Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier: W49XSehfTMocynvuPR7J7RrAwfIQOIF0L00dw8BNDD4=
Subject key identifier: FA:99:96:AF:81:6C:81:DA:6C:BC:B8:DE:7D:38:DF:96:2C:9D:C4:B0
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial: 019D37C0C632A57BEC1A44D6D8A205B7C4B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number: 03B2
Signing time: Sun 29 Mar 2026 04:01:13 +0000
Manifest this update: Sun 29 Mar 2026 04:01:13 +0000
Manifest next update: Mon 30 Mar 2026 04:01:13 +0000
Files and hashes: 1: 4U-vWAkU_D-Vm4P_5qD2o7wqRK4.roa (hash: 9yVwmPXyL3uep7UrDkMA6UynM9g3AIcwrtrJCtL/ckw=)
2: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: mafyRoMsTS5emK29ydQ4lNmyriQ/krS3MpzFn+wbHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:c6:32:a5:7b:ec:1a:44:d6:d8:a2:05:b7:c4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Validity
Not Before: Mar 29 04:01:13 2026 GMT
Not After : Mar 30 04:01:13 2026 GMT
Subject: CN=fa9996af816c81da6cbcb8de7d38df962c9dc4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:13:9e:42:72:c4:7f:fe:e4:77:97:a1:ee:
56:f6:dc:54:9a:85:43:b3:ee:30:81:68:72:0a:cd:
d9:20:0c:5c:e5:28:47:b2:31:64:d7:9b:34:40:22:
60:5d:31:2b:da:8a:11:41:17:88:4c:bb:a9:87:be:
82:96:61:0b:bd:7c:4d:ad:cb:31:04:16:be:5c:6a:
64:aa:66:16:84:53:58:ff:27:e2:ce:b0:8b:51:d0:
75:6d:8d:ee:7c:79:92:09:db:09:d4:00:9e:f7:8b:
f6:c3:b9:eb:27:07:c5:96:cf:e8:f2:6f:0f:f1:2f:
eb:4e:31:16:b6:1a:1b:2d:8e:0c:ff:89:b6:0f:b2:
d5:c6:8f:36:6c:ba:fd:e3:98:23:ec:88:f0:11:f5:
df:ba:b3:f2:42:12:6e:97:e0:c4:70:9b:41:8b:53:
e7:9a:b9:89:5d:44:4e:a6:d9:73:fe:c5:e3:fc:01:
01:20:15:51:8d:af:26:cf:60:20:99:b5:48:d5:eb:
29:1c:bc:69:47:81:96:74:cf:b1:ab:26:d2:28:12:
b4:9c:10:db:a1:41:33:21:55:85:3a:5c:55:b8:f4:
27:49:78:dd:05:53:22:25:7f:c0:b8:20:82:2f:1a:
0b:bc:05:07:75:10:a0:13:24:33:c6:c7:aa:fc:72:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:99:96:AF:81:6C:81:DA:6C:BC:B8:DE:7D:38:DF:96:2C:9D:C4:B0
X509v3 Authority Key Identifier:
keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:63:06:5a:aa:f4:cf:89:96:35:71:6a:65:99:1c:0a:6e:d8:
bb:d9:9b:09:b4:f4:89:91:63:83:54:c1:28:ed:25:c9:95:8d:
68:a4:7b:5f:b1:bd:32:bc:9a:17:b6:a4:20:ca:17:99:a3:a3:
69:d7:fe:58:8a:4f:dd:c9:a3:97:1f:99:48:4f:e2:cf:cb:9a:
e1:4a:cb:ba:6f:9a:0a:f4:d3:b3:9e:3e:e8:e5:bb:d1:73:e4:
2d:87:ef:75:c7:1a:4e:51:b8:56:bc:13:80:ce:6a:14:d3:07:
ad:43:f6:56:71:9f:ae:a2:00:28:d9:8e:a1:b4:47:fd:ec:95:
12:ae:16:ae:ab:de:bd:61:f0:54:15:13:d2:9e:17:87:e1:3a:
3d:a2:a8:b5:11:06:e1:6e:94:fa:fa:97:c8:82:2c:9b:1a:e6:
2e:6b:02:d3:68:5f:95:9f:6e:44:a5:c3:85:ec:d9:11:df:3d:
6c:1c:1b:5b:b0:5e:08:6c:f7:89:3d:1b:6f:d1:8a:b1:e8:28:
31:eb:03:3d:8e:1a:b5:a8:cf:ed:ab:56:bc:4c:8c:25:3f:0e:
14:eb:89:8b:b8:c9:d4:dd:60:8e:c5:57:39:59:1b:db:44:e2:
ca:d2:ef:6f:fa:56:d1:d9:73:ea:10:6c:ee:f8:c8:0a:0c:8d:
02:d4:72:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:49 2026 by rpki-client