Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File: oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier: M/f9skA/cMmCt4+RJaNElxDfH5Hp7aRuMIZFahMTyqs=
Subject key identifier: B5:E0:1C:83:54:F6:4D:31:2F:A2:88:59:1D:7E:14:8E:12:85:70:36
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 019D39E582214A6DD859AFB450F7909A8E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number: 1696
Signing time: Sun 29 Mar 2026 14:00:35 +0000
Manifest this update: Sun 29 Mar 2026 14:00:35 +0000
Manifest next update: Mon 30 Mar 2026 14:00:35 +0000
Files and hashes: 1: GJBycD0z-Vwt49rxYIkUFvJmg34.roa (hash: ntE/dfk2CI0GAxVSBHDhu+/dJpNEVggZuAuaXY3BXZQ=)
2: jVpJP6BkkS37GOi50LHsrQuqbCY.roa (hash: U3tlxtXg3FRS8xNHFRy4ADqG3hKBCU+Zah1l7VaUwVk=)
3: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: /P+xGj4CljTZrupeq64uEV+8TuNYhPjiqscDW4NiIig=)
4: ytyVm3S7Nek5fptdKjR4lszyxVE.roa (hash: fg0+8WvdZTPMhDV0ypT87n2uD/xPs/qDgjBlkh4kxkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:82:21:4a:6d:d8:59:af:b4:50:f7:90:9a:8e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Mar 29 14:00:35 2026 GMT
Not After : Mar 30 14:00:35 2026 GMT
Subject: CN=b5e01c8354f64d312fa288591d7e148e12857036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:93:79:fb:ea:5c:d5:36:87:7e:f4:9f:79:34:
91:6d:11:87:ec:d5:b2:c9:dd:f5:17:8f:69:b7:65:
e8:4b:bd:1c:6c:a9:ac:01:3f:6c:74:97:3c:00:ab:
25:c8:00:d4:bd:00:6f:98:01:ae:3c:56:6e:3a:9b:
8e:fe:f7:f1:07:3a:c1:a7:56:97:15:6f:aa:3b:c7:
62:c3:f6:b7:84:66:96:4d:8d:ea:83:35:34:21:a5:
10:f0:f0:70:83:4e:80:70:e6:ea:d9:47:d1:3a:ff:
ae:e2:8d:09:35:ec:6a:7e:14:87:f2:39:ae:94:26:
2d:74:b8:75:af:5e:87:c8:d1:ed:50:69:df:5a:3b:
28:d8:0a:14:a8:29:48:79:87:dd:0c:5a:e4:19:c9:
dc:04:40:0e:fc:2e:05:91:fa:b1:62:40:c8:a1:dc:
88:d2:2b:8a:e6:cb:e1:8f:26:cb:43:ac:43:53:d9:
ae:dc:e3:09:87:37:ce:18:70:64:e0:15:c3:47:e0:
2e:33:46:e6:5b:51:a0:80:1b:ae:b4:52:b2:e9:fb:
90:ab:99:7a:34:4f:5b:0c:9b:d3:39:57:3e:da:1f:
00:c0:4e:54:17:6e:e2:0b:3c:52:a8:95:a3:c7:29:
8b:1c:aa:b4:b6:a1:74:1f:9a:ba:0c:a4:d4:1f:a9:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E0:1C:83:54:F6:4D:31:2F:A2:88:59:1D:7E:14:8E:12:85:70:36
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fb:98:bf:14:9c:ca:61:ef:95:b2:1a:32:b6:64:1c:d0:8f:
fa:a9:01:60:3f:16:1a:df:f5:f7:c0:35:d3:06:5d:4e:a9:4f:
6f:19:c8:c6:24:7d:5e:46:d4:81:ef:bd:1b:07:5f:0a:63:ca:
24:45:d1:4d:6b:3a:ac:a5:09:dc:05:d6:04:c6:91:e3:75:5b:
15:fe:2d:ed:38:dc:33:33:32:90:08:b9:58:cf:c4:67:32:63:
02:dd:72:d3:c6:6d:a7:95:f6:15:41:b4:5a:7b:b0:c6:00:41:
72:5f:7d:1e:5b:4a:6b:9b:88:e2:36:3a:7f:87:64:88:97:d3:
97:6a:f9:28:9e:df:01:ab:05:da:14:21:0e:d6:e1:e0:d6:58:
51:c2:c7:27:06:96:3c:b3:cd:f5:18:94:ce:b6:09:7b:d0:de:
90:0c:52:3a:a5:25:29:de:aa:83:3c:6b:2d:ae:f0:73:f1:2e:
32:39:8c:1f:6a:b1:6a:90:2d:87:89:49:eb:96:5a:4a:aa:64:
8b:8e:50:75:22:dd:ff:66:40:8a:38:26:54:45:36:6d:9b:d2:
8a:47:7a:63:7b:cc:9b:70:f1:66:f7:1a:38:94:6a:21:b2:8f:
31:2b:2f:24:0c:dc:cb:ed:c6:ca:2a:c0:82:65:43:d3:34:d8:
a5:16:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:57 2026 by rpki-client