Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
File: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft (raw, json)
Hash identifier: 2SNGczHbS4OY721atTaayLIXlZ2oof4l3NN74jhKu/w=
Subject key identifier: CB:4F:66:D0:EF:A6:73:DB:3D:4E:50:10:57:DC:1A:50:F0:2D:33:AC
Authority key identifier: A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
Certificate issuer: /CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Certificate serial: 019CBFE254CC60F8792456A38848E86B7B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
Manifest number: 02
Signing time: Thu 05 Mar 2026 21:23:26 +0000
Manifest this update: Thu 05 Mar 2026 21:23:26 +0000
Manifest next update: Fri 06 Mar 2026 21:23:26 +0000
Files and hashes: 1: WyQBbpbR1AvAKhTsL71x6qgch7U.asa (hash: 043dlMMNEhoWphFwOdB6ptcTMcRQS915TTU2W0PNpeI=)
2: oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl (hash: 78Auf4W0JuvT04WtJ8cn/JennWJg92rveppUgapVfkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 21:23:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:e2:54:cc:60:f8:79:24:56:a3:88:48:e8:6b:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e4087fe1eddd6fd426b19dc2a371a876282977
Validity
Not Before: Mar 5 21:23:26 2026 GMT
Not After : Mar 6 21:23:26 2026 GMT
Subject: CN=cb4f66d0efa673db3d4e501057dc1a50f02d33ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:b4:73:4f:f9:22:72:2d:4e:87:7d:42:8e:
f7:b6:4c:e4:ff:8d:45:43:dd:f9:4e:b5:0d:b4:55:
1e:17:68:cb:67:cf:6a:f8:75:83:a7:11:be:65:75:
52:20:7b:04:7a:fb:a1:d0:c8:04:a9:67:c6:44:1c:
cb:87:47:22:28:6d:cf:67:03:f3:bb:f0:b3:b0:a7:
52:c4:eb:6e:61:61:99:5c:a5:2f:29:c2:ce:9b:f3:
e7:06:83:4b:7f:37:fc:11:7a:ca:2d:f6:ee:d8:0c:
62:65:ad:c9:10:11:a0:74:0a:80:73:be:3d:08:9f:
3b:53:18:3b:0e:ad:1b:cd:77:50:39:98:95:81:e7:
e9:ce:a3:33:8e:fd:85:bc:e0:21:54:d8:9b:1d:23:
9c:58:96:89:76:86:b9:42:1f:0b:aa:93:2a:8d:d8:
c2:25:15:2c:d0:8d:da:82:ed:8a:ac:bf:02:aa:73:
ee:a3:ed:55:a6:16:3d:7e:8a:57:e4:ab:57:ed:6d:
a4:c7:e6:e5:40:f9:d1:70:7a:f3:82:d1:da:c7:5a:
5c:4f:f8:81:67:cc:6e:15:00:97:1e:7c:c8:8c:24:
28:d3:a2:92:46:11:df:b5:0f:0c:61:76:f3:12:49:
9e:18:b3:f1:5d:32:22:f5:eb:37:fc:15:4c:9b:a2:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4F:66:D0:EF:A6:73:DB:3D:4E:50:10:57:DC:1A:50:F0:2D:33:AC
X509v3 Authority Key Identifier:
keyid:A0:E4:08:7F:E1:ED:DD:6F:D4:26:B1:9D:C2:A3:71:A8:76:28:29:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8bb51a-154b-4d70-a280-77782f48bf0c/1/oOQIf-Ht3W_UJrGdwqNxqHYoKXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fe:b1:41:ad:0c:ae:3a:4f:a3:f9:a3:0e:50:f8:f0:b9:9b:
51:a0:73:94:43:1d:91:35:f7:e8:11:58:82:59:fd:ea:d2:42:
ad:1f:b0:7f:3f:34:a6:d4:10:d0:f0:ed:b2:cd:20:31:bd:03:
f2:d4:5f:07:06:c1:fa:1f:90:36:5b:87:b5:19:ba:49:17:81:
b8:77:4a:a2:e5:e0:68:98:78:18:4d:53:04:6f:39:ba:7f:d5:
3a:21:7e:f8:56:95:53:14:26:80:f1:78:45:d1:8e:52:48:a1:
b4:96:e2:28:f1:f4:52:be:b4:f3:a5:4d:20:9d:32:ad:cb:f2:
33:2b:19:f0:d5:b2:4c:9d:78:1d:c1:35:66:bd:23:4b:a7:7a:
09:75:fd:51:13:26:bf:2e:1a:fe:f3:f4:5c:8a:45:74:8f:74:
40:b9:5d:93:cb:d5:98:21:15:55:d1:c8:cc:c1:34:f7:18:5c:
85:5d:f6:60:a4:af:fe:ea:f9:94:78:93:c3:8d:43:61:b4:9e:
b0:9a:f8:2c:c5:16:33:39:bc:0d:4d:35:bb:bc:bb:19:7a:44:
20:85:78:65:69:e8:35:f8:ce:95:68:22:14:02:bd:97:2e:77:
2e:de:96:69:f3:ed:78:ac:ab:e8:d0:c0:71:41:c5:03:09:21:
50:6e:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:41:56 2026 by rpki-client