Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier: 9Gi450OKJRU1kiBV/px+872u3WTzuoqGbZkDOc+TEFg=
Subject key identifier: 9B:D7:22:5F:3E:D4:D9:D6:64:43:4F:8E:D0:C7:21:D1:63:50:1C:84
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 019D3A1C662B9B252A71C67F4822117F16F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number: 17C2
Signing time: Sun 29 Mar 2026 15:00:32 +0000
Manifest this update: Sun 29 Mar 2026 15:00:32 +0000
Manifest next update: Mon 30 Mar 2026 15:00:32 +0000
Files and hashes: 1: 2zvlLx0eZAbOYhxgIyqrlDoVC1g.roa (hash: KQYOWqTXbXwvtekOLsVc2rxud/hR8A87QDGRubzzTXw=)
2: 4Ry_mlzBaUQ6UP1sVtEjuUsTD1M.roa (hash: Cbb+P8Z0r4y6AjDJgLqHTENuD/Go8wmcnnMVwTktU/4=)
3: D757pdeWdoida8GHOUdKTXVzQLA.roa (hash: 9oAemx2TPMquAep4lORrFPAoBV6BakfDEYxe+lt7IJE=)
4: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: zMEdlcm+s2Y+EvN6iJ8sGLsJeWpG0UHQBaWVLOAsvG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:66:2b:9b:25:2a:71:c6:7f:48:22:11:7f:16:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Mar 29 15:00:32 2026 GMT
Not After : Mar 30 15:00:32 2026 GMT
Subject: CN=9bd7225f3ed4d9d664434f8ed0c721d163501c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:91:86:f3:b6:a2:93:f1:c6:d8:79:2f:7a:
0f:13:86:aa:74:c4:b7:3e:52:f4:14:81:79:15:e5:
e4:bb:17:51:a7:fc:17:7b:b6:6b:3e:77:11:ca:c1:
d4:a3:13:82:be:79:b4:b9:ea:9e:d8:d2:74:3c:2c:
cd:64:b5:c3:20:51:27:db:74:63:7f:80:22:dd:99:
74:1a:90:03:a9:f4:0d:43:9b:01:96:ae:c7:0a:58:
d8:d5:a8:78:30:52:a4:9a:ac:4a:a9:a6:43:25:c3:
b3:dd:a0:6e:e9:ec:45:6a:d5:32:dd:09:22:1e:90:
bb:22:9f:c3:40:e6:7a:26:5f:b8:dd:39:3d:1b:21:
42:52:a8:54:dd:af:5e:e4:b3:c5:bc:9d:81:5e:5a:
04:5c:ad:1c:ee:eb:d3:02:a0:52:33:ba:68:22:2b:
91:54:f5:1c:ba:3d:76:e7:7b:d9:c9:4c:c1:08:13:
c5:31:7c:0a:2c:0e:58:4e:fc:20:86:7d:1d:a8:a0:
d1:60:cd:eb:59:1d:d0:5b:77:3d:6a:47:55:52:3d:
46:c4:d8:44:5f:e5:61:34:55:c6:3d:73:b0:af:34:
0b:f8:87:cf:3f:9a:1d:68:dc:1b:84:ab:50:ce:a5:
81:3c:62:4c:80:e3:88:29:cd:44:d6:05:36:8d:e7:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D7:22:5F:3E:D4:D9:D6:64:43:4F:8E:D0:C7:21:D1:63:50:1C:84
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e3:cc:4f:82:40:d1:1e:d6:95:82:09:96:90:18:8d:90:45:
89:1d:64:58:8c:7d:90:52:96:d1:26:1a:6d:f9:34:74:55:c7:
d3:1e:69:09:52:63:be:d9:89:90:bd:a8:03:46:f0:4d:a6:4a:
c0:b0:c1:33:33:47:d4:ed:c8:2d:7d:68:33:99:82:e7:89:98:
b8:0d:6f:a1:16:75:2b:9c:b1:ad:34:1b:62:dd:db:ec:5e:c3:
70:a9:1a:40:4d:96:63:9e:da:cf:89:a4:04:31:db:de:02:02:
34:f2:b6:7f:67:86:da:3b:d0:f9:60:10:62:b0:6d:06:cb:c3:
bd:13:13:5e:da:ca:d8:66:be:67:42:01:34:e8:56:d4:8f:ad:
09:7a:de:fb:85:a6:26:17:42:c9:2f:5b:2e:06:14:f6:d7:d4:
c8:c9:f8:d1:3d:ab:66:51:55:2a:ad:ae:2b:d0:82:61:3b:bf:
8e:7a:f2:37:e6:7e:17:7a:58:71:16:5a:4e:56:38:60:51:b9:
b4:28:0e:d0:a9:fb:bc:6c:8e:76:d7:7c:19:06:90:ea:57:a3:
12:c4:0d:d6:24:46:2b:1b:09:f3:0f:87:f2:08:6c:e2:0c:0d:
ec:d5:ec:1a:c7:07:ea:ae:25:59:f4:55:40:3a:9f:76:f1:9e:
de:5d:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:58 2026 by rpki-client