Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
File: o6tnDoFG71J0rkXrMNKelwBluiw.mft (raw, json)
Hash identifier: 7hhk3M4Z+JlB88sdumuZobpHzW2Eh4gwJyCK6oURLGM=
Subject key identifier: CC:EE:43:6E:55:AC:9F:F1:44:DF:38:68:29:73:4A:4E:FE:98:3E:4B
Authority key identifier: A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
Certificate issuer: /CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Certificate serial: 019CE5238797CE7773F04E31287B5E1E85C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
Manifest number: 0252
Signing time: Fri 13 Mar 2026 03:00:36 +0000
Manifest this update: Fri 13 Mar 2026 03:00:36 +0000
Manifest next update: Sat 14 Mar 2026 03:00:36 +0000
Files and hashes: 1: IZRU9aitBtasi5s8LfvUyXF6gJI.roa (hash: A+EvTFUEfhqDufK4w5HaH/h/6GcXexGhKX2pAinc5hA=)
2: o6tnDoFG71J0rkXrMNKelwBluiw.crl (hash: f0dL8XxE2ne8M7WLJn9r+Rc+qG/atJ3xhT/812ksy38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:87:97:ce:77:73:f0:4e:31:28:7b:5e:1e:85:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ab670e8146ef5274ae45eb30d29e970065ba2c
Validity
Not Before: Mar 13 03:00:36 2026 GMT
Not After : Mar 14 03:00:36 2026 GMT
Subject: CN=ccee436e55ac9ff144df386829734a4efe983e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f6:f1:64:c8:36:11:96:6e:89:9d:76:4b:15:
7a:a6:c0:d5:1e:81:72:7d:1e:d7:74:36:c6:ce:38:
9f:ca:4b:e4:f8:4b:26:ab:75:c3:db:86:b2:e3:09:
a8:29:00:46:36:2a:77:72:b8:f6:8f:71:e8:d1:1f:
b2:79:61:08:41:03:ee:51:0f:ac:4c:da:2f:bf:72:
86:35:7f:21:a0:43:c9:33:e4:dc:85:be:75:74:b7:
75:63:c6:b3:2d:b8:1a:10:83:79:62:75:68:c4:d5:
be:7c:b4:74:ff:34:bd:f0:10:0f:e9:f3:fd:b9:a3:
5c:07:3d:45:a0:93:cc:2c:31:62:a8:31:f7:7f:78:
80:11:5c:e3:eb:d6:4e:e5:60:2f:a3:16:9b:86:c0:
90:9d:e4:ba:0a:b5:c6:5c:c6:ff:46:74:d2:9c:1d:
4d:f4:55:a0:50:cb:2f:fc:fa:60:91:03:13:77:73:
c0:b3:66:c1:21:04:8e:3d:f9:fc:df:ae:6a:a8:e8:
d3:30:9a:b3:52:7b:bb:04:c8:13:6f:be:84:36:34:
a2:50:e7:c6:d5:16:9f:67:41:b1:4a:3c:93:70:44:
0d:4d:a0:3d:93:c4:02:42:5f:37:de:6b:11:38:69:
11:9c:51:40:7a:16:fb:87:53:da:a2:1c:eb:94:39:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EE:43:6E:55:AC:9F:F1:44:DF:38:68:29:73:4A:4E:FE:98:3E:4B
X509v3 Authority Key Identifier:
keyid:A3:AB:67:0E:81:46:EF:52:74:AE:45:EB:30:D2:9E:97:00:65:BA:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6tnDoFG71J0rkXrMNKelwBluiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c01576-a413-4712-9f32-60d5be1b7da9/1/o6tnDoFG71J0rkXrMNKelwBluiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:30:80:0f:78:31:7f:3a:6b:28:05:a9:6b:1d:60:02:c1:80:
d3:47:05:24:5c:d2:df:79:6a:7b:45:19:2e:20:4c:b5:8e:cc:
f0:a0:ad:e7:f4:ca:35:49:7a:7d:4a:b1:c0:a6:28:89:3e:c6:
9e:3a:3d:7c:71:02:5c:a9:e0:2f:76:76:95:9a:bf:61:22:fb:
51:4b:64:d5:97:4b:25:33:0f:f9:37:3a:1c:82:35:b7:c0:93:
1b:4d:60:c6:f9:e8:fb:74:0e:77:6c:53:d6:8f:82:ab:4b:40:
fb:a7:89:4d:04:d9:fd:09:c2:5b:23:eb:f4:7d:63:19:79:64:
74:60:69:7a:92:30:08:9d:60:b4:f2:9d:95:69:d5:cd:3d:b3:
32:71:37:0c:2e:fb:4f:b6:86:d7:f3:e7:ae:c4:8f:9f:64:45:
be:82:38:c2:f7:7e:aa:15:e0:d8:fd:dd:f3:5d:b1:10:8e:56:
d9:da:c8:d9:73:65:7b:26:f0:79:48:58:7a:69:3f:32:12:54:
ee:9e:7f:48:95:9c:ec:2d:a6:78:42:4e:c5:90:49:2f:47:b6:
e8:a3:7b:d2:6e:40:0a:65:07:68:1d:35:7b:bf:7e:71:24:88:
26:09:db:b0:2b:67:7e:bf:76:7a:7d:91:7e:25:39:bc:ca:db:
d9:43:68:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:41 2026 by rpki-client