Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: 3FVt53xXRp9W1ft3bDu5EDkp6NkQ+W2zo625o2UD/aQ=
Subject key identifier: 13:E4:82:F5:4D:60:F7:0C:6E:FD:06:8E:FE:47:CB:C0:25:93:0D:08
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 019D38D2ED43E174EF572A397A353CE85C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:40 +0000
Manifest this update: Sun 29 Mar 2026 09:00:40 +0000
Manifest next update: Mon 30 Mar 2026 09:00:40 +0000
Files and hashes: 1: 6LQC_WZqbsxqpCNxITLwNmSvDPk.roa (hash: 2jpqjh4IYhaGl+W39lws2/CQFWFrqFjpyZKUsxZ8H+0=)
2: CO_VzBu4gFZGQo6TZVLREcCwUwY.roa (hash: LG1jfCe3GnKEfOBNBBGC9FiXFKQ/e+HVoB0Wq69YJpQ=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: EJ98x8LZOh0+HVhpEt/+w/RD5mdQuK/UPVl5N3O74Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ed:43:e1:74:ef:57:2a:39:7a:35:3c:e8:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Mar 29 09:00:40 2026 GMT
Not After : Mar 30 09:00:40 2026 GMT
Subject: CN=13e482f54d60f70c6efd068efe47cbc025930d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:49:1b:c6:e8:54:86:74:b2:8d:7b:6c:b7:
13:e9:6e:0c:ac:12:c6:36:13:d4:20:19:ff:e3:b8:
e7:72:09:bb:53:63:b0:1b:30:03:ed:78:09:e6:89:
e2:a7:f7:70:75:f7:21:4a:67:37:9d:8b:c6:d7:fd:
f3:ec:b9:07:e5:57:8b:d8:8f:83:b1:4a:d2:4d:ab:
aa:f7:50:d8:c8:b6:24:45:37:0d:7d:d5:fc:00:d6:
56:04:c5:7c:63:8b:1e:64:d1:ca:72:e0:cc:5b:c9:
e8:c9:3c:b7:fe:0f:71:26:05:55:35:5f:2d:21:55:
a6:22:f9:39:d1:96:72:9d:8c:0f:2a:6a:0e:18:3e:
6a:6e:a1:f6:30:43:6a:ca:e1:bb:da:e8:56:60:6e:
54:b0:36:b6:fe:38:6e:6b:23:27:1e:9e:51:fc:95:
ae:42:70:3e:c1:0c:75:c7:6e:38:e8:fb:da:31:16:
9f:a1:ef:88:8d:ed:5b:7e:22:9f:06:27:d2:69:16:
f0:fa:0c:e4:fd:91:f2:ab:48:d5:94:b4:22:79:c7:
28:4d:33:5b:87:55:b8:50:a7:35:f6:0a:cd:57:5b:
f6:33:f6:69:53:7b:6f:13:cd:eb:b3:d1:22:72:ad:
33:7e:3c:38:0f:90:da:60:42:a7:c2:80:d0:41:5f:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E4:82:F5:4D:60:F7:0C:6E:FD:06:8E:FE:47:CB:C0:25:93:0D:08
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e1:20:cb:59:ed:25:c8:0e:ab:bb:b8:38:df:f3:c3:ad:f9:
30:46:84:3a:f4:e9:ad:b0:36:32:44:3a:52:0b:3d:96:97:dc:
78:16:50:cc:ef:ee:98:ec:f2:64:a9:65:81:ea:60:3f:ed:77:
e7:1b:99:86:d1:32:fb:d2:4f:f0:18:1a:d2:64:48:51:86:7a:
01:c4:1a:d5:f4:0e:7d:4d:6a:53:d3:65:a3:e0:e9:be:83:c1:
0c:43:b7:cb:c4:b0:c8:49:89:e4:d1:4a:cf:e8:d8:7a:b0:fe:
59:48:96:85:8e:02:70:a1:d2:16:32:66:70:63:74:f2:57:61:
f1:f5:bd:83:78:ec:2c:36:97:3d:bd:17:76:47:03:8d:c7:a5:
a9:2e:a3:4e:20:fe:9c:48:2f:66:b1:ad:69:1b:bb:2a:e2:d4:
70:35:e0:38:f4:f2:61:05:b2:56:fc:12:c0:5e:d4:95:38:a5:
6d:2a:ca:28:c5:1b:a2:ba:b9:27:1b:90:bf:15:16:01:c2:b4:
97:ca:90:9e:23:47:8b:66:09:cf:8a:64:27:d7:8e:84:cc:4b:
a5:86:32:ac:30:7a:eb:73:96:0c:bd:aa:57:4b:40:35:3e:0b:
f4:16:c4:ea:ea:11:8b:1e:78:6c:ff:c6:fa:a6:fc:a1:7f:2e:
50:e9:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:16 2026 by rpki-client