Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: A4gh5hxTFf0II7eL6xLxiQZfvpM2m4+zmeReWxYt9uo=
Subject key identifier: AD:71:45:F7:AF:E4:01:E2:EF:04:C4:B7:D8:F6:D0:8A:9A:24:C9:24
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 019D37C11470AE8F19C6081D0CC35296937B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 11BD
Signing time: Sun 29 Mar 2026 04:01:33 +0000
Manifest this update: Sun 29 Mar 2026 04:01:33 +0000
Manifest next update: Mon 30 Mar 2026 04:01:33 +0000
Files and hashes: 1: E_iRTXv34ZqZD3pIYO9UjKGuMZM.roa (hash: i1fiJO0e9H9m1mOdq45mO4/oIY+M6L6ueaw+taXDZdY=)
2: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: 62/I0oeaXoHDHZAPZGsbvkdur3xUSqZMUPkHq3yrEr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:14:70:ae:8f:19:c6:08:1d:0c:c3:52:96:93:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Mar 29 04:01:33 2026 GMT
Not After : Mar 30 04:01:33 2026 GMT
Subject: CN=ad7145f7afe401e2ef04c4b7d8f6d08a9a24c924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:e4:75:ff:a7:1f:60:da:ac:d4:62:9c:77:
f7:29:5d:0c:a5:9d:2e:05:cd:b0:89:25:2f:2a:72:
69:9d:c1:42:58:0c:90:d1:71:68:11:6e:ca:3b:94:
03:25:02:06:85:b3:57:39:88:2f:18:71:4d:5a:7f:
01:78:62:03:fc:bf:b4:54:7e:a6:60:f6:0c:cd:4e:
de:bb:77:95:d3:23:88:dd:2f:54:99:fc:fe:9d:8c:
c9:b7:f9:4e:ff:94:bb:75:71:75:8f:9f:aa:03:0b:
02:c5:45:1d:47:77:20:4d:ec:66:94:0f:3f:1b:f2:
22:5a:7c:23:0d:7b:54:94:f8:bd:d3:40:ca:a3:a0:
c3:8c:1d:63:da:b1:f1:16:4d:fd:b5:e4:5f:11:76:
60:29:11:3c:b0:4a:f8:d4:3a:6e:da:82:94:e4:ed:
df:75:60:de:6a:30:73:6b:c3:a6:44:5c:48:8e:62:
c1:a5:2c:8d:3c:32:0e:38:98:c0:a5:fe:b2:24:90:
22:0a:4f:db:8e:3c:89:e9:19:14:f5:bb:99:7d:cf:
35:0d:be:55:6f:50:7b:05:55:65:be:87:85:04:31:
a1:12:39:a7:ad:63:84:1f:b6:ee:d6:6c:70:af:9e:
f0:d8:a2:ec:92:87:7a:51:3c:39:7d:23:27:bb:d7:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:45:F7:AF:E4:01:E2:EF:04:C4:B7:D8:F6:D0:8A:9A:24:C9:24
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:15:1d:ef:63:58:a0:a2:a9:15:62:4a:5b:af:e8:78:23:0c:
da:4a:50:8c:0a:61:4e:d4:6d:4a:ef:2e:53:65:0e:65:83:c8:
1d:72:a8:26:40:a0:11:d1:df:ea:f4:11:c3:11:eb:a3:2c:d4:
66:b1:dd:00:e6:c2:41:51:27:55:b4:95:a5:40:16:0c:9a:e9:
8b:0e:7f:f5:b1:be:c5:e2:74:25:fa:be:8f:a9:8c:09:95:75:
fb:0f:43:d0:9c:94:45:79:29:e5:77:0b:bb:db:8a:c8:65:43:
1a:65:44:ab:47:4d:cf:5d:93:6c:05:bf:76:e9:55:25:f5:23:
8b:fa:e4:76:d3:2d:76:5e:0b:b6:bf:ae:4b:f5:bb:d5:44:77:
b8:e7:27:6f:5c:a1:a4:c0:ab:d2:f0:40:cf:bd:c4:e4:84:cd:
61:47:49:86:40:89:36:6f:c3:bc:10:5b:f8:a2:73:cb:c9:9e:
a0:19:80:1b:eb:10:46:6b:9e:84:48:30:9c:60:94:cb:52:17:
52:72:4d:ba:15:5a:55:b5:69:b9:e4:8b:a6:89:5b:e0:ed:36:
a3:12:53:21:5a:85:34:4b:c4:df:65:91:1c:29:0f:2d:7f:17:
d4:8c:e9:fd:2f:48:97:fc:3f:46:7c:1f:1d:17:cd:7c:0e:a2:
c7:7a:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:19 2026 by rpki-client