Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
File: txOOSEDKo6G9UYUnFKE1-w6DfEU.mft (raw, json)
Hash identifier: rA2CImLTc0WLFJ2faqaImMZ6PW4WAehpjsHEuvO1y3k=
Subject key identifier: C2:D2:2D:7D:D8:98:2D:91:CB:45:71:E8:96:DF:84:65:BF:1E:10:41
Authority key identifier: B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45
Certificate issuer: /CN=b7138e4840caa3a1bd51852714a135fb0e837c45
Certificate serial: 019D3977C3BF6B11B765D7F7E38919D7084D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
Manifest number: 0111
Signing time: Sun 29 Mar 2026 12:00:43 +0000
Manifest this update: Sun 29 Mar 2026 12:00:43 +0000
Manifest next update: Mon 30 Mar 2026 12:00:43 +0000
Files and hashes: 1: MQETek41Wy3jt_rGNyu3Hn-7_EA.roa (hash: d25pnju/DR6S1vf/CWN7TeMWaDuW0Zyl4oVi8NH6iUw=)
2: txOOSEDKo6G9UYUnFKE1-w6DfEU.crl (hash: Ry5Xbfu93u8szQdnp65PRoBCZbRlLN79Fu4aSGWf6Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c3:bf:6b:11:b7:65:d7:f7:e3:89:19:d7:08:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7138e4840caa3a1bd51852714a135fb0e837c45
Validity
Not Before: Mar 29 12:00:43 2026 GMT
Not After : Mar 30 12:00:43 2026 GMT
Subject: CN=c2d22d7dd8982d91cb4571e896df8465bf1e1041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:38:d0:69:a1:31:8c:66:22:51:90:78:00:69:
70:5f:e2:77:ba:30:ad:bd:39:ea:7e:ae:4d:30:fc:
33:21:3c:11:a7:23:83:e7:28:fc:64:c6:04:f7:cb:
e4:e8:74:14:d1:f3:ac:d1:c9:9e:f1:2f:8a:c2:2b:
a8:0b:af:1a:f2:d3:32:d8:a4:bd:63:e4:9d:52:f1:
b9:d1:ae:d3:8e:ba:7a:36:d4:6f:e2:a3:5e:e2:6e:
c3:53:3d:27:0c:ec:7c:a1:8c:0d:fe:67:8e:c9:81:
d6:c1:e0:fc:54:d5:34:0d:1f:75:9c:ac:00:e2:5c:
16:e2:51:a2:17:38:71:39:11:25:9d:7b:55:86:87:
c2:52:d6:ff:c9:0f:b7:05:28:0b:a9:f1:90:72:ed:
18:6f:a7:14:0c:43:32:2a:28:e2:e3:69:91:38:71:
94:2f:ae:c9:d9:16:c5:ba:ad:69:d7:28:e3:93:83:
8b:34:77:4b:05:b7:72:86:ad:84:08:e2:f9:f4:29:
3c:50:ae:eb:ea:4a:20:f0:ad:4b:91:11:1a:78:f3:
5a:5b:ca:88:a4:b8:3b:c5:c5:e4:cc:85:aa:7b:75:
63:06:34:02:6a:8c:b4:a7:65:f1:fd:61:db:be:56:
17:01:ca:98:e4:dd:3e:c0:f3:b4:fe:03:05:74:37:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D2:2D:7D:D8:98:2D:91:CB:45:71:E8:96:DF:84:65:BF:1E:10:41
X509v3 Authority Key Identifier:
keyid:B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c2:5d:fe:82:d3:c1:af:8f:6e:22:a4:db:7e:05:b2:e9:aa:
7a:28:65:76:86:e5:c4:c0:d6:81:20:a5:4b:bf:10:d6:ef:a9:
d5:87:c8:bb:51:18:66:39:e0:58:ad:5c:a3:f3:cd:06:1d:b9:
25:d7:8d:d1:b8:5d:96:e1:86:04:d6:d7:41:35:f2:cc:dd:65:
71:78:61:de:7d:0f:36:76:dc:03:2e:e0:4a:2e:6f:2f:a9:b2:
5f:8e:9d:e7:5a:c7:9d:88:c8:92:1d:6b:00:05:6c:bc:55:fc:
67:95:5f:a0:a4:d0:f5:55:10:59:18:23:a2:a4:ed:b5:c0:64:
ff:a9:cc:00:32:ff:04:c9:f8:31:af:44:15:6d:90:b3:b8:1b:
83:5e:26:92:fb:16:01:45:4d:9e:3c:03:61:81:4b:49:6d:d6:
6d:36:ea:c8:c2:48:ab:3b:b0:c5:bd:bd:7c:96:44:fc:28:05:
75:28:7c:77:d5:24:8b:eb:fd:21:c6:78:8a:52:54:76:ae:4a:
bf:e0:2c:21:24:b0:e3:af:35:68:5f:3f:b2:e8:c3:af:02:a5:
b0:8d:7c:6d:7f:21:dc:f3:50:78:2c:75:b4:77:89:e1:10:18:
c4:71:e5:02:7c:2c:1f:f1:ce:73:0c:7a:27:c8:87:3d:ac:f4:
3d:33:3c:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d8O/axG3Zdf344kZ1whNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTM4ZTQ4NDBjYWEzYTFiZDUxODUyNzE0YTEzNWZiMGU4
MzdjNDUwHhcNMjYwMzI5MTIwMDQzWhcNMjYwMzMwMTIwMDQzWjAzMTEwLwYDVQQD
EyhjMmQyMmQ3ZGQ4OTgyZDkxY2I0NTcxZTg5NmRmODQ2NWJmMWUxMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jjQaaExjGYiUZB4AGlwX+J3ujCt
vTnqfq5NMPwzITwRpyOD5yj8ZMYE98vk6HQU0fOs0cme8S+KwiuoC68a8tMy2KS9
Y+SdUvG50a7Tjrp6NtRv4qNe4m7DUz0nDOx8oYwN/meOyYHWweD8VNU0DR91nKwA
4lwW4lGiFzhxORElnXtVhofCUtb/yQ+3BSgLqfGQcu0Yb6cUDEMyKiji42mROHGU
L67J2RbFuq1p1yjjk4OLNHdLBbdyhq2ECOL59Ck8UK7r6kog8K1LkREaePNaW8qI
pLg7xcXkzIWqe3VjBjQCaoy0p2Xx/WHbvlYXAcqY5N0+wPO0/gMFdDcN2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLSLX3YmC2Ry0Vx6JbfhGW/HhBBMB8GA1UdIwQY
MBaAFLcTjkhAyqOhvVGFJxShNfsOg3xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMDk3ZWEtMjMyZC00YTJmLTkwZTct
NDNmZTRhNTFiNTRiLzEvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMDk3ZWEtMjMyZC00YTJmLTkwZTctNDNmZTRhNTFiNTRi
LzEvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisJd/oLT
wa+PbiKk234FsumqeihldoblxMDWgSClS78Q1u+p1YfIu1EYZjngWK1co/PNBh25
JdeN0bhdluGGBNbXQTXyzN1lcXhh3n0PNnbcAy7gSi5vL6myX46d51rHnYjIkh1r
AAVsvFX8Z5VfoKTQ9VUQWRgjoqTttcBk/6nMADL/BMn4Ma9EFW2Qs7gbg14mkvsW
AUVNnjwDYYFLSW3WbTbqyMJIqzuwxb29fJZE/CgFdSh8d9Uki+v9IcZ4ilJUdq5K
v+AsISSw4681aF8/sujDrwKlsI18bX8h3PNQeCx1tHeJ4RAYxHHlAnwsH/HOcwx6
J8iHPaz0PTM8VA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:20 2026 by rpki-client