Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: mjqCmdYyr+G6VCymIU49kfJxP+HRW3+MaK9lv2gLVeQ=
Subject key identifier: 30:65:A1:6E:53:8A:9B:E6:BD:EB:67:AF:6E:56:1E:8B:3B:4A:62:50
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 019D382EBDC333D503F2AE472AFFEC0820AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 1608
Signing time: Sun 29 Mar 2026 06:01:20 +0000
Manifest this update: Sun 29 Mar 2026 06:01:20 +0000
Manifest next update: Mon 30 Mar 2026 06:01:20 +0000
Files and hashes: 1: 6NIaTUJDouCrOz0JAuSF_NduOwA.roa (hash: hDytd6duXPNmzRp/8kY+LISu/ZM6ohz2sTIHpo5hKjg=)
2: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: L6DBLIYL46VTA7BDR7pp8gYgm2yvmG4HVxJu5g9djMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:bd:c3:33:d5:03:f2:ae:47:2a:ff:ec:08:20:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Mar 29 06:01:20 2026 GMT
Not After : Mar 30 06:01:20 2026 GMT
Subject: CN=3065a16e538a9be6bdeb67af6e561e8b3b4a6250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:84:e1:e7:b7:76:db:21:ca:2b:fc:ac:02:
e0:48:a4:91:72:b4:99:62:0a:c6:05:af:42:f7:6a:
f5:6f:82:79:d6:a7:9d:7d:c1:d7:ae:36:ab:e9:66:
17:2d:0f:8d:5f:0c:0d:31:c2:df:8d:03:42:dd:4b:
df:ec:c4:20:58:c6:a2:f4:0a:b7:50:ad:06:82:25:
5d:b3:53:a6:18:a4:27:8e:2a:3b:ba:09:d7:d1:ac:
bd:dc:1c:92:8d:da:53:31:89:d6:97:d3:86:04:bf:
64:fb:79:13:a7:59:20:9c:23:04:bb:7b:c4:34:3e:
70:ac:62:02:24:d1:98:04:bf:40:09:e5:a5:c4:6b:
27:bd:71:7c:64:a6:d2:7a:f7:a9:08:b5:7c:1e:08:
0a:07:e1:fb:20:33:b7:37:1d:ce:3f:84:0f:0f:ee:
a4:d9:ee:56:2f:21:82:1c:02:ed:f2:20:4a:2a:3d:
6d:c2:95:50:8c:ba:30:f2:b8:6d:42:88:ac:b7:73:
25:9e:27:f7:ed:a3:65:9b:d0:66:f4:c3:22:3b:d7:
75:69:0e:be:16:2d:e9:30:25:a0:5c:66:54:90:64:
3c:5f:23:00:52:21:de:e9:cb:4d:7d:08:be:64:65:
b5:77:14:72:1e:af:cb:5c:07:25:34:7d:22:22:dd:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:65:A1:6E:53:8A:9B:E6:BD:EB:67:AF:6E:56:1E:8B:3B:4A:62:50
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:59:a3:8d:c4:bf:e4:c1:c6:12:7a:12:d1:21:c3:33:62:c8:
7a:6d:4d:2b:1d:11:c4:d3:53:78:b6:64:06:8b:82:d2:92:db:
b6:b1:07:49:14:a5:d2:93:7e:a9:90:38:04:e0:bc:ef:32:97:
cc:77:c0:99:62:f9:65:56:e7:2c:92:2a:8a:92:4f:b1:82:b2:
35:30:1c:fb:c9:3b:28:89:6b:00:41:57:bf:32:8e:84:24:7f:
77:d7:e6:a8:34:a5:02:39:74:4f:44:ff:e4:cc:94:c0:a3:7b:
48:b0:0c:3e:b3:b7:a1:4c:fa:ee:70:58:b1:76:84:2c:bd:c3:
76:01:bc:e4:10:bc:25:bb:cb:7b:6e:ce:eb:ab:02:c5:0d:85:
7a:92:21:03:8c:6b:65:fe:71:cb:b3:c5:cd:5b:99:7a:a1:53:
75:24:3e:59:e1:c8:00:ac:68:a8:35:ba:2f:1d:f7:2b:2d:66:
8e:cc:fe:4d:18:b5:1d:0b:a8:e2:ae:8c:6d:a4:23:cb:da:7e:
61:5b:81:76:77:bb:4f:30:8a:04:58:61:e0:5c:91:de:82:0e:
22:d7:da:05:57:ec:f5:81:e3:4c:44:a4:be:82:17:e8:f0:35:
61:03:ad:ae:e9:7e:12:f4:42:17:12:50:57:97:37:99:57:14:
ea:b2:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:54:40 2026 by rpki-client