Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: ENZJF1Hml08cH8IFNb2UW6lzLQFh0UOMMC4VumdCzi4=
Subject key identifier: 4E:AF:67:3D:73:78:B2:40:62:1F:43:D3:35:0F:8E:63:49:56:50:D3
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 019CE3D9B8AA62F642D09F39E497115DD9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 173A
Signing time: Thu 12 Mar 2026 21:00:22 +0000
Manifest this update: Thu 12 Mar 2026 21:00:22 +0000
Manifest next update: Fri 13 Mar 2026 21:00:22 +0000
Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=)
2: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=)
3: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=)
4: dxXzSfG6tk-xq80nFlAI2V6Jabk.roa (hash: 7x8bVi5e937j8BHSzgO3xnPhQaxhg84Gj8bsT5Yzlz8=)
5: e9OVXRSbzNQf13RbQTlh13igYgM.roa (hash: r2tePYmkh+jGXI1UJWjqWc2c/q/1ZOM+w32r5mXWyNE=)
6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: KqdCUP+RbhPOfwgSzQakb1w2DJOr/U4r/lcqCXFyZEg=)
7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=)
8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=)
9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:d9:b8:aa:62:f6:42:d0:9f:39:e4:97:11:5d:d9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Mar 12 21:00:22 2026 GMT
Not After : Mar 13 21:00:22 2026 GMT
Subject: CN=4eaf673d7378b240621f43d3350f8e63495650d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:67:90:4e:38:0b:ab:96:d5:65:ce:9f:e0:
b8:43:66:39:89:00:a4:56:d0:c1:34:f8:3d:6c:71:
ec:40:e0:7c:fe:c3:44:f1:00:98:7c:50:52:88:c1:
ce:50:82:13:2f:44:d3:3a:60:00:d3:55:07:36:2c:
84:e4:d1:8e:05:41:6b:00:2d:29:e9:b7:51:33:f4:
be:2e:d8:ac:1f:74:32:52:53:49:36:f5:f0:d4:22:
d5:cf:90:8c:5d:74:af:e1:e9:ae:62:7b:e7:6f:13:
5e:f8:3f:cc:1e:cd:bd:69:bb:f7:ba:e7:6a:45:68:
e7:c7:53:64:e6:33:46:07:23:50:05:a6:e2:da:db:
78:1f:35:50:f8:e4:61:ef:22:03:53:c9:53:06:f3:
33:01:86:65:1a:b7:cc:24:e1:db:80:ea:d7:ef:8a:
58:9d:5b:63:12:90:3a:ea:9a:12:b1:ee:97:11:a6:
68:2f:4b:55:03:d8:df:b3:f5:21:17:9e:6e:2b:12:
39:96:b5:12:a5:2e:87:ff:8b:a2:6e:61:22:45:ba:
2e:ff:72:9e:b0:bc:cb:f1:24:ec:37:26:89:74:cf:
b8:a4:d7:80:b9:41:43:37:6e:3e:a4:34:70:eb:62:
35:ad:19:25:43:b2:38:15:22:3c:80:26:04:33:1b:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AF:67:3D:73:78:B2:40:62:1F:43:D3:35:0F:8E:63:49:56:50:D3
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:43:ef:af:f3:dd:1c:85:8c:39:57:6a:6d:ad:ab:05:84:e0:
ec:d9:dd:82:47:c5:96:7b:63:42:e5:0a:c8:84:e0:54:57:06:
d6:b4:b6:34:ce:49:27:b8:70:4a:18:98:18:16:0f:3a:f4:2b:
ed:96:81:41:38:cf:a4:4e:f8:fa:b3:5f:fc:14:21:83:2a:3c:
07:02:9f:10:25:cb:0e:7f:ad:99:15:d8:56:e5:61:76:63:f0:
0a:9c:8c:9e:0f:2b:cb:54:a0:81:49:7f:83:3d:97:03:de:61:
be:43:93:c1:6e:2f:53:24:19:3d:ec:73:90:72:dd:b4:f6:15:
4b:4c:14:df:bc:af:a3:0a:e8:69:81:30:1d:be:ff:11:83:55:
a7:3d:4a:0a:ba:4a:93:67:03:d8:9c:55:79:f6:49:e8:d7:1d:
e0:98:55:3c:07:b5:b4:ad:32:db:a5:c1:61:98:11:5d:2b:1b:
6a:40:d5:f4:6d:23:a8:09:ec:89:cf:bd:7c:8d:1e:69:3d:22:
a3:9c:f4:3a:de:72:16:04:bf:f5:c0:4f:66:51:05:af:eb:a2:
df:05:2a:d9:4f:3d:78:c9:20:12:f0:33:ae:24:fc:db:ef:49:
6c:51:9f:1c:31:37:79:ca:f3:bb:a7:3b:6d:b2:4f:a2:9b:87:
99:eb:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:54:04 2026 by rpki-client