Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: yj9DcBf0qe1kckYntuVHflvvVhHFusw77PVToX1C6HY=
Subject key identifier: 1D:08:56:F8:C2:01:C5:25:EA:74:B2:88:DA:2E:3A:A9:89:5D:83:C8
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019CEA139117ADE43953F389D10D64FF08C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0709
Signing time: Sat 14 Mar 2026 02:01:16 +0000
Manifest this update: Sat 14 Mar 2026 02:01:16 +0000
Manifest next update: Sun 15 Mar 2026 02:01:16 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: Vb0Mb3VEM3veCPCrKvrEOo3esUE.roa (hash: wsQvVbcVPuKEsiVmA3jQc45iZrjeqJsQtYSOLDFq6yA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: EwSmCl4gjowiM5vLR6CRFvohFNikByBpteqgfBcRldk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:13:91:17:ad:e4:39:53:f3:89:d1:0d:64:ff:08:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Mar 14 02:01:16 2026 GMT
Not After : Mar 15 02:01:16 2026 GMT
Subject: CN=1d0856f8c201c525ea74b288da2e3aa9895d83c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:ce:32:87:42:11:f9:16:71:65:7c:1a:26:
7c:a0:e3:1e:ef:cd:6d:3c:ae:5e:d4:ef:12:9b:e7:
17:98:62:38:fa:08:da:78:f1:ce:56:88:78:b7:29:
96:08:3d:2b:47:de:7f:b5:39:a4:c2:bd:3a:e4:7f:
e7:17:7c:39:cd:53:95:95:53:a1:e1:a8:cd:cc:08:
20:9b:9b:27:f6:ef:8b:71:4a:ff:ad:1e:5e:05:4b:
9e:34:e4:24:00:1c:ae:72:5e:00:a4:12:af:52:e9:
78:fa:52:1d:56:f3:30:c1:75:57:38:5a:b1:10:6f:
20:d8:c2:24:e4:53:cd:c3:71:0a:f0:7c:2f:a0:f0:
d8:40:4e:f1:a4:52:69:1e:9b:dd:61:48:a9:91:8a:
39:62:24:dc:08:95:2a:bc:51:88:b3:bc:23:1a:b4:
2d:1e:28:c0:74:a9:07:84:94:1e:13:f8:5f:d4:a7:
25:1a:6a:de:b1:ba:c8:7e:2c:d2:60:53:e2:16:6f:
b9:d1:de:1c:bb:1a:6d:34:34:a6:b2:4b:bc:de:36:
26:99:94:a4:c5:ca:f1:63:91:43:ce:51:30:59:9f:
fa:0d:0e:07:1f:b7:ce:44:9a:15:d6:ed:ef:04:fb:
a8:db:da:93:cd:df:70:d2:98:a9:46:d7:ab:c1:22:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:08:56:F8:C2:01:C5:25:EA:74:B2:88:DA:2E:3A:A9:89:5D:83:C8
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:01:99:17:ea:3f:62:51:a1:75:fd:1f:21:8a:41:4d:28:ce:
b6:07:44:6f:fc:9d:77:8e:d1:05:ce:fd:d1:1e:2f:17:97:d9:
80:20:53:bb:60:5e:02:19:c6:b6:99:54:57:5a:ee:69:21:7d:
18:39:32:65:31:1c:84:0f:e4:42:9a:e5:26:bb:b1:41:e3:fc:
ac:69:67:c7:ee:54:a9:cf:8e:af:61:b3:75:87:f8:b2:ac:4c:
51:ae:0a:f8:f1:eb:85:33:e8:4b:cd:70:49:8c:5b:ae:db:6d:
04:69:94:07:4c:7f:e9:eb:76:f5:3b:88:58:8a:66:c7:1c:fa:
b5:5e:7b:af:84:9b:f9:1f:45:6e:9c:9f:3b:80:9f:be:ff:f3:
99:c2:3c:8d:24:e0:85:41:95:61:94:56:5c:3f:e9:ec:4a:e4:
a0:b8:b2:b6:9e:8c:24:d8:4b:75:0e:18:38:51:20:ba:5e:1a:
f6:d1:e9:b9:3e:6a:52:20:4e:7b:a4:c6:b7:ba:a0:96:3a:29:
e0:b7:8e:b4:14:e0:09:77:89:91:db:cb:1b:35:39:c9:98:4a:
4b:cc:43:8a:38:eb:88:b6:bf:26:48:16:d5:62:15:3b:45:16:
ee:94:d9:13:ce:ed:23:58:ad:cc:14:1b:28:3f:81:c2:97:49:
15:11:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 05:17:27 2026 by rpki-client