Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: d6Cx4DGGpcZWqLgKCiypnetPY/ckhaK3lMdwEZMp+IQ=
Subject key identifier: AD:8C:E9:12:B6:79:48:6A:92:29:5A:85:3F:B1:74:D1:E9:EE:B7:37
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 019CB9CB4D2C3B5780B735814333DE223666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 1850
Signing time: Wed 04 Mar 2026 17:00:34 +0000
Manifest this update: Wed 04 Mar 2026 17:00:34 +0000
Manifest next update: Thu 05 Mar 2026 17:00:34 +0000
Files and hashes: 1: acv-v2eHqlrCvjloaRGiMlCidZI.roa (hash: oC/VXdmhm0cHY+VKvZYv7E0OaLtC7J/ULHsMcrTf+MI=)
2: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: lLEgbPvCLKay0OvAU8KP7mw4T/u2GJmGOfWNFxxJBAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:cb:4d:2c:3b:57:80:b7:35:81:43:33:de:22:36:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Mar 4 17:00:34 2026 GMT
Not After : Mar 5 17:00:34 2026 GMT
Subject: CN=ad8ce912b679486a92295a853fb174d1e9eeb737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:56:c0:ae:9c:25:dd:0e:bd:3f:1c:0f:a7:
63:dc:05:18:fa:49:0d:55:21:6a:e9:5e:cc:ab:05:
72:91:06:39:6e:d0:cc:26:a3:4c:e5:d4:91:41:1f:
a1:09:1f:c1:e1:bc:84:3a:e7:83:43:07:16:a8:29:
e6:48:db:19:c2:f4:1f:0e:49:58:a8:4e:be:0f:b4:
a7:2d:d0:15:91:44:7d:8b:4b:5c:e2:cf:48:d6:a4:
20:81:15:36:95:bf:f6:db:56:b0:80:da:6c:66:2b:
79:b6:05:9d:ef:ba:bc:60:9d:de:7a:59:c2:28:2e:
6f:e7:85:bc:12:ec:31:54:9e:7a:69:78:4b:b4:e0:
ff:aa:5e:ed:93:41:9a:ce:a0:e4:c9:83:60:8e:27:
a2:35:4c:a4:0a:7a:87:a2:67:c6:e8:b6:59:74:47:
b4:77:b3:3a:24:71:46:28:90:ac:7a:43:be:b3:d8:
5a:81:75:0a:8b:e1:93:c1:a8:0e:df:bc:94:80:ff:
a7:de:a8:e8:db:fb:9b:95:8c:a4:67:d4:bc:65:36:
c0:ea:7d:fe:75:be:ab:b9:1d:9d:dc:c1:bf:69:e0:
ff:1e:bc:80:cf:e4:9c:5e:26:bf:f1:55:af:f4:8f:
a7:71:c0:73:01:1e:3f:fe:f8:ee:6d:2b:f9:32:c9:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8C:E9:12:B6:79:48:6A:92:29:5A:85:3F:B1:74:D1:E9:EE:B7:37
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f8:9a:3e:56:d8:7f:9f:46:c1:eb:1b:64:61:bd:cf:64:2c:
19:f1:84:8e:81:6f:53:74:08:fc:26:54:ef:6f:23:da:c0:a7:
f9:9e:0c:bf:0c:eb:af:05:20:8b:ca:ef:40:49:4b:e9:e4:61:
84:24:5e:97:94:3a:10:29:0d:63:3e:7c:7a:ff:0f:bd:3d:06:
97:8b:50:5f:c7:3b:b1:9c:24:eb:6f:86:2b:26:4e:69:2d:2e:
8e:05:ed:9d:b9:1e:26:19:23:1a:b0:d4:79:99:78:8f:d3:30:
6e:ab:88:56:1b:46:aa:2b:bd:12:fc:e5:6d:fe:a1:db:da:60:
18:32:e4:1b:c1:b2:27:cb:2e:ba:00:43:f7:9f:a3:77:22:81:
49:f1:90:b0:1e:d9:86:b8:ae:fb:94:8b:e0:6f:ea:fe:53:47:
f0:16:b8:c3:d3:6b:7c:8c:3a:dd:84:6f:df:70:64:b9:3c:0c:
9a:04:a3:f0:8c:65:3f:c3:fc:2e:3e:f1:c1:5a:f2:df:e7:c2:
54:62:ec:c1:49:5f:b7:07:c8:7a:af:70:ee:af:84:88:9d:b1:
33:07:53:3d:df:f4:be:c4:56:46:6b:02:f9:91:62:ce:d2:12:
1c:c2:1a:25:30:4a:4d:0b:60:ea:30:59:e7:e8:ac:e5:4d:4c:
16:de:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:04 2026 by rpki-client