Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: WOiTS5MB6I6WjEplooJHo5lIDf4AOqMLmcDBHNaTu4w=
Subject key identifier: B4:9F:7A:03:C2:5A:2D:C5:19:C8:54:29:D1:9F:B7:E3:97:2A:25:80
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 019CFB3DE3756E966977E1C76000A02AEC76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1877
Signing time: Tue 17 Mar 2026 10:01:02 +0000
Manifest this update: Tue 17 Mar 2026 10:01:02 +0000
Manifest next update: Wed 18 Mar 2026 10:01:02 +0000
Files and hashes: 1: 867F4OQuQLWhRY4aKxKeoxD01B4.asa (hash: +fRCR0HY7fbE+pyBbt7W5yHcfIjIo6aJjDfzPZQv280=)
2: cj-L2rGXvYKYk6a-AdfFlFFwb-s.roa (hash: d08NWXtlSQGeDRPYfCwBaxm1c8qg8kNQWXxjIs+wmGU=)
3: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: 238Yed+96zmHFuvATfC6tpw94Lp2RfPlj1PVzSzMF28=)
4: iqLo87tMFOB-XBrWIzdU46MRBuE.roa (hash: IzYBLEWXA56LUWCfb8F/l/nPeES5nSXV/ENxm4IRlhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fb:3d:e3:75:6e:96:69:77:e1:c7:60:00:a0:2a:ec:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: Mar 17 10:01:02 2026 GMT
Not After : Mar 18 10:01:02 2026 GMT
Subject: CN=b49f7a03c25a2dc519c85429d19fb7e3972a2580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:80:40:b5:67:89:d7:76:41:69:a9:f4:28:
96:de:3d:19:2a:67:91:1f:db:18:13:90:b4:9f:48:
5f:99:74:8a:5c:ee:0d:63:3b:d2:ed:ff:86:a2:86:
72:96:2f:a0:b7:be:b3:d0:4a:6b:e8:95:f1:8c:d9:
14:e6:9a:e7:88:68:ec:68:13:30:22:ba:23:ec:ec:
38:06:2b:1f:78:8e:0f:2e:92:85:ae:8f:84:4a:37:
e6:c1:1a:51:90:71:7b:24:22:d3:47:21:67:83:15:
73:da:1e:a6:61:c6:03:59:51:4a:6f:1a:80:85:23:
d6:f9:87:da:4d:17:31:90:5c:9a:2a:12:be:38:02:
2d:5e:ae:95:8f:62:4a:5f:df:1b:b5:cf:93:03:d5:
eb:9a:12:d1:2b:1e:77:81:ce:25:c3:a0:92:dd:6d:
22:14:7b:9b:38:0d:3f:7e:87:00:fc:68:17:df:62:
d4:5d:a6:fa:e5:cb:f4:ad:fc:51:5f:f3:d4:77:3d:
32:b0:f4:4b:32:9f:0c:d6:05:45:a3:04:2f:7e:9b:
8d:40:16:50:2c:9d:20:24:0f:17:db:9e:af:4f:1e:
ab:63:1d:99:4c:44:e5:44:6c:7f:16:1b:1e:4c:39:
95:7a:a8:ab:d8:3b:cd:11:66:1b:64:64:53:ca:e7:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:7A:03:C2:5A:2D:C5:19:C8:54:29:D1:9F:B7:E3:97:2A:25:80
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:59:c6:1e:63:55:60:4d:2e:1c:66:f8:a6:71:82:ab:62:ea:
f3:52:5b:86:cb:fe:26:fc:f7:5d:83:04:4f:ef:79:78:03:85:
52:06:71:4f:2d:16:04:b2:4e:6d:87:ae:5e:db:4d:01:44:2e:
d6:66:00:fe:b4:63:c2:7a:5e:7c:ba:52:59:2d:b6:78:f3:a0:
91:07:38:74:db:81:5f:f4:4f:ea:3c:b3:98:ba:2e:0a:ab:e8:
fa:a5:bf:0a:5c:19:d2:dd:22:03:a7:5a:0d:72:e3:52:f6:f3:
ac:c5:f7:f9:ec:5d:ee:f8:6a:9e:d3:b8:2f:e7:6c:9b:aa:a6:
df:04:e5:78:94:fc:93:4c:38:19:de:f1:3d:b1:2d:04:21:81:
c9:24:b4:1e:1c:b8:0e:d4:34:be:a7:6b:fe:44:bd:82:f7:23:
e2:03:f2:e3:9c:18:76:b7:c4:a9:f8:3c:88:24:9a:a9:cd:6b:
bc:b2:33:80:be:2e:f3:6a:81:98:71:56:fa:10:9b:37:0d:b9:
ba:25:f0:5d:88:60:80:25:54:62:9d:bd:1f:6e:6f:91:01:c3:
a3:bc:11:3f:9c:33:81:2e:3a:2b:dc:2d:66:55:6c:55:08:c0:
f7:ea:78:7d:01:c6:87:f6:1e:10:07:1f:5e:0b:e1:f6:e2:76:
d8:fd:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 19:15:07 2026 by rpki-client