Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: gUvLMeNp8iVf7gs5wzPNS0CsI/4pw5xjq9jqs5ZhAzU=
Subject key identifier: D6:E7:88:63:66:4F:39:E9:54:B5:EB:B4:C1:8C:18:1D:26:EB:2A:8A
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 019CE5C945AF839B79A35FFFB6219740223F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 03F3
Signing time: Fri 13 Mar 2026 06:01:38 +0000
Manifest this update: Fri 13 Mar 2026 06:01:38 +0000
Manifest next update: Sat 14 Mar 2026 06:01:38 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: jGq6I7pipypTCSld9JAC2gxXrMIg+TGkiXQSdb/KzTo=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:45:af:83:9b:79:a3:5f:ff:b6:21:97:40:22:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Mar 13 06:01:38 2026 GMT
Not After : Mar 14 06:01:38 2026 GMT
Subject: CN=d6e78863664f39e954b5ebb4c18c181d26eb2a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:85:32:9a:be:a3:d9:6e:7f:65:c8:e2:ee:78:
a8:41:64:46:7b:ec:4f:05:1d:8a:e9:84:9b:e9:dd:
ce:58:52:bf:70:c7:2e:8d:ef:2d:c8:1b:e2:19:00:
5f:06:7f:12:2a:5a:32:1d:70:f0:e5:0d:a5:ea:79:
72:bb:da:7f:2b:04:b0:39:18:1d:d5:75:0c:11:4d:
4d:73:ee:d9:be:3e:c7:3c:48:8e:56:29:fb:a4:09:
28:f1:01:5b:30:7f:ce:d0:da:07:8d:ec:d6:b4:90:
2f:d2:4d:5f:db:3b:10:5e:6d:9d:e9:86:ef:e9:b4:
e1:df:df:2f:fa:df:5a:32:1a:a2:f5:09:a2:23:00:
e5:6f:0f:06:d6:ab:61:12:37:03:8e:38:35:27:4e:
b6:cf:13:57:28:2d:0b:ec:68:c9:0d:56:cd:2f:f4:
59:29:ef:e9:6c:63:1b:a0:ea:44:cd:36:ff:37:e3:
64:2b:18:08:24:70:cf:47:2d:ee:df:a4:dc:a5:f5:
4e:53:0f:53:dd:60:0a:41:90:b5:2c:ea:67:67:a4:
e5:a7:77:d0:e0:5a:fe:70:28:2b:7c:c7:03:10:2a:
41:f4:96:a2:27:5f:84:15:55:26:05:5e:21:65:f1:
24:ff:a6:97:3d:6f:6d:96:82:de:48:12:df:bd:29:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:88:63:66:4F:39:E9:54:B5:EB:B4:C1:8C:18:1D:26:EB:2A:8A
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:73:94:92:cc:5e:36:a9:07:e7:da:a5:07:dc:1e:a2:c0:13:
bd:74:69:1e:c6:0b:86:ba:c6:dc:e8:76:10:48:c6:c2:65:3d:
12:4d:9c:53:c1:f7:1f:37:31:59:d0:38:3a:6e:36:8c:86:66:
0e:a4:4a:48:4e:48:1b:e8:0b:7f:26:3a:c8:28:12:39:d0:ef:
27:fe:f0:28:36:62:3d:6b:e9:96:f8:fc:c6:d2:d4:78:33:24:
6f:7a:a0:d4:c5:7a:a6:b3:c8:16:58:84:71:93:7e:6a:b3:1f:
d6:f0:1d:04:fa:7e:a4:04:61:a9:ef:f8:73:bc:b9:13:d3:79:
b4:3f:da:98:8a:89:e4:53:de:25:16:23:17:85:7d:b4:af:aa:
33:0f:3b:67:12:63:0c:df:76:4e:d4:a8:d4:fe:27:5c:4e:9f:
81:06:f1:ae:03:29:c3:3b:7b:59:00:43:83:6b:c4:18:da:dc:
60:6c:f1:78:6c:d2:2d:7d:d6:39:eb:22:79:88:f4:14:07:26:
36:d6:d4:39:27:05:94:5e:83:0c:ab:79:f4:f3:e7:93:bd:b0:
8c:81:61:1f:63:ac:6e:6a:01:ba:20:7e:5c:e2:e5:35:66:91:
dc:af:37:00:2d:39:11:62:7a:c7:07:3e:fb:3c:40:0a:97:9f:
b5:ed:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:26:47 2026 by rpki-client