Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
File: OAonDZR7c0BD17LSUhTx3DDwEd8.mft (raw, json)
Hash identifier: rrTabiWrcRWwv7FlKWDoaAetg30w3arIfTdF5mTjOVQ=
Subject key identifier: 04:24:60:BF:07:D1:6D:16:D6:7E:4C:78:C9:2C:38:12:C9:B2:1E:48
Authority key identifier: 38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
Certificate issuer: /CN=380a270d947b734043d7b2d25214f1dc30f011df
Certificate serial: 019CA8D8364FB9EFF6B345C52FEA2B62E037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
Manifest number: 46
Signing time: Sun 01 Mar 2026 10:01:07 +0000
Manifest this update: Sun 01 Mar 2026 10:01:07 +0000
Manifest next update: Mon 02 Mar 2026 10:01:07 +0000
Files and hashes: 1: NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa (hash: lQuAqzmZHKPPnlJhgUigZTqLHkETETb1Ge6jDBuicw4=)
2: OAonDZR7c0BD17LSUhTx3DDwEd8.crl (hash: R8vJSmG8LDIGEB2cDijqn21SpRXJn0LUmpq/gtJ/m+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:36:4f:b9:ef:f6:b3:45:c5:2f:ea:2b:62:e0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380a270d947b734043d7b2d25214f1dc30f011df
Validity
Not Before: Mar 1 10:01:07 2026 GMT
Not After : Mar 2 10:01:07 2026 GMT
Subject: CN=042460bf07d16d16d67e4c78c92c3812c9b21e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e6:e5:ed:ea:2e:38:d2:a5:4b:e4:f1:0c:e2:
31:2a:ad:3d:e3:87:fb:87:08:3f:0c:1b:58:c8:83:
e5:ec:9c:5b:63:34:a5:6c:21:4c:22:e7:6c:38:d2:
70:b9:ac:61:ae:cb:1c:ff:85:3d:42:07:38:91:d4:
a6:9d:b7:0b:6a:f2:cd:bf:d1:13:eb:9c:1c:70:67:
fd:32:67:f2:f3:b7:a7:4c:1c:f2:ab:62:78:a4:f7:
02:7e:2c:38:04:67:ce:00:19:a9:06:d5:62:8a:9b:
c9:77:7a:34:b1:46:83:f4:ab:d7:74:56:72:9c:95:
e9:bc:f3:b4:77:76:83:fa:28:b4:58:9d:08:cb:bf:
98:12:aa:b8:77:62:b2:c4:66:01:2f:75:41:b9:31:
4a:3e:bd:1a:37:b8:84:2c:c8:0c:6f:6d:a3:19:5e:
b0:fd:fa:0c:42:42:56:b5:6c:be:46:88:29:bc:26:
f0:8e:c6:b0:37:e3:91:7c:95:68:7b:7d:37:fc:c2:
a5:fd:72:0e:b3:6d:bc:9f:36:e3:59:48:7d:fa:4a:
b6:14:55:24:9b:c6:4d:c4:4c:08:31:7d:27:fe:fa:
aa:ea:3b:71:f8:aa:02:1a:bb:d7:22:3b:68:c4:96:
2b:1e:4f:5d:74:58:4b:90:09:53:43:a1:56:37:12:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:24:60:BF:07:D1:6D:16:D6:7E:4C:78:C9:2C:38:12:C9:B2:1E:48
X509v3 Authority Key Identifier:
keyid:38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:3c:c0:e6:d4:ea:00:1c:65:43:80:96:91:de:3f:54:28:62:
26:28:86:d6:be:a4:15:8c:b5:36:2e:36:2d:29:14:e3:7c:d4:
82:79:30:97:2f:6e:59:25:e1:a4:5d:39:14:8d:eb:21:08:d6:
ee:5f:63:5d:a2:b0:a0:72:c5:71:91:a6:5a:82:90:97:17:69:
b8:63:41:23:3d:f9:84:da:41:a8:c9:de:c5:4b:94:9f:a2:6f:
ff:fb:dd:91:dd:f2:38:a7:e8:7d:a6:4e:f2:d1:32:bf:7d:f6:
8a:f0:43:c7:dd:dc:7b:d6:22:b9:ed:80:07:99:34:e8:ff:4e:
d4:3f:c7:62:b7:1c:77:ea:83:37:6b:ac:26:9c:79:2a:23:7c:
b0:ec:bc:27:49:94:89:ce:5c:c9:ef:f1:0f:53:eb:e0:bc:20:
2e:f1:47:05:27:e7:5f:02:be:51:22:58:db:81:cb:15:82:67:
e2:7d:7f:7d:c1:00:9a:9a:ae:b2:d4:e1:13:e5:93:1c:2a:77:
1a:17:bf:c9:57:ae:df:ce:28:5f:36:0d:13:57:5d:43:e8:50:
5d:c9:e5:e6:dc:22:bd:71:cb:76:c7:ac:b6:e8:26:c3:33:ee:
f7:80:56:19:61:2c:3a:f5:95:03:84:95:c3:a9:d4:a9:35:b1:
eb:0c:7f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:21 2026 by rpki-client