Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: 4fBTcK78UGIHdbEuU+WoOOLYEk3XuOYbN33MAs+p4dI=
Subject key identifier: 48:80:15:C8:29:FF:84:FA:22:DA:C9:0E:5B:29:BB:1B:EC:F5:2F:C0
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 019D37BFFA7D3705BDD69E7C9390402C040F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:00:21 +0000
Manifest this update: Sun 29 Mar 2026 04:00:21 +0000
Manifest next update: Mon 30 Mar 2026 04:00:21 +0000
Files and hashes: 1: EGhCTTfVVprxfgVg9w5atVlArWI.roa (hash: JDsw+DMZgV8QwOWY/aZzhS3S31WDwwwLV0nKa6xyF8c=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: rqS2oiXCePgiVRrUJqi8Zez7YwMfGf/6iHK9RueK/vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:fa:7d:37:05:bd:d6:9e:7c:93:90:40:2c:04:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Mar 29 04:00:21 2026 GMT
Not After : Mar 30 04:00:21 2026 GMT
Subject: CN=488015c829ff84fa22dac90e5b29bb1becf52fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:ae:31:3f:d9:21:6f:e7:b1:81:ea:13:6b:
69:77:f7:e5:0f:84:02:09:43:23:2a:d6:56:bf:45:
5f:7f:25:c9:f5:43:5b:38:30:4a:f3:62:99:c7:74:
dc:d9:78:e4:6f:4b:2d:fd:8d:11:41:fb:1e:17:5d:
9b:e2:43:86:c7:bd:8f:34:6a:d3:51:c0:0f:7c:bd:
91:0e:81:7a:88:0c:e8:30:ec:35:49:f2:dc:42:3d:
49:8b:b6:83:3f:62:aa:1f:3e:5a:f9:ef:e6:e9:24:
35:7f:4b:10:85:b2:7a:d0:5f:d6:ee:fb:e9:43:f5:
e3:4c:4b:bf:2a:6b:69:53:ba:13:23:34:0e:37:12:
84:aa:aa:b3:5c:d6:27:35:24:aa:ea:c0:e7:b6:3e:
ba:d1:01:5f:f7:76:de:62:4d:f4:d2:d3:7e:a8:3c:
8b:a5:5e:80:e9:a8:b7:11:3b:ef:87:6f:b0:a2:90:
8f:e2:db:1b:87:e7:44:ba:03:df:fe:66:02:51:7e:
24:c6:1c:39:e7:d2:d4:2e:e6:24:d9:52:89:35:dd:
de:8e:2d:fb:4d:79:07:8a:b6:5d:0f:e9:c8:71:d6:
6f:03:4a:49:c6:75:ff:53:55:a0:c7:7a:5e:e9:5d:
6f:b2:dc:f7:bf:8e:1c:6b:39:a8:63:ce:ba:79:bb:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:80:15:C8:29:FF:84:FA:22:DA:C9:0E:5B:29:BB:1B:EC:F5:2F:C0
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7f:f0:1f:37:59:bb:08:ea:39:4e:46:34:db:52:cc:4f:f0:
f6:79:00:8c:28:fa:d9:7a:a4:77:c5:13:60:cc:40:14:80:5b:
ee:fd:ca:81:a5:cd:9c:c6:c6:a0:05:e6:9e:40:2b:74:aa:af:
dd:87:0d:21:5e:5f:52:21:8f:6a:cf:23:44:38:d3:1e:20:d9:
74:32:2a:fa:82:95:83:88:44:be:9a:94:6f:bd:ca:0f:97:28:
05:8c:38:ee:2e:9d:96:7c:63:89:1d:36:f0:ac:7c:42:a5:92:
32:aa:38:2d:e1:13:63:f0:f6:a9:8c:71:b0:6c:f7:71:24:7f:
31:5d:1b:72:dc:39:ae:2d:1d:8d:53:a5:dd:b4:86:cb:47:bc:
7a:da:b1:ec:d8:43:d3:f2:bf:38:67:f9:83:80:0e:52:20:20:
bc:c1:d5:aa:0b:80:fd:8f:dc:cf:65:bd:7e:10:af:a1:e5:f4:
e8:a0:d8:0c:15:a3:ff:cf:b9:dd:b6:42:62:e7:c8:ff:ed:7b:
64:06:b0:38:ad:3c:94:38:37:e2:72:e3:f6:64:b1:97:74:f5:
d8:ec:34:05:80:ca:95:ef:fc:9c:c5:59:fb:bb:bf:36:09:81:
1c:34:6b:a3:ca:0e:8f:cb:7f:3f:aa:91:bc:f6:b6:78:5c:1c:
94:0c:47:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/p9NwW91p58k5BALAQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMGI0MjYwNGIzZjhlOWU1YjcyZjIzMjkzODlhZjE4ZmZi
ZDIwYjgwHhcNMjYwMzI5MDQwMDIxWhcNMjYwMzMwMDQwMDIxWjAzMTEwLwYDVQQD
Eyg0ODgwMTVjODI5ZmY4NGZhMjJkYWM5MGU1YjI5YmIxYmVjZjUyZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTWuMT/ZIW/nsYHqE2tpd/flD4QC
CUMjKtZWv0VffyXJ9UNbODBK82KZx3Tc2Xjkb0st/Y0RQfseF12b4kOGx72PNGrT
UcAPfL2RDoF6iAzoMOw1SfLcQj1Ji7aDP2KqHz5a+e/m6SQ1f0sQhbJ60F/W7vvp
Q/XjTEu/KmtpU7oTIzQONxKEqqqzXNYnNSSq6sDntj660QFf93beYk300tN+qDyL
pV6A6ai3ETvvh2+wopCP4tsbh+dEugPf/mYCUX4kxhw559LULuYk2VKJNd3eji37
TXkHirZdD+nIcdZvA0pJxnX/U1Wgx3pe6V1vstz3v44cazmoY866ebun7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiAFcgp/4T6ItrJDlspuxvs9S/AMB8GA1UdIwQY
MBaAFKALQmBLP46eW3LyMpOJrxj/vSC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQt
NzM5NmQ4YjY0MGFkLzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQtNzM5NmQ4YjY0MGFk
LzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX/wHzdZ
uwjqOU5GNNtSzE/w9nkAjCj62Xqkd8UTYMxAFIBb7v3KgaXNnMbGoAXmnkArdKqv
3YcNIV5fUiGPas8jRDjTHiDZdDIq+oKVg4hEvpqUb73KD5coBYw47i6dlnxjiR02
8Kx8QqWSMqo4LeETY/D2qYxxsGz3cSR/MV0bctw5ri0djVOl3bSGy0e8etqx7NhD
0/K/OGf5g4AOUiAgvMHVqguA/Y/cz2W9fhCvoeX06KDYDBWj/8+53bZCYufI/+17
ZAawOK08lDg34nLj9mSxl3T12Ow0BYDKle/8nMVZ+7u/NgmBHDRro8oOj8t/P6qR
vPa2eFwclAxHtA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:07 2026 by rpki-client