Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: QW0UuL1/UR+oSXVUsfnkswfxZnapy1Sy07bdzHzrZxI=
Subject key identifier: B7:1A:D6:C4:C0:9B:CC:B5:8B:84:2A:EC:32:CB:B3:5A:C8:88:20:32
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019CE635D30FC0E5F183784A65DF66DE7500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1875
Signing time: Fri 13 Mar 2026 08:00:12 +0000
Manifest this update: Fri 13 Mar 2026 08:00:12 +0000
Manifest next update: Sat 14 Mar 2026 08:00:12 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: PvdH+SPBgrXlIloczAdTdNe7mR/xy5fb1b8lHNk9wTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:35:d3:0f:c0:e5:f1:83:78:4a:65:df:66:de:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Mar 13 08:00:12 2026 GMT
Not After : Mar 14 08:00:12 2026 GMT
Subject: CN=b71ad6c4c09bccb58b842aec32cbb35ac8882032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b1:7b:8f:3c:e0:40:30:c1:65:64:f7:3e:e2:
ad:a6:de:e2:62:ef:4a:0b:26:bc:04:71:81:30:31:
13:90:de:76:8e:f1:5f:9a:ec:04:0e:6d:74:4e:74:
f2:be:3f:44:af:c1:a4:e6:69:7f:06:a8:0c:21:65:
80:e2:76:20:0a:ed:bd:e3:f0:08:5b:1c:a4:b1:d7:
35:01:e4:72:24:18:8e:a9:b8:42:25:17:cc:59:df:
1b:85:96:9e:5e:f0:b5:9b:3e:1e:c1:b5:1f:af:88:
45:3b:b7:f2:fa:a7:02:04:9d:2c:7a:cd:f2:e3:b6:
2e:c5:4b:1d:dc:86:27:e3:f5:45:0f:01:19:bf:f5:
fc:83:4c:80:7a:10:50:5d:d5:f3:c5:4e:90:1c:29:
ed:3a:cb:02:d4:3b:c6:1a:80:99:18:9a:b9:41:6b:
33:b1:e9:b0:ca:d7:ae:22:23:79:87:88:44:0a:15:
19:2b:96:f7:d8:1e:4e:2b:18:eb:5d:57:46:d1:0a:
e8:81:a6:6a:e6:5f:e1:77:09:60:fa:5c:7d:e5:4c:
f4:9f:30:d3:ea:12:a2:19:e2:28:69:5d:38:5b:cf:
9f:3d:0a:40:26:9e:13:8e:06:f1:20:f9:8f:36:83:
b3:21:ec:8a:ce:19:77:ee:99:89:c0:8a:4f:46:c3:
70:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1A:D6:C4:C0:9B:CC:B5:8B:84:2A:EC:32:CB:B3:5A:C8:88:20:32
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d3:0a:7c:c5:d6:f2:da:eb:84:20:55:f3:e0:a7:ec:d9:c9:
e1:2c:2a:74:86:7c:b2:52:47:8d:09:fe:6a:2e:db:dd:96:96:
43:65:55:3b:11:3f:78:36:75:e4:6e:89:34:d1:eb:7e:41:b9:
d9:cc:0e:7c:de:ee:c5:f4:a5:cc:a3:20:a6:b6:5c:f4:c1:b7:
ce:34:2e:c0:87:73:1e:fd:a0:e2:1d:96:9e:e0:4f:8f:96:91:
b7:dc:92:fd:35:05:ec:0d:b3:1e:e3:8e:3e:2f:e9:ce:db:ad:
fb:b3:85:27:6d:90:aa:cd:05:81:ba:85:51:12:89:3b:aa:35:
8b:90:f2:b6:ac:13:75:c3:c8:18:f5:32:78:0e:14:47:9e:e4:
17:39:8d:6e:8b:c0:cc:c7:8d:77:63:2b:b5:d8:a5:ed:15:d5:
c1:b1:43:1b:22:8e:ef:4d:aa:f4:1e:f0:c7:ee:d4:7e:07:e9:
49:b9:88:d3:5d:71:72:d0:cb:83:e2:c4:db:c6:6d:20:c9:11:
f7:39:aa:04:01:c2:45:2e:36:28:39:6f:ab:e3:da:fa:78:3e:
f8:a5:4b:b3:fd:d6:14:13:37:04:1f:ed:19:63:b2:67:78:13:
ba:0e:5a:ff:8c:8b:d4:96:b6:7e:b1:39:83:4c:cb:e0:80:6f:
07:84:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:26:41 2026 by rpki-client