Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: QxzYSY/d7byUNqu+QfcLHwCCJ8oZ8xw3bC7OUOxWlKk=
Subject key identifier: AC:B5:1D:A7:80:00:63:06:5D:CB:96:1D:F9:5A:CD:AB:B2:B1:9E:2D
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019D39AEDE35CD803B22E7C629FE1D99AEE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 13:00:54 +0000
Manifest this update: Sun 29 Mar 2026 13:00:54 +0000
Manifest next update: Mon 30 Mar 2026 13:00:54 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: 9azEgsl/Bdv9Rj/YJDXmiBhT6qYi5yrDxuCGwnR/coE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:de:35:cd:80:3b:22:e7:c6:29:fe:1d:99:ae:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Mar 29 13:00:54 2026 GMT
Not After : Mar 30 13:00:54 2026 GMT
Subject: CN=acb51da7800063065dcb961df95acdabb2b19e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:e1:d0:78:ac:3d:60:cc:8d:c7:e9:2e:90:
c5:ff:9f:d9:7f:20:55:91:ac:56:1e:8d:82:f3:40:
02:8c:6a:0f:20:ba:69:66:2f:18:c9:c6:e3:5e:88:
41:43:a9:61:ff:ba:59:02:ee:b4:58:c2:3e:16:e8:
7f:e1:ed:3d:fc:78:dc:66:b7:f8:a8:80:32:f1:62:
5a:c8:68:e1:d3:aa:0a:b4:44:23:fa:1a:4d:20:39:
4d:21:4a:d3:94:73:89:bf:9c:5f:61:0d:1b:3b:10:
e8:f3:66:dc:cb:e3:e2:f2:a8:fb:87:84:06:c1:8b:
c8:8c:ed:16:62:b4:0c:a3:73:23:97:f8:b3:d2:c2:
99:3c:4d:cc:83:85:94:6e:7d:9b:61:52:14:f1:e1:
02:61:49:9d:0d:07:cd:2e:c7:d2:cf:92:df:7c:16:
bc:39:c7:c1:d9:80:66:9d:64:42:34:38:5a:7d:bd:
42:45:02:74:d1:c0:67:45:c2:7e:4b:91:80:ad:fc:
09:c3:76:3f:2e:19:4e:c2:c1:dd:12:d5:43:74:54:
37:56:6e:b3:ee:fc:76:b0:96:d5:cb:1d:48:49:71:
d6:32:8b:cd:f9:5d:66:51:ec:40:f3:bf:ec:e4:ee:
b0:24:c7:f3:01:3a:40:34:7d:ca:2d:36:66:44:e6:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B5:1D:A7:80:00:63:06:5D:CB:96:1D:F9:5A:CD:AB:B2:B1:9E:2D
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:51:e4:50:f0:e2:84:a4:c0:f6:0d:9c:35:0e:88:6c:50:42:
64:d0:06:e7:17:ab:ef:ea:85:ed:06:66:fa:b9:8a:1e:0f:98:
53:6f:bc:7b:30:f5:1d:58:2c:b7:42:49:24:07:95:7d:a7:4a:
32:0e:0d:41:4a:d1:62:3a:9e:dc:35:07:64:b8:2d:35:da:e1:
dc:71:77:79:d1:bc:87:2d:d6:c9:d4:0f:1f:c4:64:62:a3:08:
24:3b:11:c1:c8:39:b4:39:6f:ba:c5:e7:cd:ac:61:67:aa:59:
4a:06:26:2e:c7:bd:28:89:34:38:a9:6b:d3:ed:ba:4f:78:12:
d3:f2:a0:13:e8:49:0e:6b:47:dd:b4:a0:d9:a0:c2:96:a2:6a:
5b:12:cd:b5:e2:21:d7:69:26:07:89:40:0c:77:55:b9:30:cd:
c5:a9:30:32:d2:86:cc:b8:a2:27:36:9c:3d:76:cc:b3:a0:d9:
4a:33:4c:0e:79:d9:cf:0c:85:d2:2c:92:16:6e:ca:dc:2d:15:
07:4a:99:12:5d:28:3b:c3:78:c3:be:7e:b6:cc:36:6c:bd:5c:
76:64:79:2a:43:64:dd:5c:9b:26:63:1d:a0:66:02:59:54:2d:
68:6b:51:e1:3d:4b:18:8a:ec:02:89:77:89:29:ce:46:08:b9:
c5:51:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:04 2026 by rpki-client