash: gk+4vFFmmxKEtInMkLHpcbUkvzWIfqwHSMm2pJIJXSU=)
2: lCTE0e6511lXYUV4jzoQANe1D0c.roa (hash: duBHYLft9CmJTD9gy5FmFbBDQw9Rjhhhi+M/Mn6KU3Y=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: Cfs08VwAABnzCWRvghliueEC705TPTTD4ZGEeGrtTqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:7c:f0:0c:ec:89:3f:5b:fb:e1:3e:0c:27:c5:cb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: Apr 21 10:01:33 2026 GMT
Not After : Apr 22 10:01:33 2026 GMT
Subject: CN=5f8f330c3ebb92ab2671755d1d287b4ef977ad7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:3d:b9:d9:f6:20:72:39:44:9c:a7:9e:66:
02:fe:d4:97:9a:9b:79:fb:6b:58:51:8b:c8:01:c4:
67:20:7f:dc:a5:6d:5c:53:e9:3f:bc:ff:a0:81:b1:
3b:71:31:cf:d1:9d:2c:35:25:77:f2:ac:bf:2a:24:
7e:bf:11:f2:59:57:6a:dd:10:fc:88:a7:02:69:df:
2e:7f:f3:15:d5:6e:24:60:65:76:73:7e:22:30:ed:
6e:75:f5:30:38:b3:4b:f8:da:05:30:4e:d0:bf:a6:
73:1b:0b:69:f2:d9:a9:d1:0e:7e:81:ad:c6:c8:8e:
94:35:df:85:40:9c:c4:31:c3:25:b5:48:40:a4:1c:
74:6d:77:b6:81:ad:56:3e:89:ef:db:d2:d6:e6:98:
f3:2e:63:05:bb:52:2a:30:c2:0d:d3:fa:5d:3e:5a:
34:25:74:3b:51:70:ed:a7:19:ad:f5:09:e0:19:ce:
b7:40:31:af:ab:88:36:1c:59:4d:25:30:f6:f0:e3:
8f:2c:b5:ec:b9:b8:b9:06:77:38:8e:43:cb:3a:fe:
af:f2:a8:c7:83:da:64:1a:32:34:6e:0d:55:e3:d9:
87:cd:c9:00:f0:49:43:df:69:e5:09:6c:d3:76:71:
84:1c:f4:95:ae:54:5d:61:62:43:a3:a1:ab:b7:05:
18:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8F:33:0C:3E:BB:92:AB:26:71:75:5D:1D:28:7B:4E:F9:77:AD:7D
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:99:db:1a:5f:fb:5d:d4:e7:f1:51:9d:58:98:06:f6:54:bd:
0a:31:b8:c2:22:2f:2f:6c:2a:d1:e6:fe:e2:5e:a8:10:44:fc:
1b:0c:a9:2a:67:47:df:0d:25:5f:fe:ce:57:5b:67:9d:1a:a0:
69:58:cb:5e:cf:cf:48:f6:2f:ac:fd:05:60:5f:45:3c:c6:af:
dd:19:ad:e7:d7:f6:80:06:f0:70:22:58:bf:55:9a:56:f9:45:
18:8b:fd:d1:d1:7a:35:4f:44:b1:93:7c:82:53:c8:41:67:84:
40:23:34:e9:b3:be:3f:b0:60:ef:a2:73:67:ec:12:d4:27:ee:
81:6d:b2:40:6a:5b:9d:f4:95:b5:81:de:3e:03:ec:90:44:9f:
55:82:96:ff:08:3b:ce:f4:4c:4b:76:75:13:27:f1:95:a2:7e:
aa:8f:98:2d:c4:75:f0:27:d1:71:40:3b:95:d1:35:a0:5f:1b:
cb:dd:21:12:3d:1e:38:04:84:2a:06:d9:6a:da:43:b4:41:e8:
dd:fb:90:62:a7:bd:fa:90:9b:63:98:76:64:aa:80:66:35:bb:
49:91:79:ad:74:fb:f0:f2:c1:38:1c:73:d6:14:6f:4b:4b:ae:
ac:82:69:fd:5a:a9:3a:62:01:94:a4:1e:f3:66:ed:c1:16:f5:
7e:83:82:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:33:45 2026 by rpki-client