Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
File: oab8cmK6eC3V9kMIWYK102cD2_s.mft (raw, json)
Hash identifier: 2lPajgKVt8UbpxTNZMyH96asQR6ctW0+z+BfchETsI0=
Subject key identifier: 85:02:20:C8:4C:AE:57:83:84:01:9D:BA:3B:BD:B1:1F:61:0F:C0:8B
Authority key identifier: A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
Certificate issuer: /CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Certificate serial: 019CACB57181F8983E4B02A6C3CCD43F950B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
Manifest number: 1430
Signing time: Mon 02 Mar 2026 04:01:37 +0000
Manifest this update: Mon 02 Mar 2026 04:01:37 +0000
Manifest next update: Tue 03 Mar 2026 04:01:37 +0000
Files and hashes: 1: 1Pk2KOHLdvr4CicnUNuBzH_2gyo.roa (hash: MhgKH4XXLplgDoi9ekQYp8OVpGYhKa65h2GVlb4h3zY=)
2: oab8cmK6eC3V9kMIWYK102cD2_s.crl (hash: xAecGNJNWkvJ+T744Bt4qw4IVvuXRSegVaESugTqBO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:71:81:f8:98:3e:4b:02:a6:c3:cc:d4:3f:95:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a6fc7262ba782dd5f643085982b5d36703dbfb
Validity
Not Before: Mar 2 04:01:37 2026 GMT
Not After : Mar 3 04:01:37 2026 GMT
Subject: CN=850220c84cae578384019dba3bbdb11f610fc08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:94:89:f0:36:5c:ab:ca:78:17:68:7e:05:
56:db:61:85:70:f2:99:4f:bc:e5:ef:4c:d6:a6:83:
ca:cb:63:98:e3:a9:84:66:b9:04:9e:ae:d6:88:7a:
35:a7:de:93:6e:0e:b9:94:a3:ab:b5:4a:00:0a:8e:
9c:4c:48:70:b2:07:4b:01:df:5a:c9:b5:5f:c7:75:
55:f6:19:33:b9:1a:d0:6b:72:b8:86:a6:7b:0d:6a:
7c:62:09:a5:ee:74:76:4d:7d:0a:c2:ac:05:c8:71:
ff:84:ba:28:8d:a8:a0:b4:2a:eb:77:03:53:9d:44:
9a:33:2f:1d:e7:15:db:96:63:a1:90:7f:cf:f4:95:
1c:e9:51:05:11:5c:f0:3c:0a:9e:6c:52:af:22:98:
c7:50:6e:a7:fb:9e:57:a9:9d:91:5f:7d:8e:ea:ec:
77:d4:41:25:21:29:f0:7e:f9:cd:a5:9d:90:0e:a4:
e9:bd:f2:2a:2d:de:6f:1a:16:3e:7a:dc:db:c0:55:
ec:86:1a:55:ac:01:86:6a:f1:9f:bb:89:b4:b5:ac:
3f:36:04:94:38:60:30:87:65:c6:e2:a0:2d:da:0a:
87:ee:bb:36:d9:ea:d6:d0:62:72:58:e4:a9:dd:4c:
80:4a:a5:a0:0c:75:e7:f2:c4:2d:8f:89:8a:ad:20:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:02:20:C8:4C:AE:57:83:84:01:9D:BA:3B:BD:B1:1F:61:0F:C0:8B
X509v3 Authority Key Identifier:
keyid:A1:A6:FC:72:62:BA:78:2D:D5:F6:43:08:59:82:B5:D3:67:03:DB:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oab8cmK6eC3V9kMIWYK102cD2_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5f13a5-a8db-4c37-b7a7-c5378581b0e1/1/oab8cmK6eC3V9kMIWYK102cD2_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8e:3b:50:cb:de:13:fd:eb:cd:99:98:86:63:be:9a:d2:36:
7d:cc:1a:76:a5:61:c4:e6:1e:e9:96:3d:68:7e:34:cf:df:d2:
a7:1b:dd:29:ff:75:db:75:3b:71:a4:89:49:cb:07:f4:a3:44:
a2:5e:23:c2:c7:01:67:6d:e5:09:09:65:ba:26:7f:24:57:b2:
b7:92:1d:f1:56:63:31:5f:84:eb:c4:c0:f9:4d:e1:23:4b:86:
67:5e:8b:de:96:ae:28:c9:d1:f6:d9:16:f7:cb:63:0d:04:c7:
b5:97:46:87:07:e7:fa:cd:01:30:46:4a:3e:f8:16:2a:25:12:
70:7a:40:eb:5c:67:03:72:a2:45:6d:44:6f:9d:f8:b6:28:28:
be:eb:58:61:6e:65:e4:20:27:51:d2:9b:63:3b:13:a3:53:a0:
9b:9c:f7:a6:3b:70:54:10:63:f1:e2:eb:44:ee:29:25:51:e0:
c8:f6:b8:ea:f6:e8:a3:64:a9:cb:68:04:90:58:72:9b:db:b7:
c4:97:41:1b:d1:39:92:98:c6:8a:9e:27:22:0e:e8:1a:87:eb:
b8:af:c4:7c:50:d9:78:ce:7d:8b:cb:01:6f:fc:4f:9c:0f:a4:
6d:48:75:84:ff:0a:14:a3:93:8f:92:16:cb:ed:6e:60:2d:f1:
09:f1:42:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:17:16 2026 by rpki-client