Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: cui8r7wRE0GOwC5QVST/+XRytdzzXNgZp1KNRVf+9UE=
Subject key identifier: 02:16:CA:53:C8:45:C1:FA:9B:CD:E7:DA:57:B1:07:BB:E5:89:6A:67
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019CE4B629A818DD315FCB6C2673A14DCCD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 187F
Signing time: Fri 13 Mar 2026 01:01:09 +0000
Manifest this update: Fri 13 Mar 2026 01:01:09 +0000
Manifest next update: Sat 14 Mar 2026 01:01:09 +0000
Files and hashes: 1: MLjbVMiRwhEAuiBClDq7yIq_Cco.roa (hash: qjQLREPR53G7Hkk3HqQsejh4IBaZHidcZlNtBnhEo4U=)
2: UIKGm79Lht7FyBF2TD_d2G3aiRY.roa (hash: 7SB2+Ki5n311mjSVoVxfEgYxVlmvoTNXsRptZtFuT3g=)
3: fJDlavYr0-NMC00ttEvY72-2RT4.roa (hash: yNHRWjXk0fcz5wbO2o3VOi+H81xn7Ikg9L039EJvkuA=)
4: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: 2Z2LR46kocSxcTcFFkPhlknjzJlhpQgwDrC32ITA2t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b6:29:a8:18:dd:31:5f:cb:6c:26:73:a1:4d:cc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Mar 13 01:01:09 2026 GMT
Not After : Mar 14 01:01:09 2026 GMT
Subject: CN=0216ca53c845c1fa9bcde7da57b107bbe5896a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:10:0d:b1:3b:93:e2:47:15:15:54:95:b0:
17:82:8f:1f:11:90:b2:ce:4f:97:7c:8f:3f:41:c3:
af:4c:03:79:63:f9:56:4f:12:15:6f:42:52:d6:d1:
17:ec:89:81:4b:de:6f:f4:1b:28:cf:4c:49:73:ce:
f4:f1:08:3e:19:dd:00:ff:0e:1d:57:44:39:bf:90:
dc:e8:8d:7f:f6:ce:b9:e6:c4:d1:e6:17:da:b0:5e:
59:1c:10:59:86:4f:66:a6:8f:ed:fa:4e:e1:62:f9:
fb:98:fb:65:87:a5:00:56:b7:c6:06:ef:b3:65:e6:
ec:d6:f6:77:30:2c:88:48:04:b3:65:03:79:95:f5:
07:66:ec:e5:36:69:48:45:86:89:a4:f2:c9:ab:cf:
b8:42:ce:b7:e3:eb:b5:7b:b5:0a:b4:82:71:bc:59:
2a:69:d1:d9:b8:1b:b8:dc:ce:5a:6d:78:b2:df:75:
9e:cf:b8:99:9e:ab:fd:0a:e6:f7:05:cd:bc:a9:29:
ce:47:ff:dc:e5:29:3b:6c:12:bb:ce:02:2f:88:4d:
af:d4:85:be:5f:2b:c7:c7:9c:54:2d:0a:cd:18:a3:
ba:8d:a2:63:04:5f:41:84:8e:7a:bc:93:02:f1:00:
04:de:34:46:aa:12:35:e2:bf:08:6a:08:15:08:ce:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:16:CA:53:C8:45:C1:FA:9B:CD:E7:DA:57:B1:07:BB:E5:89:6A:67
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7d:fb:d6:33:9a:79:c8:49:c6:0d:53:a7:fe:8d:bc:a9:85:
27:18:e8:86:45:4c:3e:5a:cd:f2:af:fa:b0:65:75:9c:5f:f8:
42:1b:63:de:58:5a:9f:07:a3:22:d2:1c:99:32:a7:e1:57:e4:
a7:15:b0:ad:14:0c:92:1d:c6:9d:2e:de:93:6d:24:12:e4:a4:
5a:ae:5d:db:df:a2:8b:81:d1:83:57:ab:e0:3a:c9:3e:02:8f:
70:00:f0:20:e9:52:2b:f4:be:9a:82:97:09:1e:fe:e3:72:dc:
91:b4:ea:41:8c:b2:51:9b:c4:d6:90:c3:46:50:2b:08:d8:d3:
d9:99:9e:2c:0f:da:2d:14:94:26:dc:4d:dc:be:32:30:7f:07:
10:f7:7b:f0:0d:f3:59:83:0c:00:b5:95:fc:4b:76:a3:fa:21:
ac:08:9a:1f:a5:0b:c4:1d:14:32:46:20:d7:4e:a4:b9:80:19:
93:a9:c6:9e:02:63:38:29:2d:3e:e6:31:31:4a:b7:0b:db:69:
a6:8a:f0:09:7a:13:d4:65:5a:b8:6e:48:77:8c:f8:2d:99:3c:
15:89:b4:2f:81:80:57:46:f9:8f:81:0d:40:a7:3c:9e:34:14:
95:99:29:04:c9:0a:4d:62:d2:bf:0d:55:56:f3:55:2a:79:7f:
35:6f:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:43:07 2026 by rpki-client