Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: 8GIRxBUYmO/xRgLf/WVAF6dYsPGqBrpMSBiDKZ5h26g=
Subject key identifier: 9F:C3:E2:89:4B:05:61:72:C9:DB:77:F5:C8:9C:19:61:15:84:B7:14
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 019D3A1C7B346CC2ADE5A5BA5B3E3A5673AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0F7D
Signing time: Sun 29 Mar 2026 15:00:38 +0000
Manifest this update: Sun 29 Mar 2026 15:00:38 +0000
Manifest next update: Mon 30 Mar 2026 15:00:38 +0000
Files and hashes: 1: RF94BnXgi0R9Os57s0wl9sVC1E8.roa (hash: 0fOD15YKqjCsf/vXO4OCMgCmPeLPtrJce5ZO8YGHzXE=)
2: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: jhM86nCmrJslR3BdPtiPoanrX/6sOvVVXnLVDTUZ1M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:7b:34:6c:c2:ad:e5:a5:ba:5b:3e:3a:56:73:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Mar 29 15:00:38 2026 GMT
Not After : Mar 30 15:00:38 2026 GMT
Subject: CN=9fc3e2894b056172c9db77f5c89c19611584b714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:ae:a3:5f:15:d6:47:b2:15:ee:93:4f:17:
fd:ea:bd:64:5c:47:43:fc:51:12:27:5a:a0:55:39:
80:7c:e4:51:57:47:e7:17:0d:ac:6a:39:89:e0:03:
af:08:6e:81:5a:ac:40:bb:4c:f2:3f:7b:a5:32:59:
d9:ec:50:c3:13:3a:99:41:6c:80:ce:8c:0b:20:d1:
91:5c:2d:2a:78:4f:d7:4e:df:0b:29:c7:1e:c4:51:
6d:77:0e:99:7d:3c:8c:35:a0:18:0f:c0:5a:f8:30:
b1:d3:a0:09:f6:ae:8a:9f:a7:b4:70:16:a7:78:e7:
25:bf:45:cc:34:03:d2:84:5d:51:1e:a5:77:5a:0f:
b6:32:56:42:26:d3:df:5e:6a:e3:6b:a1:60:47:7d:
9d:1b:1f:69:36:57:09:29:d5:0a:f8:91:47:4c:6b:
b9:6a:77:43:3b:11:a5:78:21:67:d3:17:11:c6:7d:
d0:2e:aa:87:d1:d1:23:40:1a:b1:cc:0f:5d:01:71:
a2:99:36:47:2f:96:61:ae:6f:6d:db:cb:aa:a6:53:
1f:58:98:8c:17:b8:aa:d6:71:16:8b:8b:ae:8e:bd:
99:89:a9:ab:51:78:8a:05:fa:a2:82:63:a5:7b:0e:
7b:f8:85:ac:dd:9a:44:69:e2:d4:f0:0c:0e:88:58:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C3:E2:89:4B:05:61:72:C9:DB:77:F5:C8:9C:19:61:15:84:B7:14
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:83:05:fc:da:90:b5:95:82:26:07:b0:d2:59:1c:74:d6:46:
34:1c:61:20:04:44:ed:f0:57:ba:fd:e9:a1:66:2c:65:6b:a4:
7a:90:bf:aa:1b:90:09:4f:f2:49:04:0d:22:db:f6:0e:10:2e:
55:ed:89:53:cf:a7:5f:44:62:ae:e6:de:09:b9:53:89:8a:5e:
a7:46:cb:da:01:03:09:86:24:dd:a7:91:92:c7:aa:a6:3e:83:
b9:f2:d4:2d:cb:79:51:40:37:49:82:8d:44:c1:a6:7d:16:cf:
78:93:75:7f:15:3e:7c:53:30:d8:73:b9:93:aa:80:c4:48:c6:
ee:79:8a:3e:f4:be:3b:26:9b:f7:c3:5b:a9:67:13:0d:29:d8:
d2:78:5e:31:21:7e:43:63:d1:2d:76:fd:18:5f:c6:ad:f6:2a:
d4:11:00:d8:2a:74:b4:20:ae:ce:c2:9a:26:12:eb:68:e6:c1:
bf:ea:33:ec:98:4d:b1:a0:34:68:22:74:f2:55:2d:fb:bb:70:
c9:f6:4d:de:1b:db:fb:ec:a7:d9:8d:aa:99:d0:cd:27:25:b2:
13:69:40:01:c1:24:90:4b:f3:0f:65:91:a0:1b:5e:e8:f4:b3:
57:28:a3:b7:5f:89:d0:9d:bb:6f:ba:51:77:33:a4:7f:75:21:
5a:07:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:41 2026 by rpki-client