Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: 2mWyQG+ryJcGAotAjjiPhNR5rQt7y7QG9ITsnnfNgfw=
Subject key identifier: 01:11:47:21:78:AE:55:52:26:F8:74:1C:85:86:4F:F8:4D:1D:32:5D
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 019D37C074A438D11842912210CBB95A64CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 1792
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: 0SyND4Sf6FWPac9ewDSQ_5ruK7s.roa (hash: uXqH69dDSIWJzyxx0fDzquq4oK/+5ZopLJS3+FhxlOE=)
2: ePSKdM4YEw7nrcVv4bZ9z02JRvQ.roa (hash: bnWD5jhtetwyDhxUQbSnGO43JXVbXQTaCmHV3dR+gF0=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: 6mPhrsJdDV6Wlv7hS2K9jx2zBh3puWFDGNPXkGi6MWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:74:a4:38:d1:18:42:91:22:10:cb:b9:5a:64:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=0111472178ae555226f8741c85864ff84d1d325d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:e5:50:e8:4c:81:22:9e:0f:f3:c9:fd:56:
45:d9:da:0d:84:1f:bc:9c:cf:9b:c7:48:d7:3d:90:
d1:1a:2e:43:05:35:73:b6:9b:ef:b1:09:74:c0:e6:
ad:34:41:3f:f7:90:84:bc:ea:e5:cd:ac:11:5f:c1:
92:e2:7d:e0:df:e5:41:fb:6a:3b:80:4c:b5:56:97:
5e:79:fc:a7:b2:0d:4f:62:10:7e:31:23:5f:be:4c:
aa:fa:49:21:1f:b2:67:a7:5a:b4:67:e9:d8:e0:b9:
32:58:1e:3a:13:7b:0c:5b:80:fd:92:47:60:5e:0d:
45:6f:ec:d5:6b:1a:b4:5c:24:4c:31:08:53:c2:3f:
0d:7d:96:33:d6:79:4b:93:18:00:ee:a9:3e:02:d8:
eb:d9:30:20:a7:4c:70:3e:31:22:58:ff:ef:07:b5:
a3:c7:58:f1:74:f0:4b:52:78:82:4a:15:d0:aa:62:
e5:c5:73:65:09:25:be:e8:9e:25:99:e2:5e:ab:5b:
d4:b7:56:39:03:e0:56:df:75:7d:aa:da:84:c3:2f:
f7:81:8b:45:d5:e4:8f:aa:9c:64:f0:7a:0e:d2:2c:
b7:3e:32:42:b2:b9:54:40:e1:58:2b:1d:1d:ef:a2:
88:6a:06:b8:85:07:94:d9:68:a4:38:2c:95:fb:70:
f3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:11:47:21:78:AE:55:52:26:F8:74:1C:85:86:4F:F8:4D:1D:32:5D
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:94:28:e8:dd:26:f9:87:a9:eb:98:5b:d1:9d:ea:64:54:c8:
3e:a0:2b:e4:a7:04:2f:14:cd:fd:79:45:6a:2c:5f:a2:68:a1:
19:7e:59:55:96:ae:ca:15:1c:66:c9:f7:d5:31:f4:04:07:8f:
bc:b1:1c:50:77:8d:f9:64:92:47:09:10:cb:b2:69:16:bb:aa:
06:72:de:2b:e6:21:6c:57:f6:06:cb:2e:c2:1f:4b:94:eb:83:
70:68:3f:16:f3:41:5b:c6:c5:e9:c6:87:2d:3e:98:a7:49:74:
5d:4d:4f:0e:3f:73:bd:81:5f:ad:93:c7:80:d0:76:f7:bd:9e:
76:aa:51:9b:7a:ad:04:69:9b:06:c3:34:1d:53:d6:23:23:72:
4d:69:71:4d:07:a1:0b:e0:65:0d:28:5d:18:81:40:a4:8c:c0:
84:f8:19:54:90:bf:79:13:44:19:a3:da:d0:26:8b:ec:49:0d:
df:b9:b6:b5:84:ef:72:0b:80:af:09:5b:e7:6d:05:d2:12:57:
1c:9e:05:1f:b8:88:0a:17:59:94:f8:2b:4b:11:52:d5:e6:f0:
dc:4d:27:47:bc:6d:ee:ff:cd:6c:50:c3:c6:f5:61:ff:69:3d:
9a:d3:77:bf:1c:68:8d:b8:1e:ad:52:32:bf:b6:3e:d7:c8:79:
0c:cb:19:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wHSkONEYQpEiEMu5WmTLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMTkwZjZlZmQ3OWVhNzMzM2Y5YmNjZDg1YTA0MzUyZDkx
NWIyMzkwHhcNMjYwMzI5MDQwMDUyWhcNMjYwMzMwMDQwMDUyWjAzMTEwLwYDVQQD
EygwMTExNDcyMTc4YWU1NTUyMjZmODc0MWM4NTg2NGZmODRkMWQzMjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4XlUOhMgSKeD/PJ/VZF2doNhB+8
nM+bx0jXPZDRGi5DBTVztpvvsQl0wOatNEE/95CEvOrlzawRX8GS4n3g3+VB+2o7
gEy1Vpdeefynsg1PYhB+MSNfvkyq+kkhH7Jnp1q0Z+nY4LkyWB46E3sMW4D9kkdg
Xg1Fb+zVaxq0XCRMMQhTwj8NfZYz1nlLkxgA7qk+Atjr2TAgp0xwPjEiWP/vB7Wj
x1jxdPBLUniCShXQqmLlxXNlCSW+6J4lmeJeq1vUt1Y5A+BW33V9qtqEwy/3gYtF
1eSPqpxk8HoO0iy3PjJCsrlUQOFYKx0d76KIaga4hQeU2WikOCyV+3DzgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAERRyF4rlVSJvh0HIWGT/hNHTJdMB8GA1UdIwQY
MBaAFKMZD279eepzM/m8zYWgQ1LZFbI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUt
NWY0Yjg3YWRhNGI1LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUtNWY0Yjg3YWRhNGI1
LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwpQo6N0m
+Yep65hb0Z3qZFTIPqAr5KcELxTN/XlFaixfomihGX5ZVZauyhUcZsn31TH0BAeP
vLEcUHeN+WSSRwkQy7JpFruqBnLeK+YhbFf2Bssuwh9LlOuDcGg/FvNBW8bF6caH
LT6Yp0l0XU1PDj9zvYFfrZPHgNB2972edqpRm3qtBGmbBsM0HVPWIyNyTWlxTQeh
C+BlDShdGIFApIzAhPgZVJC/eRNEGaPa0CaL7EkN37m2tYTvcguArwlb520F0hJX
HJ4FH7iIChdZlPgrSxFS1ebw3E0nR7xt7v/NbFDDxvVh/2k9mtN3vxxojbgerVIy
v7Y+18h5DMsZ9w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:55 2026 by rpki-client