Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: 9SjkQ0Sm2clSYpTbFwC2nvHZijAyNHL+0mu6E3HX69Q=
Subject key identifier: EE:B0:89:B9:56:EC:77:33:50:C1:60:BF:E6:24:0F:53:A5:73:0F:43
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019CE5C982358670C694005E2F41246A4D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1871
Signing time: Fri 13 Mar 2026 06:01:54 +0000
Manifest this update: Fri 13 Mar 2026 06:01:54 +0000
Manifest next update: Sat 14 Mar 2026 06:01:54 +0000
Files and hashes: 1: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
2: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: 8DZrNYftxkm3c8uFTCVOrzuKLoicaG+XeojubkWzpNg=)
4: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
5: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
6: a3rA8eGuwHcYBSwVzbbc11I2Urk.roa (hash: cT4DoQsTYje8hNsAaND3rx8+vYRHrFLlE/W9JtRBh+8=)
7: hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa (hash: z2Fk8o05kqf7vSmZOKJV+E6QrC7t6Pe5xa8E+bNZIE0=)
8: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:82:35:86:70:c6:94:00:5e:2f:41:24:6a:4d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Mar 13 06:01:54 2026 GMT
Not After : Mar 14 06:01:54 2026 GMT
Subject: CN=eeb089b956ec773350c160bfe6240f53a5730f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:26:0f:2d:a3:f2:16:9f:5c:1a:41:1a:41:
e9:48:57:23:59:44:d0:04:34:fb:03:09:34:16:9d:
c9:d7:83:ba:0b:3a:9e:31:09:a7:fa:4a:49:57:7e:
b6:ec:0d:a4:cd:7b:aa:8f:fe:d5:a0:ab:1c:6a:6a:
68:c9:7b:81:0f:93:73:72:d4:d4:f7:bc:e3:80:d5:
72:4a:e5:e5:b8:20:5e:e0:63:f1:7c:ff:b7:d2:63:
eb:70:53:66:ce:82:52:35:73:40:c6:a7:02:6f:0e:
a0:0b:8f:30:15:a3:be:2f:40:f2:14:9e:87:a2:98:
40:75:1c:0d:34:2f:a0:d2:14:e8:30:c4:c5:ab:d4:
9c:40:fe:74:ba:17:a1:ee:bd:b1:56:c3:ff:d7:e1:
34:ef:c7:29:5a:43:5a:55:17:ec:48:ce:bb:cf:9a:
b0:4e:cb:10:60:e5:6c:14:c8:84:f7:bd:a0:fa:df:
39:24:05:1a:78:2c:de:2c:cf:f2:3c:67:a8:c6:59:
c8:c7:1e:de:66:70:3d:d1:df:7e:6d:6c:8f:40:ce:
e6:96:28:00:2c:69:d4:a2:ee:44:d5:b3:53:d6:51:
c7:88:f0:65:6b:20:63:c4:55:93:5e:e2:d1:fc:39:
d0:20:60:83:46:47:f2:d8:67:73:02:2a:bd:0e:2d:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:89:B9:56:EC:77:33:50:C1:60:BF:E6:24:0F:53:A5:73:0F:43
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:94:35:e6:41:46:1e:fb:25:64:7c:da:d8:1c:9c:bd:5c:1b:
83:47:e4:6b:f7:03:6c:33:be:77:c2:e2:b0:be:b1:d6:03:39:
12:56:2d:61:93:de:6c:f0:4e:9d:aa:0c:3a:7f:90:15:7f:d9:
c8:50:15:64:1b:df:94:1b:34:48:ab:81:3a:ab:4d:2f:8f:52:
73:62:37:ae:ac:e4:bf:91:b6:e6:a8:f2:a4:8e:71:a0:bc:38:
70:83:1a:01:2b:7b:52:85:cf:bd:5b:67:4f:50:07:9e:42:66:
ca:28:32:40:22:01:08:ea:4d:c4:ef:56:1b:bd:ba:9a:4c:04:
c7:84:10:4c:a0:47:46:09:e6:51:6b:d7:a4:4c:4a:22:27:44:
c1:e9:39:2d:67:bf:8a:5f:e5:9d:f0:8d:97:3d:54:ba:bd:e1:
6f:f8:85:b6:ae:ff:e8:61:03:7f:7d:a7:2b:18:b3:b7:d5:1b:
9c:28:99:62:22:9d:5a:f2:9c:41:f2:be:45:00:81:a3:fa:b7:
45:44:89:03:71:30:7e:55:81:87:17:b0:3c:1f:9f:a0:1a:5c:
5b:d1:ed:52:7b:99:12:67:c4:78:3d:7f:d4:1e:fa:b2:25:88:
5a:a5:08:00:21:71:e9:eb:75:a5:34:24:23:7e:46:99:24:44:
39:86:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:26:50 2026 by rpki-client