Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: WSV+EfLBNvtB0wHhO/9c/iUpydl+KUtt97oGv/E2DCs=
Subject key identifier: 0F:94:2B:4E:3B:2C:BF:AF:8B:6E:70:F9:C1:B5:42:C0:11:E4:CE:C5
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 019D382E692E6139A25B14FCC028FFCFE808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 1398
Signing time: Sun 29 Mar 2026 06:00:58 +0000
Manifest this update: Sun 29 Mar 2026 06:00:58 +0000
Manifest next update: Mon 30 Mar 2026 06:00:58 +0000
Files and hashes: 1: 6GbxDT6a6WV6sMU4TLzGDdlwYGg.asa (hash: IznoMM07vrX9zSwsytLqGEh6ipn7AIyTyq5l5KBrdbs=)
2: VN57OoPBsGwrpB2MMJuifcY0BKk.roa (hash: DcZvkcVJE9Z9uRMzY1z6mkbvBqMp9YTBuJgd294hlxc=)
3: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: h8pkpuQ3ba+8C4Jtaq69Do6K/cXBqPJC06tTJeNFHQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:69:2e:61:39:a2:5b:14:fc:c0:28:ff:cf:e8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Mar 29 06:00:58 2026 GMT
Not After : Mar 30 06:00:58 2026 GMT
Subject: CN=0f942b4e3b2cbfaf8b6e70f9c1b542c011e4cec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:84:d4:73:e4:64:e3:29:ab:98:79:d1:58:
bc:d2:5b:00:2c:bb:fa:ff:47:63:9a:77:14:97:17:
a6:1d:b5:3a:85:a1:1e:5a:be:2a:14:70:87:c1:8e:
46:82:6f:b1:76:e2:00:7d:f0:29:a8:66:8a:bd:b5:
85:61:b7:9e:89:b9:1a:e7:d5:6c:6f:e3:48:50:bb:
a2:8c:a8:c5:26:fa:6c:5d:c4:26:c7:76:ac:d4:a0:
22:fb:b8:cd:9c:63:c8:f2:3d:de:cb:d5:d9:50:72:
4e:af:a3:d2:33:5f:44:1f:0e:dd:ea:31:82:4a:db:
b4:34:42:81:80:72:77:7b:b7:40:73:51:f5:b6:ee:
75:8f:34:eb:3a:0c:0b:68:fc:d5:2d:8e:52:4e:61:
41:f4:92:dd:99:1b:d3:b6:0c:7d:e1:24:fa:ae:1e:
e8:e1:d2:41:70:e2:56:ac:b3:0c:73:25:0d:f7:35:
c5:fd:60:eb:91:fb:b5:22:ab:27:d3:ce:97:a1:cc:
60:bb:d6:e3:e4:47:d9:91:56:8e:7c:a2:2f:87:17:
5c:e4:ba:62:13:df:2f:17:32:53:3b:bd:97:ac:1c:
a7:09:10:2c:09:3d:5a:ea:6f:e1:e8:79:6e:23:e4:
02:00:fd:02:a9:c1:3d:94:00:31:56:6a:eb:3e:47:
c4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:94:2B:4E:3B:2C:BF:AF:8B:6E:70:F9:C1:B5:42:C0:11:E4:CE:C5
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:de:83:63:09:06:92:ca:0e:fc:66:3b:b8:bb:b0:5c:48:4d:
3b:b8:58:d5:05:92:79:c6:67:62:6c:6d:e3:14:19:7a:f0:3e:
0d:c4:37:44:33:61:ef:fb:8e:e2:1d:33:55:9e:ff:38:cf:bf:
88:f8:5f:e2:08:f0:2c:97:2e:a4:f6:80:65:aa:2d:1f:0d:c3:
66:0a:28:a0:72:52:af:7a:e3:32:95:15:04:1a:3f:dc:b4:b4:
ce:d6:18:19:c2:bf:07:16:9a:2c:87:d3:74:69:95:e2:9b:d4:
8f:a5:cc:8f:45:f2:45:8d:a3:ff:c5:42:79:ff:e3:f0:bf:8d:
b9:26:52:27:74:98:0f:02:bb:bc:3c:37:c2:fe:bd:4a:40:1a:
18:a4:49:6f:aa:9e:08:83:87:e2:6b:e0:68:a9:84:fa:cb:ca:
e4:eb:75:d9:6d:4c:6b:bd:8b:c0:d2:b6:f4:92:f4:71:6d:99:
ca:b2:75:20:23:df:30:b2:ab:9f:1d:f0:d6:c3:68:2c:9b:2d:
8f:d7:da:4d:4e:7c:2e:67:8e:73:1d:2b:fa:fa:e2:cc:8e:79:
c6:dd:e5:6e:b2:3c:fc:be:46:c2:cc:8e:f4:82:58:04:04:52:
10:73:f9:3e:c6:37:1b:36:b2:f5:a5:33:ac:54:8f:eb:ab:15:
49:c0:83:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:41 2026 by rpki-client