Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: l7DDvjrsQ7p/on3roltUMAfkddR1btdBLarl+j3zkQ0=
Subject key identifier: B3:68:2D:EB:B5:17:DC:9D:51:5F:C6:4A:F5:A3:9F:B1:D8:EF:8E:86
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 019D375284BE251ED968ED6E38D261CC5D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:47 +0000
Manifest this update: Sun 29 Mar 2026 02:00:47 +0000
Manifest next update: Mon 30 Mar 2026 02:00:47 +0000
Files and hashes: 1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: po6d0AkSKmq4/NnZJyjjlAxvR1KlgniS3UZ+BKRS38E=)
4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:84:be:25:1e:d9:68:ed:6e:38:d2:61:cc:5d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Mar 29 02:00:47 2026 GMT
Not After : Mar 30 02:00:47 2026 GMT
Subject: CN=b3682debb517dc9d515fc64af5a39fb1d8ef8e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:d4:6a:c0:fd:f1:84:9a:1e:f2:09:3d:fc:
c6:cf:94:87:0e:27:86:81:74:3a:41:76:73:74:d6:
dc:d5:0e:70:b4:f9:a5:b6:8d:9f:ed:20:b2:49:78:
68:f6:f4:0f:6a:0d:ce:25:7c:b5:f3:75:4b:35:e9:
f6:d8:81:74:80:93:07:da:50:0b:1a:3f:39:15:44:
a6:0e:9c:04:b7:36:77:45:c7:91:b5:44:18:eb:46:
f8:ae:80:19:dd:cd:e4:0f:0e:d5:fc:97:5c:1b:8d:
f4:76:d6:a6:05:ff:34:cf:71:af:a1:d2:4d:31:bb:
30:70:86:a2:7b:34:13:70:e9:83:cd:42:80:a1:5a:
8a:2e:2e:ed:9b:5d:bc:f7:08:db:78:41:6f:e1:04:
07:3d:54:85:14:8f:3f:a9:21:1b:03:90:36:02:04:
5f:c9:a9:c0:ee:20:76:f3:84:6d:fc:ba:c4:f2:4d:
c5:e1:d0:1f:f6:f4:b5:64:c6:96:60:08:54:29:56:
e6:9c:ca:eb:ec:f9:dc:80:ea:be:99:c3:01:0f:b3:
23:eb:ad:6d:70:8a:46:01:77:2b:39:3d:47:92:12:
1d:c4:86:8d:29:af:98:1b:d3:80:61:15:0e:9e:66:
0e:2a:54:a4:74:6f:b1:50:77:1f:b0:2d:85:a8:45:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:68:2D:EB:B5:17:DC:9D:51:5F:C6:4A:F5:A3:9F:B1:D8:EF:8E:86
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:d5:db:f7:93:1e:76:f6:7d:71:68:20:1f:f1:e8:22:42:
a7:0d:7f:1d:0e:38:08:9c:56:fa:e0:bb:de:95:d1:bc:95:33:
f7:25:05:de:68:2d:bb:29:8a:95:dc:7f:50:39:56:9a:0f:4a:
39:8a:53:b2:2d:78:39:5f:b2:ca:c2:60:7c:6a:4b:73:54:6a:
46:cf:65:29:0b:50:ca:2c:01:a8:d9:60:e0:88:23:06:be:0e:
7a:c3:1b:92:de:25:2e:09:04:5a:b1:78:c1:71:5c:a2:29:b2:
69:82:23:af:af:b9:57:a1:20:e8:d4:50:6b:d1:6e:24:cc:f8:
20:ce:e7:89:0e:08:91:c5:b3:38:ef:98:5d:dc:3b:91:9b:7e:
93:d8:de:12:1e:45:33:74:c6:af:2f:82:7e:bd:a0:31:26:08:
9d:e1:77:7e:43:d7:a4:6f:b9:dd:55:8a:29:e7:2c:83:b9:29:
b2:fc:87:9c:2f:35:de:08:3c:0e:ff:cf:9f:a4:82:a9:ca:d4:
f1:7f:55:06:4a:c7:ab:44:98:15:27:38:73:a3:98:ec:a7:b7:
45:d0:94:c4:d6:f3:a7:4a:82:b9:a3:07:d2:0b:be:e5:59:fa:
59:7e:fe:7b:3c:67:f0:32:77:f6:f1:55:d8:5f:a3:37:44:e1:
70:a3:69:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UoS+JR7ZaO1uONJhzF2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx
ODM0MjkwHhcNMjYwMzI5MDIwMDQ3WhcNMjYwMzMwMDIwMDQ3WjAzMTEwLwYDVQQD
EyhiMzY4MmRlYmI1MTdkYzlkNTE1ZmM2NGFmNWEzOWZiMWQ4ZWY4ZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjbUasD98YSaHvIJPfzGz5SHDieG
gXQ6QXZzdNbc1Q5wtPmlto2f7SCySXho9vQPag3OJXy183VLNen22IF0gJMH2lAL
Gj85FUSmDpwEtzZ3RceRtUQY60b4roAZ3c3kDw7V/JdcG430dtamBf80z3GvodJN
MbswcIaiezQTcOmDzUKAoVqKLi7tm1289wjbeEFv4QQHPVSFFI8/qSEbA5A2AgRf
yanA7iB284Rt/LrE8k3F4dAf9vS1ZMaWYAhUKVbmnMrr7PncgOq+mcMBD7Mj661t
cIpGAXcrOT1HkhIdxIaNKa+YG9OAYRUOnmYOKlSkdG+xUHcfsC2FqEWhuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNoLeu1F9ydUV/GSvWjn7HY746GMB8GA1UdIwQY
MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt
N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy
LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBXV2/eT
Hnb2fXFoIB/x6CJCpw1/HQ44CJxW+uC73pXRvJUz9yUF3mgtuymKldx/UDlWmg9K
OYpTsi14OV+yysJgfGpLc1RqRs9lKQtQyiwBqNlg4IgjBr4OesMbkt4lLgkEWrF4
wXFcoimyaYIjr6+5V6Eg6NRQa9FuJMz4IM7niQ4IkcWzOO+YXdw7kZt+k9jeEh5F
M3TGry+Cfr2gMSYIneF3fkPXpG+53VWKKecsg7kpsvyHnC813gg8Dv/Pn6SCqcrU
8X9VBkrHq0SYFSc4c6OY7Ke3RdCUxNbzp0qCuaMH0gu+5Vn6WX7+ezxn8DJ39vFV
2F+jN0ThcKNpDQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:21 2026 by rpki-client