Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier: XOHLrmqcrD/YsATIK5XJ/4ZoIs4C89C+Y4ZH2GoEkl4=
Subject key identifier: E0:0A:B2:57:25:56:06:40:FB:C1:01:29:9C:24:15:F0:28:D8:99:E7
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 019CE4EC49F65A013D61652206E5F1E8BE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number: 1869
Signing time: Fri 13 Mar 2026 02:00:16 +0000
Manifest this update: Fri 13 Mar 2026 02:00:16 +0000
Manifest next update: Sat 14 Mar 2026 02:00:16 +0000
Files and hashes: 1: TY6_RErHZwMLwaGjVhsCzV2QsIA.roa (hash: Pen7p5QY0R4eFgeU4z2Sze4YFXIqdZffU0dnu0AuPAk=)
2: b_1Qwkm_dwtq6WHZLgklv_RTWY8.roa (hash: +hT3xYsa619lAWaMx5WmCqSJiQ9WY/MqRSeQbajC3rQ=)
3: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: BTMXIkZB+WD3gwumFwSrV8TpUO1PdoMDf0KOc5UJzAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:49:f6:5a:01:3d:61:65:22:06:e5:f1:e8:be:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Mar 13 02:00:16 2026 GMT
Not After : Mar 14 02:00:16 2026 GMT
Subject: CN=e00ab25725560640fbc101299c2415f028d899e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:1e:06:92:95:49:05:7b:94:27:de:0d:eb:
44:f6:31:2c:3d:a4:b8:27:3f:0f:8f:06:cd:dd:17:
fe:23:97:6a:2a:f6:df:f1:4c:d1:3f:fd:2a:a9:8d:
d5:1f:76:2e:9f:87:86:fd:dc:74:a5:4d:c7:52:00:
aa:49:3e:66:87:49:1a:8a:7c:db:8a:e1:54:92:e1:
fc:9f:11:40:71:53:ca:13:03:33:da:04:50:da:19:
21:65:dc:c5:7d:46:ca:df:cc:a6:a2:39:20:6b:64:
57:6d:20:bf:d8:72:5b:d8:d8:d1:81:4b:aa:18:a9:
ba:09:b6:ca:16:66:95:7c:66:2b:ad:cd:b3:78:ed:
81:fd:b9:22:7d:5b:a8:09:d2:ef:b2:f6:f1:68:a1:
17:a1:a1:5c:0c:6b:8b:b7:74:78:82:7f:b7:f2:a8:
17:5f:99:9c:9c:2e:ad:bc:30:68:25:7d:68:77:71:
41:e5:66:4d:a2:ad:01:ef:b9:04:51:4a:44:8b:5d:
45:24:38:a6:11:19:a7:c8:7d:3c:64:ae:30:14:32:
11:72:5f:bf:9a:27:de:81:70:2c:c0:b5:5f:2d:67:
16:d6:3d:2d:79:89:1b:b7:19:1e:12:c0:bc:29:f4:
99:4a:7f:0c:f3:59:6d:4d:f0:f4:b3:24:4e:d9:01:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0A:B2:57:25:56:06:40:FB:C1:01:29:9C:24:15:F0:28:D8:99:E7
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:47:79:cb:eb:1b:12:fc:58:ce:cf:16:8b:18:a6:bb:97:c0:
23:fe:d6:28:08:e7:14:68:a3:d4:9a:ca:05:43:d7:71:77:db:
51:f7:06:aa:cb:78:5e:db:e0:f2:9d:e3:85:13:bd:86:c5:d6:
37:b9:7b:de:a6:38:61:c0:b6:96:7e:ea:12:49:0b:aa:03:79:
c8:39:11:8d:94:ea:20:08:ee:d3:e3:9e:ae:b7:59:a2:96:e3:
16:6d:08:f9:35:0e:fc:a6:28:51:62:6b:48:0e:89:2a:54:80:
51:28:14:eb:c0:e9:d8:52:50:af:72:63:f5:25:94:e5:5d:f4:
a0:2f:b8:0b:47:5a:17:e8:51:af:62:95:cb:80:56:25:a6:0b:
a4:c0:da:6f:bf:f8:fb:80:ad:74:49:dd:8d:22:95:4f:6f:d2:
0c:51:bc:bf:cf:98:b5:97:95:0d:45:0b:d1:32:af:57:53:86:
a4:a0:ad:f6:97:7c:6a:cc:db:b5:70:5e:07:6e:a5:06:60:fa:
72:e8:0c:b7:0d:0b:a9:fc:93:81:d4:b9:5d:cb:84:c5:fe:dc:
15:a6:d0:a6:06:18:c1:4c:bb:cb:64:58:e6:d3:81:20:31:fc:
11:a3:d6:94:8d:16:c7:eb:2c:13:a6:99:91:cf:03:81:79:33:
d9:a3:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:09:59 2026 by rpki-client