Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
File: x-oItp98MM16CBOuuRCffnXSqjg.mft (raw, json)
Hash identifier: AX32bBQ7by+KqUgC7Rf0IcpTQQ5GaE+FGDMfJkDpPa4=
Subject key identifier: 10:FA:19:8F:73:DB:C0:B2:84:FE:A2:F4:26:73:A6:FF:2C:83:C1:22
Authority key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Certificate issuer: /CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Certificate serial: 019D39418E5FD268C4D7FD998BB3CBA34302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
Manifest number: 03FF
Signing time: Sun 29 Mar 2026 11:01:30 +0000
Manifest this update: Sun 29 Mar 2026 11:01:30 +0000
Manifest next update: Mon 30 Mar 2026 11:01:30 +0000
Files and hashes: 1: JMQmFyE3aQvhUy-nmpVV6f7f8LM.roa (hash: dzTZZeqoyGDa9h33Vh04zNMf/nJhUIIZZndFjeftfJE=)
2: x-oItp98MM16CBOuuRCffnXSqjg.crl (hash: CxznIGcVSAgpAXyhEsaM4rXoCV6yVgS6r61CiyYBUrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:8e:5f:d2:68:c4:d7:fd:99:8b:b3:cb:a3:43:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Validity
Not Before: Mar 29 11:01:30 2026 GMT
Not After : Mar 30 11:01:30 2026 GMT
Subject: CN=10fa198f73dbc0b284fea2f42673a6ff2c83c122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:19:7b:87:03:3d:99:6c:44:d4:d2:e9:7a:
f3:79:37:ce:50:e2:cb:2a:2f:2c:9b:a9:79:06:0c:
83:94:a0:59:98:63:c2:89:57:0d:5c:9e:7a:fe:7b:
95:6d:3b:ce:be:6e:4e:ab:d1:ce:78:71:4d:e6:54:
cd:42:ef:47:25:68:28:29:5f:1f:42:bd:6d:d7:12:
a7:17:6c:f9:8e:4e:b8:9e:1d:4e:8f:a9:a2:99:e7:
fd:20:de:06:31:1b:21:c5:b0:c5:f2:1e:68:d2:a6:
ca:21:3b:ae:e4:7a:a5:f5:6f:61:98:68:4f:9a:25:
56:b5:0f:9f:48:05:b1:7c:20:8c:80:0a:a8:06:be:
4f:62:76:7e:6d:18:05:42:62:6c:6e:cd:ae:75:dc:
9c:87:59:af:0d:19:21:12:e2:f3:03:cb:34:a7:e2:
e8:b4:32:a4:14:cf:5c:15:2a:56:e0:60:61:28:64:
f7:1a:d5:f3:83:e8:70:16:2d:28:50:e5:31:8f:87:
72:cf:b5:86:22:61:c6:23:ea:a8:bb:b6:e6:a9:d7:
04:e0:d7:39:36:db:f8:9c:f5:93:2b:13:c4:0f:de:
a3:f7:21:48:e5:12:75:9e:30:29:73:d4:a3:8b:d2:
8a:33:7c:fe:36:dd:57:73:18:6d:40:c8:59:ff:12:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FA:19:8F:73:DB:C0:B2:84:FE:A2:F4:26:73:A6:FF:2C:83:C1:22
X509v3 Authority Key Identifier:
keyid:C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:42:60:07:c1:35:af:7d:99:86:0d:af:f2:25:ec:33:69:8a:
e1:f4:bf:89:f6:e5:85:c6:29:06:ab:3f:38:3c:6f:da:79:2f:
f2:74:a3:17:e9:cb:8e:66:6a:61:5b:37:02:51:bd:eb:a1:6d:
36:36:06:3a:e1:21:ec:70:2a:be:37:ba:a6:81:2b:c1:62:ad:
7d:ab:64:67:bf:ce:c9:dd:d0:ce:8f:5b:18:ed:43:b8:6a:42:
1a:b4:e8:44:a8:45:93:1d:64:e7:49:de:cc:d5:19:a9:bf:e9:
95:f8:20:72:43:7a:2c:60:1e:c1:c0:f4:86:dc:23:82:df:04:
9b:09:ef:50:c7:dc:d8:7c:e0:22:ac:13:d6:e8:16:cc:6d:8f:
85:4f:a1:2d:0d:73:d1:c9:05:41:2e:c5:23:58:c8:10:26:1a:
9d:03:ad:3e:f9:3d:ba:4d:de:5d:b2:bd:ed:fb:5e:0d:6a:d7:
46:63:99:00:20:92:3c:44:23:0d:d8:aa:a4:45:8d:10:ab:b9:
5e:df:77:62:93:41:31:42:17:f3:b6:42:dd:e4:23:f6:9a:53:
df:0e:37:68:37:d3:0c:d9:63:c6:3d:09:da:c9:c1:b7:52:1d:
5b:db:49:85:fc:d3:c2:6a:52:e7:92:4d:8b:9e:d4:b5:cb:38:
56:fa:17:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:51 2026 by rpki-client