Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: /AFs3BHOHXr5vqLaObvi8ww5AKS+egRowrbsVYeSQZ4=
Subject key identifier: 4E:23:73:43:F8:D4:13:51:E7:29:89:68:72:40:39:32:8E:8D:65:9D
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 019D39AF58A2805C2DD652615AB108C760D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0DD6
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: C_BG8Ml6dP3iR096R9X-fJO1n7E.roa (hash: 3QfX9jxSSnvJJan/fsFYYDVyLrGyvJpCwPAUh/Poma4=)
2: UaQ-s38Z57ecJNUbRdVAzUGv8GA.roa (hash: 4xw5dIxtZo++aDtcmN5R2tGAogLl64Jnmc82+4RR2Mo=)
3: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: qk1fpk5qcjWWE+pMHPfifewwikgWfgqCiy2az53DLVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:58:a2:80:5c:2d:d6:52:61:5a:b1:08:c7:60:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=4e237343f8d41351e7298968724039328e8d659d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:30:ee:5a:06:22:ce:c4:3f:9c:80:be:4a:99:
e1:b4:25:30:09:d2:69:c2:27:1e:ab:32:24:73:76:
fd:b4:5b:a3:ad:c0:08:a2:f4:57:42:41:81:b6:f7:
ee:4b:3d:f2:92:77:42:39:3f:a5:9a:12:dc:f4:90:
d6:39:4e:74:f7:2b:64:45:ca:1d:00:ca:f6:52:dc:
31:bf:85:f8:af:f6:8d:6f:78:d8:ae:14:70:b3:63:
1b:74:de:d4:25:67:1d:78:b9:fc:72:20:16:5d:25:
83:dd:a4:30:15:6c:c6:7b:7a:cf:bd:69:d4:9f:79:
dc:a1:14:03:90:96:cf:d5:73:22:96:73:0f:6a:bd:
a0:75:bd:95:79:c5:7c:1c:94:89:53:3d:53:8d:38:
46:90:e8:41:bf:cb:d1:0f:86:e5:3e:57:dd:f7:7d:
b4:c4:98:c7:ed:17:6e:f3:34:cd:74:43:58:ed:13:
a3:30:0e:7e:53:50:fc:41:09:f5:2b:49:34:30:ef:
44:83:4f:13:58:55:f4:4c:0a:1b:a0:9f:76:e3:66:
50:7d:8d:4c:da:0c:72:d9:4d:62:82:d5:6f:dc:8d:
47:65:c7:4b:50:dc:0a:8b:73:e5:50:4f:96:95:18:
d9:13:bf:31:bb:63:cb:13:b1:1c:74:bd:c1:1e:39:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:23:73:43:F8:D4:13:51:E7:29:89:68:72:40:39:32:8E:8D:65:9D
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ed:8a:69:ef:57:a9:6e:63:a8:57:61:b7:69:de:7a:df:81:
ee:a5:e2:7b:2d:df:f3:b5:a6:97:0a:f2:ab:51:96:b5:db:ad:
48:87:3c:ee:c9:88:32:03:c7:21:0a:8b:c9:7e:58:42:1b:31:
17:c3:63:5d:e7:a3:6c:03:32:f2:bc:44:e7:04:42:35:6f:06:
5a:a8:0f:92:b6:c4:b4:12:47:94:a0:88:49:44:fe:09:2a:c2:
66:92:34:94:15:2c:6c:98:1c:32:90:b2:f3:f9:04:3c:9d:60:
04:9b:c6:db:25:04:64:00:d2:0e:6e:61:78:6a:d9:3b:67:9a:
93:ab:1b:9b:b2:00:43:5e:77:5f:48:ce:d4:58:e4:0c:48:47:
cb:d6:14:a8:3a:d6:d9:87:e9:af:ba:b1:94:7f:c7:86:80:34:
7e:f4:73:18:00:57:0f:0b:2e:d1:e4:e0:1c:b4:aa:d7:85:d8:
20:02:29:ea:4b:f4:cb:6e:8b:cf:38:11:c9:db:70:a5:f3:b3:
26:d4:3c:74:a9:b4:db:22:d4:11:f6:37:3c:20:3d:3f:31:0f:
e3:28:6f:4d:48:e1:1b:20:08:2d:44:4b:cb:47:0c:81:b1:30:
12:c5:bd:e8:28:dc:e7:9a:a0:aa:c9:22:e9:82:13:fd:72:b4:
59:e1:20:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r1iigFwt1lJhWrEIx2DWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDExZjU2ODc1YjRjYjdhNThjZWU2Y2I2MDdlZTI1MWNi
ZGY5ODAwHhcNMjYwMzI5MTMwMTI1WhcNMjYwMzMwMTMwMTI1WjAzMTEwLwYDVQQD
Eyg0ZTIzNzM0M2Y4ZDQxMzUxZTcyOTg5Njg3MjQwMzkzMjhlOGQ2NTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zDuWgYizsQ/nIC+SpnhtCUwCdJp
wiceqzIkc3b9tFujrcAIovRXQkGBtvfuSz3ykndCOT+lmhLc9JDWOU509ytkRcod
AMr2Utwxv4X4r/aNb3jYrhRws2MbdN7UJWcdeLn8ciAWXSWD3aQwFWzGe3rPvWnU
n3ncoRQDkJbP1XMilnMPar2gdb2VecV8HJSJUz1TjThGkOhBv8vRD4blPlfd9320
xJjH7Rdu8zTNdENY7ROjMA5+U1D8QQn1K0k0MO9Eg08TWFX0TAoboJ9242ZQfY1M
2gxy2U1igtVv3I1HZcdLUNwKi3PlUE+WlRjZE78xu2PLE7EcdL3BHjm3QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4jc0P41BNR5ymJaHJAOTKOjWWdMB8GA1UdIwQY
MBaAFKFBH1aHW0y3pYzubLYH7iUcvfmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMt
NzhkODMzZTQxNDZhLzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOThiODctMTg1Ny00NGJkLThiMGMtNzhkODMzZTQxNDZh
LzEvb1VFZlZvZGJUTGVsak81c3RnZnVKUnk5LVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAou2Kae9X
qW5jqFdht2neet+B7qXiey3f87Wmlwryq1GWtdutSIc87smIMgPHIQqLyX5YQhsx
F8NjXeejbAMy8rxE5wRCNW8GWqgPkrbEtBJHlKCISUT+CSrCZpI0lBUsbJgcMpCy
8/kEPJ1gBJvG2yUEZADSDm5heGrZO2eak6sbm7IAQ153X0jO1FjkDEhHy9YUqDrW
2Yfpr7qxlH/HhoA0fvRzGABXDwsu0eTgHLSq14XYIAIp6kv0y26LzzgRydtwpfOz
JtQ8dKm02yLUEfY3PCA9PzEP4yhvTUjhGyAILURLy0cMgbEwEsW96Cjc55qgqski
6YIT/XK0WeEg3A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:38 2026 by rpki-client