Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
File: oIwpap_lpgUVguWt5HVJhfbxGzE.mft (raw, json)
Hash identifier: 9UZ2vjEuK5cX7fAuNVZGVFGBoF8H9f8l5++sLk8KpDE=
Subject key identifier: 21:71:82:EF:5C:3E:D1:63:26:76:94:62:AD:15:A6:66:CA:1F:1A:9D
Authority key identifier: A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
Certificate issuer: /CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Certificate serial: 019CE74900EA8094F8F51B6CA98984B6E1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
Manifest number: 8F
Signing time: Fri 13 Mar 2026 13:00:47 +0000
Manifest this update: Fri 13 Mar 2026 13:00:47 +0000
Manifest next update: Sat 14 Mar 2026 13:00:47 +0000
Files and hashes: 1: PZKZVJbLIiC-nyKzbha8Q1plbB0.roa (hash: OGaxQzQU67t4LsOvlqtFqnosSDCkJ4cDH47PaItpnpE=)
2: oIwpap_lpgUVguWt5HVJhfbxGzE.crl (hash: QTLMo4kSdtJBAKlW1+UvlFcKk8PyB9uLSMbVNBHA0lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:49:00:ea:80:94:f8:f5:1b:6c:a9:89:84:b6:e1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08c296a9fe5a6051582e5ade4754985f6f11b31
Validity
Not Before: Mar 13 13:00:47 2026 GMT
Not After : Mar 14 13:00:47 2026 GMT
Subject: CN=217182ef5c3ed16326769462ad15a666ca1f1a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:ed:45:7f:a1:14:ff:53:a3:29:53:02:da:
ab:7b:e6:02:13:90:06:9d:82:41:4e:cd:ab:28:76:
3a:5d:3f:eb:9c:a0:2a:d4:53:6f:e2:a8:42:f2:9d:
8a:9e:ff:62:73:3e:6e:b3:8a:34:e9:5c:08:0f:2d:
38:73:f2:46:f2:10:e9:ca:b9:d9:93:24:49:0a:96:
6b:36:a1:84:a3:3c:15:56:c3:db:a7:0f:c1:90:86:
9f:79:7b:e5:24:c2:cf:34:d9:08:90:82:55:54:95:
77:43:3e:ae:1e:d6:d4:e6:5b:36:09:4e:b0:2e:26:
51:4c:12:23:98:ad:ed:09:6a:85:e2:45:9a:17:71:
03:bc:95:fd:eb:0a:98:84:63:d3:98:2f:d6:58:32:
d8:29:4c:b2:46:ad:9c:40:61:60:4a:80:5a:98:ca:
8a:76:36:ea:61:cb:b9:17:3e:3c:15:cd:7d:04:52:
76:31:0d:f9:fa:d7:9e:35:ff:74:6b:cb:20:76:cb:
ba:6e:59:d4:52:0e:07:ea:8c:66:7a:af:92:b3:eb:
36:1e:c9:fe:a5:20:a7:63:e7:ef:1f:c6:f1:4e:3a:
24:7d:86:fc:3d:88:81:dd:17:cd:fc:19:a9:28:ee:
27:ca:65:17:34:a9:63:f5:da:47:bb:bc:b9:07:d6:
dc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:71:82:EF:5C:3E:D1:63:26:76:94:62:AD:15:A6:66:CA:1F:1A:9D
X509v3 Authority Key Identifier:
keyid:A0:8C:29:6A:9F:E5:A6:05:15:82:E5:AD:E4:75:49:85:F6:F1:1B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIwpap_lpgUVguWt5HVJhfbxGzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/600789-d71d-4968-8ba9-afb7e8e730cc/1/oIwpap_lpgUVguWt5HVJhfbxGzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:77:66:d4:a4:36:ff:39:a4:2e:bb:cb:eb:17:62:f9:8f:1d:
1f:a5:56:bc:b2:ad:3c:0c:32:71:ff:88:de:ca:0d:93:a3:41:
7f:dd:47:e0:4f:7f:6d:42:91:b6:b3:0b:d2:22:6b:3c:08:80:
1c:12:f6:51:7e:03:ce:01:d8:6a:f8:26:68:7e:b4:dc:70:95:
52:5c:a5:5b:44:53:4a:57:c3:88:14:81:90:e7:ab:26:fc:8d:
89:90:90:a3:9c:de:08:7c:c9:45:1e:8c:35:63:6a:67:9c:73:
00:82:21:0a:4c:ed:e1:8c:9c:c9:d3:de:c8:7d:c8:1c:ba:75:
fc:57:52:80:96:da:1a:c3:30:ff:f4:01:a8:56:95:01:cc:6f:
f4:77:7c:f2:7f:dd:53:21:11:b6:d1:af:de:00:9f:19:0e:d0:
da:c0:1d:d7:24:7d:38:d9:34:b9:fb:28:1e:41:54:2d:9f:fb:
52:c8:b1:ff:90:e0:83:aa:36:8a:d4:d8:5a:10:06:2c:7a:8b:
77:48:53:3c:16:50:bb:52:8b:06:d2:40:e7:52:82:28:0c:dc:
73:19:1b:3b:23:62:ba:76:67:d6:a3:ca:2e:14:98:e3:13:36:
fa:f0:a7:fa:49:48:a0:eb:9e:d5:40:2a:14:f1:26:2c:ed:ed:
4f:c6:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:49:07 2026 by rpki-client