Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.mft
File: o6oJDvqtugOsmUOrfOIxZXhvmB8.mft (raw, json)
Hash identifier: ZRRgyJb9+cpjLawgm3pFxQYsebdvEQQE2DmolAHyCJc=
Subject key identifier: EA:51:3C:56:85:CD:51:D7:D2:C2:66:50:1A:04:24:06:EB:6F:D6:7E
Authority key identifier: A3:AA:09:0E:FA:AD:BA:03:AC:99:43:AB:7C:E2:31:65:78:6F:98:1F
Certificate issuer: /CN=a3aa090efaadba03ac9943ab7ce23165786f981f
Certificate serial: 019D382DCF6EF3234A6986F520880A0B335A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6oJDvqtugOsmUOrfOIxZXhvmB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.mft
Manifest number: 56
Signing time: Sun 29 Mar 2026 06:00:19 +0000
Manifest this update: Sun 29 Mar 2026 06:00:19 +0000
Manifest next update: Mon 30 Mar 2026 06:00:19 +0000
Files and hashes: 1: kfWSD5tVhW1XJa0Rw0pitcZgvIg.roa (hash: 6vFBk5z4/iD79DEPt868wv+otcleLhuYUPcOmF1pykc=)
2: o6oJDvqtugOsmUOrfOIxZXhvmB8.crl (hash: eQAuUnCYJMmpg5UtmEpeERyl+cuY29bHt8tt1Famn6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6oJDvqtugOsmUOrfOIxZXhvmB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cf:6e:f3:23:4a:69:86:f5:20:88:0a:0b:33:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa090efaadba03ac9943ab7ce23165786f981f
Validity
Not Before: Mar 29 06:00:19 2026 GMT
Not After : Mar 30 06:00:19 2026 GMT
Subject: CN=ea513c5685cd51d7d2c266501a042406eb6fd67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:13:83:d8:df:2e:12:77:be:a2:b2:59:be:
82:5a:6d:e8:c9:7f:d6:68:1c:39:4a:8c:94:f0:1c:
7f:2b:d4:69:28:3b:b6:38:7f:b0:26:9d:56:1a:32:
3f:e4:ac:9f:cf:4c:d7:fb:10:55:71:a0:af:b2:b8:
d1:b4:eb:af:15:c7:ba:f2:ed:44:94:4c:e7:ed:ed:
96:94:02:7f:b6:9b:99:79:2d:07:f3:15:4c:83:9b:
c4:91:0d:3b:82:1f:94:ab:4e:ae:ca:b2:cf:4e:1b:
8b:ca:20:82:7c:fb:a6:8a:62:d4:20:bb:7b:40:c6:
7b:e7:96:bd:46:be:ce:42:8f:78:af:42:e3:51:42:
47:2f:09:a2:7e:ee:9a:db:87:7d:2e:1f:be:35:26:
4a:ab:c6:6f:02:d7:fa:7c:5c:d7:8f:9d:90:f5:1c:
cc:e5:4e:47:d1:1d:83:3a:55:9b:f5:27:44:8d:d9:
9a:57:f3:95:90:10:76:83:38:9d:bc:b4:e9:ba:ce:
14:92:2d:64:28:17:90:1e:a5:16:93:b8:41:4c:0f:
b8:64:24:5b:c5:48:57:4b:e0:cf:74:26:42:62:f9:
40:72:77:e1:5d:98:e6:b8:ad:e8:86:67:40:f9:32:
44:20:20:93:3f:2b:24:a1:77:48:cb:ed:b2:2b:f8:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:51:3C:56:85:CD:51:D7:D2:C2:66:50:1A:04:24:06:EB:6F:D6:7E
X509v3 Authority Key Identifier:
keyid:A3:AA:09:0E:FA:AD:BA:03:AC:99:43:AB:7C:E2:31:65:78:6F:98:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6oJDvqtugOsmUOrfOIxZXhvmB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9d515-e629-4d10-adf3-08bd2e6f2f2c/1/o6oJDvqtugOsmUOrfOIxZXhvmB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:2b:04:d1:be:4f:1a:cf:25:bd:dd:fd:0a:de:6c:3b:ae:36:
66:5e:87:c0:d2:3e:a5:dd:83:13:30:45:d9:d1:4f:1e:25:48:
68:d6:db:f2:e2:ac:7b:3a:d2:d2:1c:38:76:95:8f:54:4b:2f:
53:83:7b:b2:b8:25:7e:85:f8:f4:c8:d3:f5:60:06:a2:1e:4d:
bc:e3:9d:2b:97:65:38:2f:37:0d:a2:60:c1:e7:94:b9:fd:d1:
84:8c:28:fd:b1:ff:84:a4:e6:a3:e0:9a:35:61:30:7d:83:8f:
a5:5c:a9:ec:40:47:3b:c8:7a:69:3e:93:ef:aa:12:f6:a7:5b:
b6:8e:45:75:6a:7d:7a:0e:4d:d0:fd:82:10:a1:74:fb:75:df:
f8:32:b0:8e:99:d8:3d:a4:2f:b4:57:84:c4:49:0f:6f:94:00:
71:28:9b:2d:5a:94:57:14:93:50:da:d7:ad:f8:dd:1e:93:cb:
90:e1:b5:1f:3a:48:da:2f:d8:96:a7:b7:eb:ab:ff:16:db:8c:
77:c8:fd:27:42:24:6b:93:a6:85:4f:d8:f8:e2:4b:c2:9c:90:
b1:55:fd:3a:d6:86:8c:67:2a:a4:ed:28:31:1d:47:f8:e7:6e:
b9:db:fe:ed:d3:03:d3:ba:69:22:ac:c7:66:75:50:3a:31:3d:
52:b1:8f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:52:19 2026 by rpki-client