Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: FjFAmrzmpG764egZAy0wS+8qe/FhE4IeHH/RaAmZDis=
Subject key identifier: 79:F9:58:F6:39:F8:5B:A9:9E:4E:90:8D:7B:C0:24:B2:0E:F9:3F:DA
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 019D389C16E67987368FC1D840C8C4AF50E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 1129
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: x9Ex6ZVDUvFiH07p/+Z5TUTl/BxWc6tqLtfcSHhFPzE=)
3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:16:e6:79:87:36:8f:c1:d8:40:c8:c4:af:50:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=79f958f639f85ba99e4e908d7bc024b20ef93fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:93:01:3c:ce:ce:d1:10:3b:b1:da:eb:1d:
af:f0:80:12:5d:a8:26:58:8e:66:24:75:fe:0a:7d:
39:cb:c2:a8:08:66:e9:c7:1b:d9:00:ea:6d:ed:55:
80:bf:49:3d:92:47:62:c5:b6:9d:cc:6c:15:9d:f0:
41:67:ab:70:20:8b:82:22:ae:aa:2d:1e:f8:9a:ab:
81:ac:0f:03:36:dd:3b:35:d2:ea:59:0a:16:f5:dc:
09:fc:3f:be:37:7b:7a:54:ed:cd:4c:9b:11:ad:92:
2b:48:aa:0d:0b:63:15:62:cf:df:ec:6d:18:90:34:
15:5a:44:84:47:15:7a:19:b2:0b:6b:3e:30:6a:25:
85:8a:1c:a5:64:84:1c:d9:77:4e:25:9c:a0:40:d3:
8b:25:02:28:66:74:36:e5:e9:c2:ed:02:ea:f3:f7:
98:63:57:f8:b0:bc:37:59:4e:9a:cc:6a:f0:0e:cd:
48:1b:39:ef:ae:6d:3b:d3:b3:34:76:f4:a1:4a:63:
78:57:eb:00:ff:a5:74:4d:92:33:2a:e6:5d:95:00:
35:29:7e:97:47:63:28:78:42:eb:71:48:d9:79:28:
7d:2c:16:28:28:ea:3f:4c:a8:ff:ef:e8:42:f8:7b:
4d:a7:87:9a:d6:02:20:fb:8a:b0:01:5b:3f:01:5b:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:58:F6:39:F8:5B:A9:9E:4E:90:8D:7B:C0:24:B2:0E:F9:3F:DA
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b5:d7:f8:fb:94:43:3d:3a:b3:64:3e:6a:23:65:c8:af:f3:
74:e9:bf:b2:ae:11:49:0d:0f:f2:17:b7:61:d7:85:94:4f:7b:
25:df:74:53:5a:1d:c3:ce:88:29:83:c6:82:2e:cc:70:01:d1:
c7:4b:c9:cc:b5:d2:d3:23:e3:5b:9c:f2:1e:ed:90:24:2c:77:
57:b1:c2:3f:0f:e8:1f:43:a5:c2:ab:17:3e:38:1c:fd:63:b6:
f0:a7:0b:6f:7e:87:2a:d3:f3:94:dc:0d:b5:58:da:df:ae:17:
2f:24:4c:48:3d:22:09:dd:4c:0e:c4:94:15:4a:c9:21:a6:ae:
d2:1c:83:2f:a5:a8:04:9f:97:23:f9:59:3b:73:81:f3:97:34:
45:39:d3:df:0d:f7:8c:aa:3f:8a:87:f9:24:3c:36:f1:b6:d1:
f8:8c:ee:08:ca:fc:d3:3d:42:24:4f:28:af:01:89:20:10:25:
36:17:f6:26:20:6d:b2:4d:6e:94:62:1f:46:74:28:a7:e2:61:
c0:87:eb:a6:ff:31:ad:b4:83:64:79:db:34:3c:76:71:15:aa:
ea:a6:eb:2e:81:29:d7:da:8e:69:60:d4:33:ee:18:69:a3:7f:
24:f1:3a:92:f1:39:21:54:73:a7:2d:45:aa:17:df:87:8c:1d:
3b:84:4f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:46 2026 by rpki-client