Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: im/KdgvMEMv3V+UFd/V3BAl5bTZ9/CCYWo+grlIkCQQ=
Subject key identifier: 2A:35:1D:4F:5D:5F:10:F8:72:93:67:07:CC:61:05:8A:5B:6B:26:AB
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 019D205D1434BEB5F80C2BAC71E5F1A444C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1882
Signing time: Tue 24 Mar 2026 15:01:04 +0000
Manifest this update: Tue 24 Mar 2026 15:01:04 +0000
Manifest next update: Wed 25 Mar 2026 15:01:04 +0000
Files and hashes: 1: iwdbfX3VeEC-dJ7spuyrMGzAZEA.roa (hash: rGk72/1YdyFUc4NyU+VKerIA+XWmcskQTcATzTBlTBs=)
2: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: QwzWWuw2Cmz9JeaWHRG3jfVTyUDmxYdv11bXxCbvznI=)
3: sLLmkteo_FcFXMtUJhw6fFKVofY.roa (hash: a9XJ/mxkvDOm7bLMm8792DO+WjUzGL25z/Umu2rG3g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:5d:14:34:be:b5:f8:0c:2b:ac:71:e5:f1:a4:44:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Mar 24 15:01:04 2026 GMT
Not After : Mar 25 15:01:04 2026 GMT
Subject: CN=2a351d4f5d5f10f872936707cc61058a5b6b26ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:73:0f:60:9b:1f:00:c1:79:40:f9:1a:b7:
6c:ee:50:da:80:dd:8d:b8:6d:9f:52:3d:62:5f:61:
44:ce:aa:99:19:02:45:b8:d7:62:8e:59:25:b0:12:
d3:35:bf:85:c7:88:62:c4:a2:a9:7c:9c:5e:97:e4:
24:0b:45:41:6e:ce:4b:a8:db:aa:b0:f3:cd:0d:f5:
a9:64:7a:5c:bb:44:93:aa:98:6c:e9:9d:2f:23:73:
6b:92:4f:f3:c9:c1:1a:9f:d8:e8:df:b8:37:83:86:
09:6f:1f:2b:52:22:b8:5e:6d:63:cc:52:66:a8:d3:
ca:53:50:35:09:fb:ef:c7:af:9c:92:02:81:e2:90:
f6:15:ca:30:57:05:b4:62:51:f1:ab:2f:86:34:ec:
33:b0:e8:da:b2:e8:5f:c6:12:f0:e0:42:18:1c:f5:
a8:33:c5:9c:95:e4:37:4a:a8:fd:57:de:81:6f:56:
f4:c4:34:f7:e8:61:71:a8:b1:88:84:38:fe:67:5b:
f9:da:77:bd:de:95:a9:41:31:f3:62:4e:d2:fb:06:
17:b5:7c:89:fd:26:f2:e7:ac:d6:0d:cf:d8:96:da:
f1:f9:01:0e:23:c3:84:6f:f6:c3:05:ff:9b:4f:92:
b0:9f:02:3f:e8:6d:36:57:4c:6a:4b:60:1c:5d:a5:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:35:1D:4F:5D:5F:10:F8:72:93:67:07:CC:61:05:8A:5B:6B:26:AB
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:06:fd:f6:e5:2d:c0:21:07:3c:34:16:d8:67:91:1f:49:5a:
c8:6c:ed:13:68:41:05:d7:5e:50:fd:0b:4e:d6:61:7c:cd:0d:
7f:92:ba:e9:ad:f4:fc:2c:28:e9:18:62:46:83:3d:f8:cd:b7:
0e:62:65:aa:0d:4f:80:61:45:95:04:9f:c8:6e:97:e1:ab:d0:
73:8d:89:54:59:ed:94:7e:dc:64:1c:03:6b:bf:4b:de:db:ba:
d3:a3:7c:1e:b8:e3:79:33:ea:56:54:d2:59:fa:fb:5b:bc:58:
71:24:17:e4:c6:ca:c6:55:0a:18:8b:3c:36:73:00:9f:cd:24:
0e:37:71:83:ac:cf:10:f6:2e:32:7a:02:89:89:bc:4d:b4:fa:
5c:96:a4:74:7d:16:57:ed:2c:45:7f:41:ff:06:45:fa:f3:2d:
22:c3:e9:34:45:08:0a:cd:a9:82:75:ac:f8:79:3c:38:06:b9:
e8:13:ee:c0:20:37:b2:15:7f:d4:93:db:12:72:f9:3f:d3:b3:
f2:c5:6b:7c:33:25:fb:28:40:53:fe:22:bc:5f:0a:cd:7f:a4:
83:f8:39:02:d8:17:60:47:c4:af:f0:81:0d:79:74:f9:75:bb:
62:24:c3:13:cb:4b:e3:c6:15:06:ef:db:e9:19:40:b8:82:24:
82:96:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:34:45 2026 by rpki-client