Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: c2M1R0I2ngvV7Cv0D7qe3ppF6P82De4SDcQNB29ko7U=
Subject key identifier: 0F:D0:23:34:06:D5:49:1C:A7:7D:74:18:79:A9:03:47:C5:B9:A6:A0
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019CE63689FB1AD09066062A76456FAF357C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 17BD
Signing time: Fri 13 Mar 2026 08:00:59 +0000
Manifest this update: Fri 13 Mar 2026 08:00:59 +0000
Manifest next update: Sat 14 Mar 2026 08:00:59 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: OnAhMEpqUnYld/J37GnV1x2Twnd8iQELDOo/XZdyS34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:36:89:fb:1a:d0:90:66:06:2a:76:45:6f:af:35:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Mar 13 08:00:59 2026 GMT
Not After : Mar 14 08:00:59 2026 GMT
Subject: CN=0fd0233406d5491ca77d741879a90347c5b9a6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:55:1a:68:53:62:98:52:5f:79:42:28:3f:
08:6b:92:d9:00:08:79:2e:c8:94:e7:30:e2:28:fe:
d8:f8:50:24:90:85:92:e8:86:cc:24:0b:3c:60:d0:
57:e1:96:d1:88:51:6d:b3:17:b4:23:f2:c8:e5:47:
40:20:c0:f5:53:cc:fc:26:be:c4:b8:b2:37:2d:17:
f0:7c:f5:0a:e4:de:fb:3b:25:d2:93:0c:b9:21:5e:
41:a3:4a:d7:39:d5:4a:99:8f:3c:97:a6:8c:f4:5f:
07:69:0e:38:8b:3e:0c:3c:55:0b:7b:24:45:3d:2f:
99:1b:d2:3d:0f:5c:3a:1f:95:c6:c4:07:ac:26:ad:
65:51:00:0f:b6:eb:92:63:7e:da:c3:60:6c:f8:c0:
fd:1c:dd:be:30:03:7c:50:6f:fe:08:c5:a9:43:25:
c0:cb:b5:12:cf:96:5f:7d:a8:68:87:fb:9b:55:bd:
bd:1b:eb:1c:4b:bc:d4:8a:b3:12:f2:70:70:72:c0:
92:f1:8a:3f:4e:d4:7f:ff:66:a0:1e:87:a8:17:27:
8c:e9:9e:1d:2d:2d:e7:5c:65:28:88:ec:57:74:3c:
6d:c4:69:36:b9:e2:d6:9d:af:ca:67:67:e6:ef:6f:
9e:d3:60:e5:cf:82:f2:fb:4b:63:e5:8d:6d:53:06:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:23:34:06:D5:49:1C:A7:7D:74:18:79:A9:03:47:C5:B9:A6:A0
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5f:e9:61:55:a7:d1:ff:c3:04:a3:1a:d6:e4:e7:88:29:46:
e0:54:bd:a7:f3:b4:07:6b:fe:95:77:0b:c0:77:fb:2c:6f:b1:
05:63:6f:14:19:b3:aa:47:7e:7f:dc:b0:52:43:3f:51:61:b3:
ab:03:4d:b0:e9:52:0d:ab:a1:31:8f:5e:73:76:50:44:13:cf:
ee:65:42:b6:f8:8b:45:23:e0:b9:a2:aa:b9:da:fd:4c:54:d0:
5a:c0:5c:39:c1:d6:e3:46:e7:75:7a:b6:21:13:47:ae:a1:10:
76:9d:4d:14:d1:67:9d:c0:6b:00:11:fb:8a:89:a8:3b:dd:05:
b9:e0:65:8c:e6:f7:86:bb:88:0c:12:67:3c:23:15:9c:d0:91:
ea:f5:fc:8b:de:c6:0b:d5:b8:8d:d9:f2:c9:aa:ce:67:46:44:
de:a7:d8:d5:35:80:18:eb:41:7c:95:15:15:1b:a4:3f:ac:75:
6d:00:b4:31:66:9f:62:3a:a1:09:54:4f:d6:ac:af:5a:e1:28:
72:dc:13:9d:09:ab:8a:26:1d:82:30:04:31:62:6c:6a:5b:36:
be:f8:7c:df:fc:50:02:d9:87:07:47:cd:86:af:b7:14:f2:2c:
77:d3:10:f1:3f:75:30:d2:e0:2b:66:fe:3b:57:74:45:d7:81:
ff:20:27:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:54 2026 by rpki-client