Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: g4rwFrrSd4vRgsRViFYJ1jrFpUnneE4V8XYCBtis0VU=
Subject key identifier: 81:47:93:56:2F:98:A8:21:1B:25:42:84:DC:07:68:7D:75:85:30:CE
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 019CB3257A58210976C146C391DE140050AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 12F3
Signing time: Tue 03 Mar 2026 10:01:43 +0000
Manifest this update: Tue 03 Mar 2026 10:01:43 +0000
Manifest next update: Wed 04 Mar 2026 10:01:43 +0000
Files and hashes: 1: JwJbBnAQRnm7Yr9wnBpWo0sg6l8.roa (hash: j/L9is0WBI5ilRI5gTL02OZdlEqkkNv6fyzs7XSwNkE=)
2: PehZxy4eJXOqEW1bQGdH49g9TKk.roa (hash: XVIm5rSukWk090sAzA2TmOJgfDZPjtVxQtvoQb7iTLE=)
3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: 5L4n0GNTB7hejdyB0xcVaorzPZpYv6ZiNPM3ODdytjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:25:7a:58:21:09:76:c1:46:c3:91:de:14:00:50:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Mar 3 10:01:43 2026 GMT
Not After : Mar 4 10:01:43 2026 GMT
Subject: CN=814793562f98a8211b254284dc07687d758530ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:91:11:55:01:b8:37:d0:c8:d1:72:72:c3:
63:c2:ed:80:86:a3:92:97:f5:a3:49:92:f2:df:e1:
71:79:1e:cd:84:d7:72:34:e6:1b:7f:ca:93:b6:82:
b7:64:3a:74:6f:20:77:9f:2b:bd:dd:89:d3:a5:0f:
f2:01:c2:d1:ed:8c:10:61:1b:84:09:08:91:dd:96:
55:68:39:a2:68:c9:d1:06:85:da:9f:a2:14:08:06:
9c:27:cd:90:b5:22:23:3f:bb:81:ee:78:3a:43:78:
89:ca:01:e6:34:1b:7a:af:05:bd:b8:0b:a4:c9:49:
03:de:b2:a1:92:fd:71:a3:a5:a3:a5:7f:17:c4:df:
40:53:cf:3b:7b:47:b9:6d:a9:63:cd:b0:16:95:59:
68:89:b0:b0:53:c0:d8:20:2e:8c:4d:18:11:37:f0:
50:3c:a3:4b:32:37:8b:d8:03:d2:f6:6c:d8:8e:e0:
22:db:18:ac:de:21:ac:f5:8c:4c:55:d9:6a:bb:76:
d5:46:72:03:e1:42:39:53:fe:d5:a2:c3:24:7d:23:
56:13:ff:dc:a0:f7:7a:cc:50:53:b4:02:77:2f:c2:
48:37:29:7f:25:2c:91:83:fd:6e:2b:70:ba:0b:e9:
fa:b9:53:3c:5f:66:00:e8:5b:75:8b:e8:e3:ba:69:
ca:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:47:93:56:2F:98:A8:21:1B:25:42:84:DC:07:68:7D:75:85:30:CE
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:94:77:7c:31:0a:99:d7:5b:7a:a9:54:52:f7:4d:95:51:58:
2f:be:6e:01:4f:3a:29:9f:86:38:77:76:dc:f1:0b:7d:88:4a:
6a:92:48:06:0c:8c:91:4d:3b:47:32:d7:7a:e8:72:08:c3:8c:
36:f9:5f:29:d3:cb:e1:8a:33:98:47:54:5b:01:6c:0b:84:90:
a5:ab:eb:4c:04:57:18:43:56:da:37:21:88:7f:43:00:76:95:
3a:2b:9a:d9:a3:3b:b3:24:d0:4f:75:80:54:65:eb:f2:09:48:
4a:59:81:8c:aa:e1:e6:78:2e:34:87:7b:fe:8d:30:53:39:9f:
cf:41:a1:a9:9d:8f:17:57:23:f5:25:f5:22:a3:79:00:16:53:
23:3d:06:45:33:2c:fe:52:73:57:b1:99:cf:58:ee:63:a7:57:
9f:9e:ad:b2:b9:86:99:70:fa:63:90:a3:66:bf:21:b0:e9:8c:
00:df:f1:4a:5c:40:a1:a7:f8:f8:04:78:09:d0:02:df:f8:be:
10:6a:01:22:0c:63:c1:65:e8:3d:32:a8:bf:4b:65:ca:ee:db:
37:38:9c:75:10:13:d6:34:da:8c:8a:f5:c9:6e:13:7c:5f:a1:
01:19:fd:a8:a8:bb:9c:85:35:e3:9b:93:77:d3:35:d2:64:5f:
82:cf:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 17:46:15 2026 by rpki-client