Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
File: C-oOzdY0o8B141253KV2jk92zYU.mft (raw, json)
Hash identifier: +XxL8O0BZ3+r4tzWv8wAWQ5YL9d/m4fyL2BOxT8s4jI=
Subject key identifier: 6D:76:AC:CF:7B:56:9D:B1:12:10:BB:4A:B0:B2:43:2F:1E:93:E3:87
Authority key identifier: 0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
Certificate issuer: /CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Certificate serial: 019D3789B2ADAD94414556A574C3FC7FC80F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
Manifest number: 0D4F
Signing time: Sun 29 Mar 2026 03:01:04 +0000
Manifest this update: Sun 29 Mar 2026 03:01:04 +0000
Manifest next update: Mon 30 Mar 2026 03:01:04 +0000
Files and hashes: 1: C-oOzdY0o8B141253KV2jk92zYU.crl (hash: aIoPsnN2R4gcZMMXJezUByj7rxHRPO1V9Pf48uKXEW0=)
2: ReyUn6tKBOELp3PqtRdTiZN56xc.roa (hash: o1NTV7KD/4RS51aQo1dWC0QW0kteepHZMeaZiAB8YZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b2:ad:ad:94:41:45:56:a5:74:c3:fc:7f:c8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bea0ecdd634a3c075e35db9dca5768e4f76cd85
Validity
Not Before: Mar 29 03:01:04 2026 GMT
Not After : Mar 30 03:01:04 2026 GMT
Subject: CN=6d76accf7b569db11210bb4ab0b2432f1e93e387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:44:a3:0d:68:c6:6e:ed:78:87:cc:09:6a:
e0:29:81:36:2b:ce:90:5b:f4:b7:c0:10:32:81:33:
93:9a:e0:dd:89:5e:8b:e1:e6:3b:a8:d1:bd:42:c5:
af:f4:01:03:04:84:57:45:ec:ca:f1:77:7d:84:a1:
54:49:9b:b1:f3:62:c2:c9:c2:a9:89:b4:e6:08:c4:
a3:cd:76:68:01:ad:57:82:d2:3f:1f:76:4e:4a:61:
8f:0b:88:76:97:d8:f5:42:c9:c6:a4:70:28:b3:03:
7f:74:cf:a3:5f:57:2d:01:c4:f1:8d:c7:e3:fa:5c:
f2:a5:cc:a0:8c:60:49:07:0e:6f:78:04:59:cc:35:
27:95:1c:7a:f8:33:14:2b:c0:b3:27:71:48:4e:42:
52:b3:16:ab:c8:47:1b:fb:f3:a1:05:90:3b:15:66:
47:39:36:9c:3e:90:9f:0c:26:5a:e0:89:34:20:cb:
41:7a:5f:60:58:d5:6d:2c:91:e5:e6:5a:6b:e1:44:
d3:ec:2a:52:b0:d5:c1:fc:f6:fb:50:0f:aa:2b:0a:
b3:26:74:a0:30:f7:31:0d:69:d5:90:39:11:4f:9b:
79:1b:b0:eb:b9:3c:de:4a:f9:c2:ab:3c:5a:3c:cd:
ec:0f:19:9a:89:42:65:42:2a:a6:88:4d:43:f6:d1:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:76:AC:CF:7B:56:9D:B1:12:10:BB:4A:B0:B2:43:2F:1E:93:E3:87
X509v3 Authority Key Identifier:
keyid:0B:EA:0E:CD:D6:34:A3:C0:75:E3:5D:B9:DC:A5:76:8E:4F:76:CD:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-oOzdY0o8B141253KV2jk92zYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/aeeea4-651f-4d1a-ab52-23fcc524ea88/1/C-oOzdY0o8B141253KV2jk92zYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d3:ae:f5:c6:79:22:ff:3b:38:81:72:84:a9:fb:d6:46:10:
f6:9e:67:fc:aa:ac:11:c6:00:1e:df:0a:0a:db:e2:c6:e9:69:
ae:32:05:a7:d5:b8:a5:da:45:97:6b:95:dd:52:fa:0a:7a:75:
0a:17:07:25:84:1d:48:eb:5f:fa:32:88:dc:b8:37:04:2e:1c:
63:dd:1c:6b:be:11:83:31:fd:04:2e:16:ef:67:60:8b:56:9d:
2f:31:97:12:99:df:32:64:ed:c3:a0:41:e8:3f:38:c5:bd:da:
d5:3b:c9:ec:a6:7c:61:22:bb:e9:d3:65:1f:92:ac:f3:e9:5c:
56:0f:0f:6a:fe:04:c9:5d:eb:66:aa:b2:6e:f2:58:07:fa:40:
28:b2:ea:83:75:b9:f7:d7:fd:70:85:fe:df:a6:fe:b8:06:fc:
0d:b6:99:72:1a:14:9c:03:f6:5c:d4:7d:13:e3:6e:5e:7a:82:
fc:1d:84:a8:e2:ab:2e:89:37:f2:e3:af:90:30:f4:de:4e:d5:
59:aa:10:a3:9b:d1:e1:16:d5:9b:36:60:94:67:dc:e7:39:ee:
8b:bf:91:2b:4c:63:29:d0:95:0e:9c:a8:2d:ad:1d:f8:03:0c:
d4:c7:4e:d6:02:d2:25:ed:d4:6f:42:3d:9b:66:01:10:4a:13:
0c:65:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:37 2026 by rpki-client