Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
File: oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft (raw, json)
Hash identifier: B6od7ahkzIfz/pVJqyWLqkIdQU8Xku4XfqgxL/LI1OQ=
Subject key identifier: BD:16:78:B8:63:B3:7F:F8:B3:18:5A:20:1A:1C:E3:AA:90:14:B0:4C
Authority key identifier: A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
Certificate issuer: /CN=a16512b8a262bad599a3b023358c5ceccac9e085
Certificate serial: 019D37524DDAC05685E43A2BEE026827D2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
Manifest number: 0581
Signing time: Sun 29 Mar 2026 02:00:33 +0000
Manifest this update: Sun 29 Mar 2026 02:00:33 +0000
Manifest next update: Mon 30 Mar 2026 02:00:33 +0000
Files and hashes: 1: G-ttXU6LFqII2ZJb5Ai_tbTpvbE.roa (hash: yEHVYP+lRpz9AqpdBf+LceTLoHvG7cdnnGGEb99aDSo=)
2: o-XODVf1hZc2qeOEskGvrZ916vI.asa (hash: t+rCBxLchg6lnut9oPzJlegb7IG7iCHZF9SoXwZVIuE=)
3: oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl (hash: TP/MFG3dh3/mNwVO0UGl5ojeqdG7gf2ky/ue0wUCl3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:4d:da:c0:56:85:e4:3a:2b:ee:02:68:27:d2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16512b8a262bad599a3b023358c5ceccac9e085
Validity
Not Before: Mar 29 02:00:33 2026 GMT
Not After : Mar 30 02:00:33 2026 GMT
Subject: CN=bd1678b863b37ff8b3185a201a1ce3aa9014b04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:ce:f4:f7:68:72:bd:0a:4e:c0:a7:74:fc:
95:41:19:47:d0:43:7d:af:47:0e:71:61:1a:9b:99:
73:7b:aa:04:11:90:a2:c9:6e:89:e5:02:92:17:fa:
80:16:e6:49:9d:6d:c2:26:06:97:70:c8:6c:7d:83:
6c:c1:0c:d3:f0:06:6a:77:2c:b7:a1:3c:66:51:75:
87:0b:bd:6f:d2:bb:7d:db:c5:c9:04:65:b2:2f:44:
8e:7d:f5:88:37:b5:f5:a7:de:8d:cb:89:cd:e2:2d:
9b:3b:5d:0f:cb:3d:58:57:fd:73:7f:7a:88:e9:6d:
a8:ae:44:09:15:f3:77:b8:0a:2e:62:08:13:e6:0f:
3e:d8:78:cf:ea:53:60:25:a5:60:58:45:fd:d3:96:
98:34:d4:fa:46:75:6e:77:87:72:bd:69:a0:f6:35:
06:e4:13:a9:e8:ab:51:89:28:db:08:2b:c8:7c:5c:
b2:6f:d9:6e:af:ff:a1:c2:df:33:b2:e7:03:79:a3:
7e:e9:28:46:f4:6f:b4:1c:4f:fc:72:db:8b:75:93:
a7:fc:d1:8a:77:6e:8e:ed:66:fc:df:29:73:bf:86:
17:df:0c:66:8c:7e:f1:d7:0b:0f:63:a8:42:c7:67:
d9:be:ad:9a:c8:c6:18:78:2e:3f:90:d7:6e:39:fb:
0f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:16:78:B8:63:B3:7F:F8:B3:18:5A:20:1A:1C:E3:AA:90:14:B0:4C
X509v3 Authority Key Identifier:
keyid:A1:65:12:B8:A2:62:BA:D5:99:A3:B0:23:35:8C:5C:EC:CA:C9:E0:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWUSuKJiutWZo7AjNYxc7MrJ4IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8aa085-cadc-446e-bbe8-c9ec3a98f9a3/1/oWUSuKJiutWZo7AjNYxc7MrJ4IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:88:03:fe:b4:0f:dd:34:4a:fc:8a:83:6f:69:1a:f3:35:a0:
f3:30:3d:b5:c4:e4:44:91:1b:4c:a7:11:c9:6a:42:ca:b9:5a:
5f:d6:43:8d:44:c0:4f:3d:53:0b:05:c6:d9:11:c0:fc:2e:44:
bd:3c:f3:45:1b:93:6b:7d:b8:98:4f:ce:be:0c:2e:6c:66:fe:
f1:38:0e:7e:25:be:7d:ef:a5:cc:9e:34:d7:b6:67:1f:b6:d7:
6f:f5:ab:f5:fa:54:0d:62:04:7a:9a:25:5b:af:5c:90:db:28:
db:fe:1d:03:50:fb:79:69:9b:29:1e:13:14:e5:f9:59:ac:35:
cb:ba:28:ac:cd:88:32:42:e6:8b:94:2e:f0:30:9d:73:6c:09:
a2:52:96:d4:17:2d:7d:c3:9c:07:b3:6a:c4:f7:13:17:2e:49:
d0:f8:ba:d8:0f:43:a2:0d:15:05:64:5c:68:75:45:b0:2f:51:
2d:9c:da:23:e0:c0:02:41:97:f1:4b:9e:2d:21:9a:07:25:64:
a0:fc:61:0b:85:b2:20:c1:b8:57:7e:23:ae:81:50:30:06:6a:
72:fe:41:e3:45:65:b7:91:f6:80:5a:92:ba:f4:56:7d:59:6b:
16:5b:9b:b5:34:5e:94:7c:0a:cb:3f:26:ba:84:e0:ee:d6:2d:
6c:df:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:52 2026 by rpki-client