Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: dKP/9BSkHJkfrXdc1evek4/gA6F4YGMPwK1J/xy62PM=
Subject key identifier: 4B:A4:7A:6C:89:20:D2:3F:4C:A2:12:66:78:C8:12:E4:56:87:F7:22
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019CACEBB187D3D6AE0D42FEB6EE3489A5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0DAA
Signing time: Mon 02 Mar 2026 05:00:53 +0000
Manifest this update: Mon 02 Mar 2026 05:00:53 +0000
Manifest next update: Tue 03 Mar 2026 05:00:53 +0000
Files and hashes: 1: 0MTbD1ZTQ8RkmGu_ThgOSCCcqRs.roa (hash: x8g3x8alA1GYm26r1ZPqCbnozd0RVhFDolwCkJFv3qc=)
2: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: F8ycQ7uBH9QgUvYDIPVllUetIY2RUSbCKqNVxnqAeOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b1:87:d3:d6:ae:0d:42:fe:b6:ee:34:89:a5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Mar 2 05:00:53 2026 GMT
Not After : Mar 3 05:00:53 2026 GMT
Subject: CN=4ba47a6c8920d23f4ca2126678c812e45687f722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:d1:27:fd:3f:82:a2:78:62:95:0d:bf:88:
91:dc:33:66:cf:8e:d3:25:f7:a5:e6:71:1f:6a:4b:
96:cf:92:12:54:b8:5a:ce:35:e9:c6:b5:55:77:ac:
23:50:a0:9c:51:71:57:58:94:2e:e6:69:6f:3b:ca:
0a:ee:f8:38:c8:21:c5:a2:9b:e2:4b:f7:f4:00:e8:
a7:ec:37:20:69:b7:8f:d8:3e:63:ba:5a:27:bb:58:
a3:18:cd:dc:4b:19:1f:7a:ba:9e:25:35:33:5b:71:
14:67:65:5e:a9:89:a3:95:59:2f:dd:01:bc:d6:ad:
9a:23:c3:e0:e7:1c:2c:34:0c:e5:72:cc:03:af:89:
d1:95:60:6f:49:a7:43:67:2f:21:de:15:be:d8:68:
86:a7:97:0b:1a:bc:15:b0:05:a9:7c:f7:18:fb:a8:
3e:fc:e6:e7:34:eb:6e:92:54:27:56:47:d7:a7:55:
19:9e:15:2f:f6:bf:f3:1d:7a:c5:05:90:dc:d6:24:
8f:3e:3b:5e:c4:aa:68:4a:e5:cd:4f:71:2f:6d:9d:
de:c3:39:f7:2c:40:04:71:ff:3b:91:2e:63:d4:f7:
2a:ca:2c:4c:db:4e:be:a5:13:18:54:37:44:c6:25:
29:35:e0:ed:63:81:72:a1:12:6b:4f:61:95:cf:73:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:7A:6C:89:20:D2:3F:4C:A2:12:66:78:C8:12:E4:56:87:F7:22
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:54:b6:71:a7:b3:07:d1:2c:cd:dc:1d:95:d6:22:59:02:af:
e2:9b:30:b0:54:e8:fc:db:6f:d8:df:cf:a2:82:ce:4c:a5:7d:
e3:63:d9:09:4b:b6:a3:1f:28:7e:c0:5a:31:e3:5f:0f:97:21:
21:9f:c4:cd:3d:5d:1a:f9:5c:58:c0:36:47:9a:da:be:19:cf:
83:9d:e5:ea:b7:10:33:db:3d:28:cd:f4:97:9d:ab:47:0f:8d:
41:23:52:99:cd:f3:46:0f:90:96:ae:90:86:a3:b7:01:a4:6e:
c1:59:eb:72:a8:cd:29:06:a0:d7:d1:80:e2:b2:60:e8:88:a8:
c9:a5:c9:b8:79:de:93:80:a1:4f:7b:eb:08:9d:25:09:c6:29:
6e:af:1b:7f:b2:c4:c8:a7:31:61:6a:5d:8c:a6:6c:75:ce:8c:
1f:50:24:2f:77:6d:35:db:7b:50:fa:b6:fc:c4:44:ec:e1:ed:
e8:fa:49:8e:c5:d6:7f:30:55:0e:13:f1:5d:c3:b1:8d:83:fd:
6c:9a:1c:28:3a:79:07:0c:91:bd:85:88:b3:9e:41:bc:be:51:
a1:6c:fd:cf:e5:3b:14:e2:93:50:8d:d6:06:4e:70:8a:58:27:
29:1b:99:d9:ce:b7:e6:05:c3:66:04:9d:e4:ca:65:f6:03:24:
86:19:5e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:52 2026 by rpki-client