Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: Lm8lGOYDK7MbDzsXSSDSkTbVJ4/3qUWRSfT4cIG7pwY=
Subject key identifier: 96:9B:70:61:06:08:00:34:12:6E:C3:D1:8C:04:F3:EE:95:6D:12:52
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019DD98BC816F0A44B552B72FAA453D1167C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 0785
Signing time: Wed 29 Apr 2026 14:01:49 +0000
Manifest this update: Wed 29 Apr 2026 14:01:49 +0000
Manifest next update: Thu 30 Apr 2026 14:01:49 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: Vb0Mb3VEM3veCPCrKvrEOo3esUE.roa (hash: wsQvVbcVPuKEsiVmA3jQc45iZrjeqJsQtYSOLDFq6yA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: mRYuaEvxoI8/Bhc/x8trXtH2eIVwmgTCuHaLEDAeoPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 13:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:8b:c8:16:f0:a4:4b:55:2b:72:fa:a4:53:d1:16:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Apr 29 14:01:49 2026 GMT
Not After : Apr 30 14:01:49 2026 GMT
Subject: CN=969b706106080034126ec3d18c04f3ee956d1252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:54:32:d1:ed:a3:9e:5a:7c:49:62:85:58:
1a:a6:e7:bd:89:65:03:f7:5d:67:e3:df:15:67:18:
52:85:fd:54:06:30:01:17:40:28:87:33:36:d5:a4:
c7:5d:43:1a:43:15:ff:00:55:a1:df:4e:66:b0:b9:
c5:11:75:4a:7e:7f:1d:87:c6:76:42:4e:d0:75:a7:
66:d5:43:83:38:1c:c9:88:db:7f:f2:66:93:14:ce:
1c:d3:20:6b:36:85:1e:41:65:f4:a3:2f:c8:29:ae:
6f:ac:25:89:3f:30:78:89:86:13:5b:26:0a:ab:8f:
2a:da:ae:a4:0a:04:f5:56:9a:54:0e:95:77:f6:42:
9e:51:ab:e6:e9:40:27:4d:30:80:c7:41:cf:ed:bc:
05:ff:58:42:19:a0:f2:b2:b8:87:99:1f:88:fd:f5:
2c:2e:83:8f:0d:fc:b3:77:32:5a:b6:c4:45:49:08:
06:7a:44:f4:c0:c5:f3:94:a3:e2:db:1d:f2:34:e2:
17:ca:17:ac:50:2c:2d:96:07:fb:19:cd:4e:ad:e5:
89:bc:3f:99:ea:66:3b:53:81:9d:22:1b:de:d5:77:
85:e7:0b:94:42:42:90:ee:d2:f7:d1:30:c7:ac:2c:
78:8a:0c:e6:5f:65:ee:ae:88:b2:aa:44:fc:ee:97:
69:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9B:70:61:06:08:00:34:12:6E:C3:D1:8C:04:F3:EE:95:6D:12:52
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c3:c9:89:cb:7c:59:0a:6d:c5:fd:c3:85:af:9a:b3:1d:5f:
4a:04:76:cf:44:cf:c3:44:98:0f:6f:0b:66:7b:9c:db:36:2c:
cc:fc:8c:6a:a3:86:74:d0:9c:5b:34:22:36:b5:34:22:4d:26:
b8:e1:79:83:af:ba:bc:b3:bb:e4:94:24:36:ef:55:d7:83:85:
9a:e4:9f:bc:9e:a9:30:37:52:b2:cc:f9:bc:b6:42:23:c2:bc:
8c:ad:1c:5d:7e:2f:bf:8d:1d:3b:0f:7d:7b:d6:35:3f:25:8b:
81:e2:96:22:80:03:9f:5e:53:b3:ba:f4:22:d0:c0:7e:77:80:
4f:16:0c:4e:ed:36:35:3a:c6:5d:de:4f:42:20:cf:60:8b:67:
fe:23:17:9a:12:af:65:f3:72:d9:d1:44:b1:41:fd:73:0f:fb:
9e:43:62:8e:34:9c:3a:fd:91:d8:cd:36:ec:f0:30:1d:95:3a:
2f:18:4b:a1:00:c1:dd:b8:d3:46:b7:aa:98:05:fd:23:6e:be:
68:16:f5:f9:87:a0:1b:61:a1:d2:30:fd:da:58:93:56:2b:51:
c6:49:9e:ad:fd:56:1b:bd:41:ac:60:e0:02:6c:7c:48:04:ac:
81:08:40:ec:14:d5:69:77:77:a4:06:ac:c3:7b:9e:d8:c6:57:
73:80:25:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 18:11:22 2026 by rpki-client