Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: juCgO8BjV0Kz2cqKCsMyHi/EtII7NifgCCaMRNd/V/k=
Subject key identifier: 8C:3B:E0:3B:41:E1:F6:62:DB:77:09:75:86:55:C7:A9:72:82:F4:A5
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019CCABEECF213A657E2BC1704499CA05D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1418
Signing time: Sun 08 Mar 2026 00:00:35 +0000
Manifest this update: Sun 08 Mar 2026 00:00:35 +0000
Manifest next update: Mon 09 Mar 2026 00:00:35 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: 046WeiD4WB6s4b8AOZuic3W9kyaD1XipCpUWkuNgLdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:be:ec:f2:13:a6:57:e2:bc:17:04:49:9c:a0:5d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Mar 8 00:00:35 2026 GMT
Not After : Mar 9 00:00:35 2026 GMT
Subject: CN=8c3be03b41e1f662db7709758655c7a97282f4a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:27:a6:45:15:0d:ca:ee:ac:f4:d9:42:ab:
08:bb:d0:48:78:4b:25:63:52:00:cd:11:04:37:60:
b0:5e:b9:fc:65:b8:59:0d:f7:6f:a8:da:d7:6c:86:
07:a5:1d:df:d1:43:cd:e1:7d:72:21:ed:4b:f8:c0:
70:f0:aa:c3:2a:6b:44:c1:78:42:af:54:e9:99:2d:
98:c2:43:77:e7:c1:2b:61:a8:e1:5e:ec:00:00:07:
c4:bc:6d:09:d1:7e:66:48:f6:7f:0d:77:9d:f8:d6:
8a:ed:3e:ff:ca:6f:31:e3:7f:69:de:a5:78:88:e9:
24:0c:06:6c:fc:0c:e7:8f:a9:f2:b2:94:d4:30:2a:
43:b4:9e:00:60:5a:96:24:e5:ae:e2:fb:67:6f:0e:
8a:2f:a3:4c:22:47:0f:98:f5:52:63:5a:fa:99:36:
73:6d:d5:e0:57:1d:40:c7:6c:d3:ee:62:8a:95:12:
d7:a9:77:9a:72:44:9d:4a:51:70:ff:5f:ef:6f:96:
ed:f7:06:b2:10:68:58:d5:0f:4f:93:15:3c:e8:12:
a1:98:c2:d3:17:4e:73:bf:99:18:58:cf:8b:ac:ea:
73:4c:99:7e:94:c3:3e:83:0d:51:9d:89:c3:82:77:
dc:7d:d0:00:14:1d:21:48:71:26:36:77:4e:e5:fa:
ae:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:E0:3B:41:E1:F6:62:DB:77:09:75:86:55:C7:A9:72:82:F4:A5
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d2:9a:9f:18:16:a9:e4:24:72:27:60:7f:7f:33:0f:cf:0b:
b5:a2:73:25:6f:6a:42:5a:66:18:8e:93:48:09:f1:19:6b:29:
69:c9:17:2e:63:55:26:88:e3:7d:98:63:20:c3:01:ae:70:d4:
95:27:9f:1f:e8:ef:09:3b:5b:80:fe:37:a8:0e:50:ee:23:17:
5b:79:5f:69:f3:1c:09:64:1b:4b:22:f3:b6:9a:cc:f7:6a:8f:
62:28:fa:87:2d:91:98:f9:ba:b4:76:74:61:d1:87:af:77:62:
34:e3:75:cc:2f:6b:24:6a:53:58:29:69:7f:ae:15:95:11:6b:
b4:e5:4b:6e:e6:bd:8f:5a:51:65:89:2d:7c:e3:86:47:5b:7d:
47:ef:59:1a:fc:35:97:6f:e3:94:51:3d:ec:76:9a:0b:e8:de:
ec:51:67:03:76:5a:26:63:85:ae:bf:17:5e:0b:c5:c3:be:47:
5e:e2:cb:b1:00:6c:03:37:70:16:f3:1a:cd:f0:16:f8:9f:6c:
94:69:37:e7:ed:89:03:38:e7:31:30:26:15:5b:81:47:e3:b1:
e1:a0:76:60:b2:9d:88:d3:52:88:c2:8b:cc:c0:67:2a:84:b1:
ee:42:1d:60:2f:f8:76:cb:2a:23:97:d6:a0:69:b9:01:c7:e7:
53:0c:04:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzKvuzyE6ZX4rwXBEmcoF0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNGU0OTkyNDBjZWE1ODg1NDFhN2RjNzRmMzIxYzkxNDE3
NDRiYjYwHhcNMjYwMzA4MDAwMDM1WhcNMjYwMzA5MDAwMDM1WjAzMTEwLwYDVQQD
Eyg4YzNiZTAzYjQxZTFmNjYyZGI3NzA5NzU4NjU1YzdhOTcyODJmNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf0npkUVDcrurPTZQqsIu9BIeEsl
Y1IAzREEN2CwXrn8ZbhZDfdvqNrXbIYHpR3f0UPN4X1yIe1L+MBw8KrDKmtEwXhC
r1TpmS2YwkN358ErYajhXuwAAAfEvG0J0X5mSPZ/DXed+NaK7T7/ym8x439p3qV4
iOkkDAZs/Aznj6nyspTUMCpDtJ4AYFqWJOWu4vtnbw6KL6NMIkcPmPVSY1r6mTZz
bdXgVx1Ax2zT7mKKlRLXqXeackSdSlFw/1/vb5bt9wayEGhY1Q9PkxU86BKhmMLT
F05zv5kYWM+LrOpzTJl+lMM+gw1RnYnDgnfcfdAAFB0hSHEmNndO5fquTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw74DtB4fZi23cJdYZVx6lygvSlMB8GA1UdIwQY
MBaAFKFOSZJAzqWIVBp9x08yHJFBdEu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEt
MzZhODA4ZjNkMTRkLzEvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wODI4ZTctMWU1Ny00NzQ3LThlYTEtMzZhODA4ZjNkMTRk
LzEvb1U1SmtrRE9wWWhVR24zSFR6SWNrVUYwUzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNKanxgW
qeQkcidgf38zD88LtaJzJW9qQlpmGI6TSAnxGWspackXLmNVJojjfZhjIMMBrnDU
lSefH+jvCTtbgP43qA5Q7iMXW3lfafMcCWQbSyLztprM92qPYij6hy2RmPm6tHZ0
YdGHr3diNON1zC9rJGpTWClpf64VlRFrtOVLbua9j1pRZYktfOOGR1t9R+9ZGvw1
l2/jlFE97HaaC+je7FFnA3ZaJmOFrr8XXgvFw75HXuLLsQBsAzdwFvMazfAW+J9s
lGk35+2JAzjnMTAmFVuBR+Ox4aB2YLKdiNNSiMKLzMBnKoSx7kIdYC/4dssqI5fW
oGm5AcfnUwwE4w==
-----END CERTIFICATE-----
Generated at Sun Mar 8 03:16:56 2026 by rpki-client