Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier: 2hZIIZelTRjhWbTbCaRfd7t+c1WOusTPY8QK0yqSqBs=
Subject key identifier: 73:E7:23:60:EA:47:6E:4C:0D:3B:02:FE:68:B3:9E:BE:3B:DD:8E:16
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial: 019D3977F8B14546B52A9156AF0048726CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number: 0781
Signing time: Sun 29 Mar 2026 12:00:56 +0000
Manifest this update: Sun 29 Mar 2026 12:00:56 +0000
Manifest next update: Mon 30 Mar 2026 12:00:56 +0000
Files and hashes: 1: IASV8JRGEsONowruVRVAzSNBd00.roa (hash: q96LZrsQ0DU3+JLJjXjHuPPjiyhj2TOBmHbW59vMX1E=)
2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: ZHSCZhEdNzEUhMgokhraevfs+fH9V5t8fPdKUUMivVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f8:b1:45:46:b5:2a:91:56:af:00:48:72:6c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Validity
Not Before: Mar 29 12:00:56 2026 GMT
Not After : Mar 30 12:00:56 2026 GMT
Subject: CN=73e72360ea476e4c0d3b02fe68b39ebe3bdd8e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:a3:bd:8d:aa:f2:82:c3:74:41:b7:ca:8e:
c5:ad:be:3f:ec:60:0c:ca:92:8f:35:97:16:03:6c:
61:08:10:81:c8:8a:21:ef:24:e2:2f:8a:5b:3e:3a:
ec:d3:8a:b7:ae:32:02:db:fc:5b:94:eb:9a:d0:7e:
49:69:46:42:f7:6b:76:48:be:c3:0b:92:62:ff:c1:
f5:a4:97:9c:fb:65:cf:dd:42:38:bd:7e:01:f8:02:
25:ca:18:f6:00:dd:bd:a0:3f:fe:f0:de:df:50:65:
17:1f:4a:31:46:3d:f5:c6:52:4f:97:9b:ed:34:d3:
09:8a:c5:9f:e6:c8:02:86:bc:a7:fa:26:7a:76:9a:
ff:84:f8:3d:3a:97:19:54:bd:81:2d:65:f5:63:d5:
7a:bc:12:60:e8:63:f0:7d:38:87:72:82:f4:c0:c9:
92:7d:5d:08:9e:e4:54:76:c1:ab:fc:6b:55:91:80:
68:1b:e2:3c:81:af:33:a8:db:ef:ae:12:ee:74:49:
c9:17:d7:54:1f:1b:ff:1c:1f:6c:93:da:41:52:36:
90:10:55:b9:fe:ca:41:99:da:a6:60:9f:d5:bb:f2:
3e:8d:f6:77:cf:0b:e6:2e:e0:e1:a3:cc:a4:e6:55:
54:99:98:60:49:f0:76:56:34:27:7a:7d:7b:39:b5:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:23:60:EA:47:6E:4C:0D:3B:02:FE:68:B3:9E:BE:3B:DD:8E:16
X509v3 Authority Key Identifier:
keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:86:51:25:d7:0f:00:aa:d5:10:1d:d2:4f:ee:1c:b5:ac:0a:
10:77:7b:34:7b:2d:5a:23:d4:1a:34:b7:22:18:b7:32:c9:23:
01:83:39:45:ef:a7:f0:87:5b:b3:86:fc:24:0f:9b:a5:48:af:
2f:bd:7a:09:22:48:9d:3f:69:c1:b9:2a:42:25:61:34:ac:4f:
cc:3a:8b:96:1f:16:01:e8:c8:88:c1:e8:1e:fa:ff:18:7f:0e:
3c:e3:94:dc:8b:b4:79:a9:fe:3a:e0:94:6c:c2:c4:9c:71:3b:
5c:f3:5e:41:45:03:ca:3c:9f:88:fa:93:6a:e2:fc:95:0f:06:
fc:68:e1:69:55:be:39:f9:8f:73:10:8f:62:e5:12:10:d9:09:
2a:37:99:04:a5:f2:c0:e2:7e:1c:86:23:c1:ba:c1:04:81:21:
f5:a5:d3:f9:d7:2f:93:05:05:1b:f0:52:e0:2a:c4:7d:3b:f3:
a5:27:c2:d4:5a:60:71:3e:c2:52:80:23:94:35:cd:50:a7:35:
43:29:d0:40:9a:0d:de:d5:f8:c7:1a:8d:2d:f1:30:93:75:87:
12:9e:59:15:ff:12:c1:74:3e:bb:1c:81:6c:3a:3b:21:32:32:
a2:cf:d2:2c:46:e8:6d:36:cd:64:21:f9:96:46:8a:a8:af:45:
1f:83:ab:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:39 2026 by rpki-client