Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
File: OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json)
Hash identifier: dd+GNfOgxutabF2iorz15HESizoQjGFnjzhHQuj6e3w=
Subject key identifier: FC:37:21:83:C7:AD:03:74:F7:64:63:B1:F0:41:11:B9:EC:18:77:AC
Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Certificate serial: 019D3909834E15D228AA2E29B95DDC92CC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
Manifest number: 0575
Signing time: Sun 29 Mar 2026 10:00:17 +0000
Manifest this update: Sun 29 Mar 2026 10:00:17 +0000
Manifest next update: Mon 30 Mar 2026 10:00:17 +0000
Files and hashes: 1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: 2dZeII3jQgUgtTX74AFHW4RkPk6g5eNqkkyxkZYtYlU=)
2: Q9r_G5mN-fpHCEEziTRaRU3KmFI.roa (hash: hXNMo0ooe3x7ylZ3iHUiRzE6Xm2lDI4+UmM5cDjZux0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:83:4e:15:d2:28:aa:2e:29:b9:5d:dc:92:cc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Validity
Not Before: Mar 29 10:00:17 2026 GMT
Not After : Mar 30 10:00:17 2026 GMT
Subject: CN=fc372183c7ad0374f76463b1f04111b9ec1877ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:a7:5a:0d:83:5a:7d:28:30:24:c7:90:f9:
ca:cf:aa:d2:6f:e1:d5:2a:bf:e6:3c:25:ca:7f:dc:
be:18:f3:26:13:e3:66:2e:b3:79:af:b1:05:7e:a2:
58:41:68:d9:ea:d2:17:cc:1a:8f:9a:36:ed:81:55:
e7:5c:41:cc:87:58:f3:cc:c4:cd:f1:0e:ce:0c:80:
b6:cb:45:e8:1b:65:bf:7f:8b:d4:e8:c4:21:6a:84:
64:13:01:97:4c:6d:53:a3:6a:3d:de:6a:95:ff:10:
47:6a:34:29:ec:0a:1f:b7:f4:13:04:a8:a7:7a:12:
81:39:bd:1e:db:c7:39:43:c5:20:60:3b:29:ff:ab:
6e:a2:3e:36:b5:c9:7b:ae:20:bb:db:9b:4a:d7:9a:
9d:a6:46:dd:88:c0:cc:76:f7:ff:27:95:50:73:1b:
c7:51:f4:62:94:85:7f:ab:48:f8:83:c7:3a:73:a7:
8c:eb:41:48:86:1a:ee:84:ef:46:d3:30:58:ce:db:
2d:2d:46:a3:44:7e:61:a3:e0:d9:44:86:15:9d:89:
c9:8f:32:54:9f:6c:a6:d7:21:3d:26:2d:16:80:37:
a3:bf:50:a8:46:30:89:98:f6:7f:30:31:42:57:0f:
3b:a0:6d:65:97:ab:2d:99:76:1d:a5:14:38:02:ce:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:37:21:83:C7:AD:03:74:F7:64:63:B1:F0:41:11:B9:EC:18:77:AC
X509v3 Authority Key Identifier:
keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:26:f1:73:f8:6b:e5:95:0c:bd:0f:87:ea:09:2f:3d:4c:9f:
46:95:f0:d2:66:53:a6:44:27:54:ca:22:b0:02:6c:bb:26:ac:
72:ad:3e:55:9a:fe:15:82:c1:9c:57:35:ad:4b:d5:7e:b2:0d:
d2:62:e2:7a:44:c5:3a:b1:8b:99:26:74:54:1a:b7:65:03:b8:
3c:a1:8c:b0:d7:b8:1b:41:ab:7b:44:7c:a2:63:58:af:05:35:
d7:ff:3c:4e:ed:55:46:cd:18:1e:1a:ae:5b:bc:38:12:c1:19:
5a:37:32:b3:3d:36:f6:03:a9:87:41:ab:f4:9f:e2:50:97:e1:
bd:d5:87:7c:1d:af:e2:b4:46:5e:43:54:df:f7:e8:cc:d1:d6:
7d:10:a4:70:4e:4a:41:8f:c5:fd:03:30:82:44:6a:3a:1a:93:
28:75:98:b2:0d:18:b2:45:51:79:27:fe:7b:66:c7:91:8e:da:
f8:c1:a7:65:e0:99:2e:73:5f:8c:05:d4:2c:e0:fa:4b:0f:3a:
0a:21:9a:b1:4f:10:ae:4f:29:41:ad:b3:98:fb:f6:75:ed:d1:
69:90:cf:e1:3a:85:98:2e:fd:0a:ad:d0:fb:96:49:27:b4:89:
b4:68:8b:96:48:e3:38:9a:5e:d6:fb:cf:6f:cd:86:5d:92:b9:
5f:b0:22:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:49 2026 by rpki-client