Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier: bL5KQQcyj4RSZWuAJwPZnlkJ958rAIlMpX9PYHauwZE=
Subject key identifier: B2:E6:98:2C:EB:7C:DA:93:94:C3:7C:CB:B9:33:05:1C:3E:C7:03:61
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 019D39782176166F7104A0F9A8B08B8244DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number: 061F
Signing time: Sun 29 Mar 2026 12:01:07 +0000
Manifest this update: Sun 29 Mar 2026 12:01:07 +0000
Manifest next update: Mon 30 Mar 2026 12:01:07 +0000
Files and hashes: 1: mRzXoHd1mByeqxe7zEzrQOkUywA.roa (hash: 8SKmwd2mxeGHXUa+EavAITPtq3W4rgD8HwfvXh+DLAw=)
2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: S0Aq9XnREr/RkW/travs8Dk729AVzfxfVjSEDOrDCXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:21:76:16:6f:71:04:a0:f9:a8:b0:8b:82:44:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Mar 29 12:01:07 2026 GMT
Not After : Mar 30 12:01:07 2026 GMT
Subject: CN=b2e6982ceb7cda9394c37ccbb933051c3ec70361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ea:37:de:28:81:df:77:0c:ee:0f:92:d4:2d:
2d:53:01:85:ea:4a:a6:43:da:18:ee:ed:04:3b:8d:
c7:0a:0f:17:6a:3c:1d:d7:c5:dd:54:ad:e1:b4:c5:
df:fc:17:71:09:ae:6c:10:54:e1:29:2c:94:8d:d9:
a0:4c:12:70:d6:23:f4:d6:9d:c3:51:2f:b5:b8:3f:
87:8f:26:3c:61:f8:28:dd:37:56:c7:52:bb:18:ec:
f8:17:ac:99:95:9f:a2:0f:62:bf:9b:b4:2b:eb:53:
b4:25:bd:1a:04:22:1d:04:a9:4d:73:67:70:8c:47:
82:3e:0e:00:08:1f:d5:65:cc:fe:f8:9c:bc:7b:72:
33:83:1e:3f:77:b7:be:e6:75:0d:0d:bf:5b:e6:73:
ae:85:92:78:5d:f0:5c:b0:17:b4:32:74:98:d9:38:
2f:3b:e8:30:9f:8f:a1:21:08:c8:6f:5b:bd:12:76:
cc:e4:d9:ac:98:48:7a:d2:35:14:70:cb:cf:94:8f:
00:c3:92:e8:43:91:90:93:ca:d1:36:10:55:71:a8:
2a:26:bd:57:a1:e7:50:28:8d:dc:88:91:ca:6e:91:
51:db:9f:1e:41:6d:8e:a4:95:d4:3a:24:08:2a:34:
38:a0:3e:1e:40:e3:59:ed:cb:aa:28:bb:bc:ee:49:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E6:98:2C:EB:7C:DA:93:94:C3:7C:CB:B9:33:05:1C:3E:C7:03:61
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:cd:9d:4b:5c:58:4c:51:b4:8e:b0:ba:20:0e:e9:36:3e:a6:
3e:16:8a:57:ea:3d:67:71:ba:33:b7:c9:83:82:87:36:8a:7a:
be:46:fb:ef:38:44:03:93:b2:ee:79:97:79:61:31:31:d6:0d:
d6:49:ad:20:dd:83:60:c0:ce:17:03:dd:c3:63:c0:e6:e2:98:
cb:47:15:bb:81:0f:70:cf:db:35:31:ea:e3:19:47:8e:58:c7:
ab:19:f6:4c:6d:a6:0e:54:d7:ce:0f:4e:66:db:97:aa:10:53:
08:75:84:f0:04:04:54:50:41:3d:61:e8:b3:b6:43:40:3f:51:
60:65:aa:26:81:06:6f:0b:8d:9f:f4:2d:8c:31:a5:3f:cb:8e:
96:07:c8:6e:f9:f1:5e:d7:97:26:cf:27:0e:ab:59:f7:17:86:
4c:f2:e4:fe:32:64:c5:7e:0b:87:e7:fb:e2:c6:7f:b5:d7:2e:
d6:26:7e:f2:37:4c:64:38:8e:82:91:19:fc:19:9a:72:d4:15:
7f:b1:55:70:3b:a3:6b:d5:42:6d:84:4d:f3:0f:26:e9:5d:a6:
aa:65:76:8c:78:4a:de:97:60:cc:39:84:22:e4:0d:15:b4:99:
cc:14:7b:34:3f:6a:52:82:b3:f6:b4:19:21:03:ed:4d:67:7e:
02:d9:2e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:17 2026 by rpki-client