Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: BzaD5He410uRcN78VTVIA708j/bevuTwVKKWjHs3Usw=
Subject key identifier: F7:9D:D2:1B:7E:10:F1:84:E7:D4:96:DF:3C:C5:EA:68:FC:A2:D0:91
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 019D38659D4DE0A4BB4DFCCEA619FA672325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 0952
Signing time: Sun 29 Mar 2026 07:01:16 +0000
Manifest this update: Sun 29 Mar 2026 07:01:16 +0000
Manifest next update: Mon 30 Mar 2026 07:01:16 +0000
Files and hashes: 1: 4yP3WwU1ktq8_0e1Hi61Tn4PWPg.roa (hash: n+qnuFeSxpGyizkAO7C0ETLCpnUHGbgFWmdL3r1mtxY=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: qhcWoZIBIgcVywm7h/Js4LcFv9jH648dumw9qxrisik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:9d:4d:e0:a4:bb:4d:fc:ce:a6:19:fa:67:23:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Mar 29 07:01:16 2026 GMT
Not After : Mar 30 07:01:16 2026 GMT
Subject: CN=f79dd21b7e10f184e7d496df3cc5ea68fca2d091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:ee:74:55:4b:e5:83:15:10:10:cf:3c:53:
b5:8c:32:8f:bf:74:66:ca:71:f7:2b:ac:16:1d:ad:
38:40:4d:37:f2:5c:28:3f:d3:e8:e4:ac:e3:e1:34:
ea:63:99:18:25:5d:8a:19:40:1f:25:3c:a8:5f:63:
87:90:45:14:8e:5c:40:d3:b9:2e:c2:70:63:a5:08:
7a:02:94:95:61:20:fb:a9:b5:cf:c5:3d:ea:5b:b8:
13:4f:06:c8:d2:06:5e:9e:04:dc:81:ad:e6:44:f6:
20:68:79:fd:bf:7f:9d:d3:30:50:12:cc:64:dc:1b:
fe:ff:36:28:bc:ca:d7:16:b1:50:b3:0e:0c:49:66:
87:87:a8:ee:b7:e5:01:ee:fc:d3:6f:56:ee:cd:70:
c2:cc:32:a6:1e:32:c6:c9:37:ec:6b:39:59:96:a2:
0a:e3:c9:f9:16:1d:a8:9d:0a:c7:eb:5f:39:5f:18:
87:d8:e2:b9:36:27:10:a6:70:b4:ae:92:e9:27:71:
35:95:e2:2b:9e:b1:8f:01:80:09:0e:7e:ac:4c:b5:
c3:6d:a6:62:28:56:c1:77:9d:5f:e0:c2:09:85:23:
62:6b:b2:0f:ad:da:ff:77:4b:9f:24:b3:1a:4e:50:
ab:b7:2a:ea:ed:e8:2b:6c:22:69:d6:fe:35:55:6e:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9D:D2:1B:7E:10:F1:84:E7:D4:96:DF:3C:C5:EA:68:FC:A2:D0:91
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:54:e0:68:c5:16:df:a3:df:b7:55:9f:9a:f8:45:37:2f:0f:
6a:82:18:ff:15:c1:ff:70:f1:29:6f:bf:c4:7b:8e:c3:d9:11:
30:82:9f:89:48:8b:a5:d7:9c:dc:fd:a4:68:9d:e3:90:d9:de:
01:49:39:6f:e0:2e:f0:da:8e:49:2a:93:49:0b:a5:49:70:78:
3f:3d:b9:62:5c:a4:46:05:25:3d:38:e6:8a:3e:63:ed:5b:b6:
40:07:33:e4:01:c4:ab:26:36:5d:23:b8:2a:41:00:3b:c4:67:
c1:bc:97:13:66:ba:f5:c7:ca:97:81:12:1a:03:92:ce:90:f9:
cf:6d:42:7e:cd:cd:f9:93:2f:17:d0:32:5f:8a:ae:5d:7a:00:
66:56:97:3d:25:59:88:2c:71:8d:f9:d9:40:22:20:d8:f2:a0:
57:0e:e6:11:8c:c2:93:2d:de:bd:be:d8:08:13:6e:16:bc:c2:
45:1f:5c:e9:0d:fb:63:04:84:2e:d7:d3:ff:01:68:5e:e1:1a:
a9:d2:a8:a2:55:74:9b:99:5d:17:44:e1:dc:fa:10:6c:7d:c7:
76:22:64:ba:5b:dd:45:01:14:f8:d7:f5:7b:c0:0e:31:d2:7c:
7a:82:94:93:9f:53:71:10:2d:8d:1a:f6:ed:70:ed:ec:23:08:
55:58:24:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZZ1N4KS7TfzOphn6ZyMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTQ1NTZhOTU3OWUyMDJmNTRjMTU5MzQ1NDU4YmM5MjQ1
ZjkwZTQwHhcNMjYwMzI5MDcwMTE2WhcNMjYwMzMwMDcwMTE2WjAzMTEwLwYDVQQD
EyhmNzlkZDIxYjdlMTBmMTg0ZTdkNDk2ZGYzY2M1ZWE2OGZjYTJkMDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lbudFVL5YMVEBDPPFO1jDKPv3Rm
ynH3K6wWHa04QE038lwoP9Po5Kzj4TTqY5kYJV2KGUAfJTyoX2OHkEUUjlxA07ku
wnBjpQh6ApSVYSD7qbXPxT3qW7gTTwbI0gZengTcga3mRPYgaHn9v3+d0zBQEsxk
3Bv+/zYovMrXFrFQsw4MSWaHh6jut+UB7vzTb1buzXDCzDKmHjLGyTfsazlZlqIK
48n5Fh2onQrH6185XxiH2OK5NicQpnC0rpLpJ3E1leIrnrGPAYAJDn6sTLXDbaZi
KFbBd51f4MIJhSNia7IPrdr/d0ufJLMaTlCrtyrq7egrbCJp1v41VW6mPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPed0ht+EPGE59SW3zzF6mj8otCRMB8GA1UdIwQY
MBaAFKLkVWqVeeIC9UwVk0VFi8kkX5DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUt
YzU1OWUwOTcxZWUwLzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84NmU5Y2MtMzZhMC00NmY1LWJhMWUtYzU1OWUwOTcxZWUw
LzEvb3VSVmFwVjU0Z0wxVEJXVFJVV0x5U1Jma09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVTgaMUW
36Pft1WfmvhFNy8PaoIY/xXB/3DxKW+/xHuOw9kRMIKfiUiLpdec3P2kaJ3jkNne
AUk5b+Au8NqOSSqTSQulSXB4Pz25YlykRgUlPTjmij5j7Vu2QAcz5AHEqyY2XSO4
KkEAO8RnwbyXE2a69cfKl4ESGgOSzpD5z21Cfs3N+ZMvF9AyX4quXXoAZlaXPSVZ
iCxxjfnZQCIg2PKgVw7mEYzCky3evb7YCBNuFrzCRR9c6Q37YwSELtfT/wFoXuEa
qdKoolV0m5ldF0Th3PoQbH3HdiJkulvdRQEU+Nf1e8AOMdJ8eoKUk59TcRAtjRr2
7XDt7CMIVVgkqQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:21 2026 by rpki-client