Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: RJ8RkzMfvCn9gd2EisPGYg6dqCHIinvOK3CyI1vrzK4=
Subject key identifier: 16:DB:71:1E:8E:F3:4B:C1:98:FB:96:EA:B3:87:11:48:EB:97:CE:88
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019D37C00347206995B03DEDE1D63B12D095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 0368
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: VzjtPsBzS1bvEoDTsHxuKc7/1YQJANIGfXhOVkFz/ug=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:03:47:20:69:95:b0:3d:ed:e1:d6:3b:12:d0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=16db711e8ef34bc198fb96eab3871148eb97ce88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:1a:de:5c:29:db:fc:43:7c:00:d4:5b:7b:
3a:c3:90:05:2b:ab:dd:4f:68:c6:b1:eb:e5:45:7d:
94:1b:b5:97:33:1b:a8:d9:23:db:4b:3f:f9:55:c2:
4b:a2:d3:5d:12:a0:d4:d5:8c:da:a6:a5:35:cd:65:
cd:b9:23:ba:ee:38:db:ce:e4:4d:fc:93:3d:96:26:
f7:c4:4f:8f:04:f0:46:91:11:04:c2:2f:b6:57:08:
4a:26:b5:75:74:10:96:72:dc:99:3e:98:e1:68:c0:
9b:80:32:50:1c:f4:eb:10:f4:df:71:98:63:d9:74:
b6:e7:70:b4:b1:14:a6:da:cb:c6:5c:07:78:56:21:
14:e6:59:06:67:d6:31:7c:fa:45:f2:3f:6d:b1:36:
db:32:12:1d:10:6e:f4:c0:3f:73:ce:d6:c7:6f:52:
6f:e8:31:56:23:cd:29:92:48:8f:42:51:aa:fa:ee:
97:b5:ca:40:94:c6:3f:ea:77:a3:10:85:bb:1d:7c:
9f:b3:02:91:2a:79:4e:76:68:c0:da:30:c1:e7:b4:
fa:f7:37:b0:69:d9:81:b1:b7:ec:17:d8:d2:9f:ef:
d8:4c:7a:d7:39:29:e8:a8:59:ea:34:ad:72:d9:cb:
86:d3:41:dc:c2:9d:b8:0f:17:03:1b:c9:40:92:c0:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:71:1E:8E:F3:4B:C1:98:FB:96:EA:B3:87:11:48:EB:97:CE:88
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:ad:e4:d4:74:01:39:37:41:d3:34:c5:2b:a8:d2:ff:6a:
bb:cf:9e:23:b3:7e:0b:28:73:eb:22:72:99:80:95:76:83:fe:
58:0e:6f:a8:00:bd:cc:25:d7:b1:ba:96:51:80:78:61:97:4c:
2b:2e:4d:89:07:29:2c:53:a8:c7:99:c7:fc:ad:13:c2:01:a4:
b1:15:4d:f9:dc:52:97:ca:9f:a0:b6:a0:9d:26:aa:8a:82:3f:
08:bb:b0:a4:de:4b:0a:de:a9:ce:10:f3:56:11:b4:96:82:f1:
2b:1b:c8:35:6b:60:6e:a6:fa:ac:71:d0:e4:c2:d6:0b:a7:14:
62:a2:ef:2e:6f:63:85:8b:72:cc:f5:00:11:a4:a5:a6:60:09:
fd:c4:a4:6d:7f:cf:71:d8:e0:6b:80:96:36:ce:ec:f8:ea:7c:
b5:9c:65:91:65:be:42:6d:19:06:3a:8b:3e:07:4d:ac:fe:89:
15:bc:7c:ab:a6:55:0d:82:33:c2:b1:1f:81:8f:de:3c:4e:34:
c6:43:6a:e0:f8:75:c9:cd:08:72:f0:58:97:b6:85:76:60:b6:
82:5b:06:c0:36:f6:ac:76:32:3a:47:2e:70:09:7e:de:10:ac:
99:0f:11:ca:37:aa:bd:9e:67:8b:39:b1:5e:f1:14:a3:50:80:
6b:5d:67:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wANHIGmVsD3t4dY7EtCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOGYwMmQ1ZWJjOWU4Yjk1MjFhZjcxMzJiMTJjYjZiYjY1
NjkzYzYwHhcNMjYwMzI5MDQwMDIzWhcNMjYwMzMwMDQwMDIzWjAzMTEwLwYDVQQD
EygxNmRiNzExZThlZjM0YmMxOThmYjk2ZWFiMzg3MTE0OGViOTdjZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb4a3lwp2/xDfADUW3s6w5AFK6vd
T2jGsevlRX2UG7WXMxuo2SPbSz/5VcJLotNdEqDU1YzapqU1zWXNuSO67jjbzuRN
/JM9lib3xE+PBPBGkREEwi+2VwhKJrV1dBCWctyZPpjhaMCbgDJQHPTrEPTfcZhj
2XS253C0sRSm2svGXAd4ViEU5lkGZ9YxfPpF8j9tsTbbMhIdEG70wD9zztbHb1Jv
6DFWI80pkkiPQlGq+u6XtcpAlMY/6nejEIW7HXyfswKRKnlOdmjA2jDB57T69zew
admBsbfsF9jSn+/YTHrXOSnoqFnqNK1y2cuG00Hcwp24DxcDG8lAksB/XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbbcR6O80vBmPuW6rOHEUjrl86IMB8GA1UdIwQY
MBaAFKGPAtXryei5Uhr3EysSy2u2VpPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2Et
NzM5NmU0MmIxODMwLzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy83MWE5N2MtMzVmNC00ZjIxLWE0M2EtNzM5NmU0MmIxODMw
LzEvb1k4QzFldko2TGxTR3ZjVEt4TExhN1pXazhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguWt5NR0
ATk3QdM0xSuo0v9qu8+eI7N+Cyhz6yJymYCVdoP+WA5vqAC9zCXXsbqWUYB4YZdM
Ky5NiQcpLFOox5nH/K0TwgGksRVN+dxSl8qfoLagnSaqioI/CLuwpN5LCt6pzhDz
VhG0loLxKxvINWtgbqb6rHHQ5MLWC6cUYqLvLm9jhYtyzPUAEaSlpmAJ/cSkbX/P
cdjga4CWNs7s+Op8tZxlkWW+Qm0ZBjqLPgdNrP6JFbx8q6ZVDYIzwrEfgY/ePE40
xkNq4Ph1yc0IcvBYl7aFdmC2glsGwDb2rHYyOkcucAl+3hCsmQ8RyjeqvZ5nizmx
XvEUo1CAa11n3g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:52 2026 by rpki-client