Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
File: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft (raw, json)
Hash identifier: OCgmNTKw8THSIpx+CptMzIsdsV7N8f74yYnGh0wdeC4=
Subject key identifier: 08:A9:26:72:7D:4D:E7:B5:4E:EF:72:64:CB:74:3A:07:1C:8B:1A:27
Authority key identifier: 3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
Certificate issuer: /CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Certificate serial: 019CEAB7C6511C6BCEA25298A0ED1201A53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
Manifest number: 8C
Signing time: Sat 14 Mar 2026 05:00:38 +0000
Manifest this update: Sat 14 Mar 2026 05:00:38 +0000
Manifest next update: Sun 15 Mar 2026 05:00:38 +0000
Files and hashes: 1: Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl (hash: cVRq1tr5d4eTJAHNw3t0VjGRVQYOt1qEj5f3jJ6IiFs=)
2: n_wbhjTQEKQYbyBhAiLXuF8aRHE.roa (hash: qCMkNN9URM/S++Y4VUWJX4fLpuRES7PHrbUt6B67Juk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:b7:c6:51:1c:6b:ce:a2:52:98:a0:ed:12:01:a5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a8e07940dcd6344e1a81620bd78a268be9c3798
Validity
Not Before: Mar 14 05:00:38 2026 GMT
Not After : Mar 15 05:00:38 2026 GMT
Subject: CN=08a926727d4de7b54eef7264cb743a071c8b1a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:75:09:8f:4a:8c:a0:ae:40:fa:5e:d8:5a:
77:88:38:02:0b:8b:21:a4:c8:09:4b:80:27:21:ed:
f4:2c:a4:ee:6f:57:7f:0a:da:e6:36:a5:1b:fe:0a:
95:ac:b4:d5:ec:7a:a5:a6:15:ac:6e:e0:5a:3e:33:
c3:b8:4c:ea:35:38:b9:db:23:60:02:39:05:35:00:
90:06:2d:4c:ad:bd:67:e2:70:3e:72:11:91:34:fb:
2c:16:ec:96:31:be:5a:b7:2f:f0:be:f8:44:e9:e2:
cc:0e:c3:3b:0b:b0:7c:07:07:9b:01:0a:15:93:5a:
6e:3b:b8:03:de:57:da:87:02:3e:06:74:38:2b:13:
c1:a4:9b:b4:2d:b7:0c:b7:9c:3d:e8:b3:7d:ad:ff:
a4:8e:ee:3b:dd:b0:e7:a0:ce:15:40:6e:0d:da:b6:
78:e6:d9:2c:a4:60:f1:15:63:e8:7c:59:10:78:ad:
94:27:f7:28:9c:82:12:2e:86:54:29:c6:f7:68:41:
6e:d0:d8:d2:96:b5:4c:3a:3f:b9:b6:02:61:db:3b:
c1:19:e2:80:15:8f:0f:d2:79:e7:62:c8:88:33:06:
04:cf:50:f1:9b:00:98:fb:6c:77:e2:11:f7:6d:28:
4e:a6:f6:3c:5f:77:4b:09:87:95:a6:28:d9:be:e2:
36:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:26:72:7D:4D:E7:B5:4E:EF:72:64:CB:74:3A:07:1C:8B:1A:27
X509v3 Authority Key Identifier:
keyid:3A:8E:07:94:0D:CD:63:44:E1:A8:16:20:BD:78:A2:68:BE:9C:37:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c8e20a-589f-44fc-964a-5a694607435e/1/Oo4HlA3NY0ThqBYgvXiiaL6cN5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1a:fa:13:ef:f4:c5:fc:82:f2:db:67:71:af:28:12:b4:3a:
4e:e1:3d:17:2f:b2:99:83:44:f6:fa:59:56:b3:19:3d:39:40:
89:51:03:67:90:16:8e:c4:2d:00:78:61:e7:61:59:40:10:6f:
db:ff:7e:26:b1:d7:37:dc:1e:52:c1:79:3f:1e:01:fb:93:c2:
29:20:2c:a6:47:be:ae:ba:a4:08:c8:c2:9e:6a:53:82:19:10:
b8:79:d5:b9:85:58:b7:24:4a:8d:cd:6a:a1:19:61:60:3f:01:
fe:70:20:a0:a1:68:04:71:6b:5c:7b:fa:3a:f8:42:21:f1:e5:
a9:f2:05:31:fa:b8:77:55:85:ee:19:5f:37:34:bd:66:23:8b:
9a:2d:cb:48:43:0a:53:88:a1:3f:89:98:26:94:82:8c:67:e4:
bb:56:f5:6a:72:21:18:b1:21:92:07:1e:5c:82:e8:84:65:42:
c7:02:d6:89:a7:46:e5:52:af:39:55:c0:86:f8:f5:db:74:6a:
d1:8d:d3:12:55:c1:19:de:80:9e:a3:6c:ee:49:b6:81:aa:39:
b3:00:3e:03:01:41:de:be:45:7c:2a:b0:10:3e:9f:6e:f1:63:
19:d9:2b:a9:dc:46:e7:d6:9a:2c:b8:0f:c0:fe:29:2f:11:dc:
03:ab:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:45:56 2026 by rpki-client