Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json)
Hash identifier: vfdG0rY2jozfNV01nNvSp/a1OtIW5LwbyaO79Yn9aIM=
Subject key identifier: 72:89:3C:67:6B:82:75:34:40:80:61:72:92:53:9F:1D:C7:4B:60:52
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial: 019D39AF2E19AE27FEF6332B409B4FB05A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
Manifest number: 01D6
Signing time: Sun 29 Mar 2026 13:01:14 +0000
Manifest this update: Sun 29 Mar 2026 13:01:14 +0000
Manifest next update: Mon 30 Mar 2026 13:01:14 +0000
Files and hashes: 1: 55KKjKcQLAiKHyLfRXd8THHBm7E.roa (hash: Zdgu4/3X2vJw//wqqWZ/GedlI5kEMUP7EA+P2fQ6mqg=)
2: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: 8sXzE0jLS1Dn0mnkdPlezw3CslHgzF2LOCI136Dspus=)
3: yxfGyEYWVoZFDcTt4Jv2iRkRwlI.roa (hash: JFc83iGMLXO8EMSMsHPQAAn1PO8Q9NwkH4mV2gRieGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:2e:19:ae:27:fe:f6:33:2b:40:9b:4f:b0:5a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Validity
Not Before: Mar 29 13:01:14 2026 GMT
Not After : Mar 30 13:01:14 2026 GMT
Subject: CN=72893c676b8275344080617292539f1dc74b6052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:24:a2:77:13:33:a7:e5:2d:b0:5a:e4:cb:
bf:d8:6c:c1:b6:85:ea:a3:de:97:ce:f7:3d:94:4d:
2f:ea:24:1e:6b:b6:c9:c2:cc:89:47:78:92:5d:08:
b4:54:d9:68:5a:23:2d:58:45:76:05:d0:95:42:c0:
c1:dc:ec:1a:14:6d:fb:93:4b:8c:d6:92:dc:6d:c2:
01:fd:e9:0e:73:3c:5b:64:14:2a:e2:b4:df:8e:4b:
ad:81:9a:55:0b:36:31:7d:fe:ee:9d:de:bb:cc:cd:
15:51:95:30:ed:b5:85:a0:b7:ff:e8:1b:da:e4:6f:
3f:92:24:f8:e0:57:81:4a:4c:ee:42:0b:c4:c5:00:
61:ae:e7:53:21:e4:06:8e:98:3a:66:fe:71:5c:29:
68:01:1b:07:4b:c9:d3:df:68:0e:78:7a:d8:0d:9b:
2b:ba:c8:48:21:ac:61:d3:32:dc:24:b3:07:50:3c:
b1:d9:e2:20:09:0b:76:32:29:cf:72:30:27:58:0a:
83:c7:24:fd:cc:38:bb:8c:05:51:81:3a:ed:85:0e:
13:e3:93:ba:0c:a7:4a:8c:0e:bd:6b:d5:da:27:a9:
4b:64:c8:ad:76:d2:57:35:f5:61:e5:a4:95:d4:d5:
7e:15:f8:be:b6:76:4a:6d:de:9e:1e:18:60:60:71:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:89:3C:67:6B:82:75:34:40:80:61:72:92:53:9F:1D:C7:4B:60:52
X509v3 Authority Key Identifier:
keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b6:4e:4f:f6:b2:84:80:1f:05:e7:88:d1:2f:c4:c5:b5:42:
79:7a:4a:44:1c:bb:ae:ea:f6:25:3f:ba:51:e8:ae:0f:32:77:
c8:21:e0:54:36:99:6e:a1:57:ce:7c:f0:fe:f2:a2:5a:74:26:
75:99:31:51:1a:61:11:cf:d1:18:f3:ee:9b:cb:28:e1:0d:41:
bc:8b:3c:3e:9f:da:d7:a4:08:cc:84:2b:e7:21:41:56:62:51:
92:95:22:32:0e:cf:fe:1e:77:7e:b2:94:59:34:66:f0:9a:62:
a9:d7:df:d2:66:d7:49:5f:8a:f5:ce:01:27:2a:3e:4e:cc:c1:
8b:4a:98:56:8e:eb:ab:2a:b7:45:32:ac:9a:07:08:3b:bd:cc:
85:64:91:85:d9:4a:25:88:7d:4b:46:bd:9d:5a:14:25:0d:2b:
dc:5d:a8:bc:4c:d7:85:61:45:10:5e:4f:8f:4b:ff:3e:2a:de:
6f:31:75:95:25:e0:53:c8:12:a1:e7:02:39:19:6e:1a:2c:13:
2e:64:8b:17:75:c6:cd:66:37:2c:b1:0a:fe:f4:d4:e0:af:49:
be:a1:a6:c0:6e:40:f2:8e:a0:89:5c:ea:87:5c:c3:5c:1c:a8:
3e:81:19:fd:2c:4a:36:31:2f:6c:0a:51:bd:e3:d9:4b:3a:73:
d0:69:eb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:42 2026 by rpki-client