Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: L5Y5FkLEKtWfOWOrO9Ir+IzleGY6dDMjyxMJzJ7/H+U=
Subject key identifier: 19:E4:28:88:D3:55:50:F6:D8:3C:48:6C:B6:E1:6F:BE:27:25:86:EE
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019D3AC19C5CAA06E8E54866AE755C9B529E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 18:01:00 +0000
Manifest this update: Sun 29 Mar 2026 18:01:00 +0000
Manifest next update: Mon 30 Mar 2026 18:01:00 +0000
Files and hashes: 1: A64W6614jSKOipagUq4esU4_VnM.roa (hash: xLqDioXNu9/ImV10GNbnXjX0lmGB/yXNEGDqLOMVfeA=)
2: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: bmBi5bEH+f+5aSlsukHZ/xS/vLmYrirvEHkbRMNA3kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:9c:5c:aa:06:e8:e5:48:66:ae:75:5c:9b:52:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Mar 29 18:01:00 2026 GMT
Not After : Mar 30 18:01:00 2026 GMT
Subject: CN=19e42888d35550f6d83c486cb6e16fbe272586ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:a4:99:66:8f:30:42:4b:9f:8b:fd:5b:d9:
62:2d:91:81:f0:65:10:f7:ea:c2:b4:8e:fd:dc:2a:
2c:36:a7:97:a5:68:de:73:1e:05:22:b5:ae:02:ed:
aa:fe:67:60:c3:ff:dc:3e:c4:9a:9e:b9:d3:ae:be:
0d:c7:ef:45:c5:9b:0e:96:72:40:95:f1:8b:b0:db:
20:08:a3:bb:0f:40:99:7d:0a:b8:bb:ae:53:b9:92:
8f:df:6c:6a:33:df:cf:de:e3:05:09:30:e8:00:32:
bb:d6:a3:0e:7b:a8:e7:a6:53:ee:dc:8b:f6:50:d7:
b8:a2:41:e5:dc:53:34:18:92:c3:c3:fb:e0:46:6a:
07:c0:bc:74:26:fb:1e:73:92:86:84:e2:72:d0:af:
b9:c7:b2:e2:af:30:53:f8:fb:14:75:20:ad:d1:97:
63:78:d0:97:c6:43:6e:67:5b:ee:c6:81:5b:97:06:
f6:de:c7:38:ce:e8:6c:d1:01:dd:43:9a:62:9a:8a:
94:d4:e8:68:10:38:8a:f0:4a:67:e7:f8:84:ee:77:
ba:1e:69:c7:2f:6e:05:2b:34:3e:a7:b8:d0:86:c9:
ed:80:b5:65:a2:dd:07:dd:b6:57:ea:87:19:41:89:
5e:d8:c8:5d:b0:0f:c3:1a:4c:d8:c6:0a:f6:02:79:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E4:28:88:D3:55:50:F6:D8:3C:48:6C:B6:E1:6F:BE:27:25:86:EE
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:96:d9:e8:99:bd:5b:93:6c:50:42:8b:e8:e8:75:fa:f8:ba:
f6:75:d9:e7:f9:d3:a1:45:af:90:00:8a:41:64:a9:cc:ec:9e:
99:07:f8:d4:f1:8f:1a:bc:89:a3:a0:bc:9b:60:be:c2:d1:26:
f8:ad:5d:b0:7d:c3:32:a1:16:b5:fc:ab:26:30:55:0d:4c:5b:
6f:11:5e:76:41:d7:82:be:72:7d:cc:c6:12:c0:23:3f:ff:af:
52:f6:09:49:b2:34:c7:44:33:f5:95:d0:f8:bf:b4:68:f9:bf:
2f:4a:2c:f0:98:1d:f7:7d:ab:04:9c:45:21:fd:c3:29:78:ed:
0e:1a:7d:71:7d:ac:58:d0:f3:3e:e9:eb:bd:47:16:00:6d:81:
67:5e:fe:c1:01:d3:7d:fd:75:db:94:d3:a0:7b:36:f2:31:cb:
c9:59:98:e2:df:b0:ca:b2:03:10:e3:9b:2b:ad:f7:c7:de:13:
1c:98:51:01:2f:30:1b:89:06:e2:52:a3:5f:8e:97:f1:97:f9:
62:e1:b7:bd:0c:e4:28:e1:e3:e9:6c:ce:3f:3b:e2:2e:11:4d:
c2:a9:fd:64:02:51:d9:04:67:e5:ec:12:ef:ca:fa:d5:5f:32:
08:ba:2a:a2:b3:75:3f:45:8f:9f:d2:99:93:e7:cf:39:3b:02:
00:34:0b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:47:36 2026 by rpki-client