Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
File: oJ1luSb910PaW0c9NBhf4QGwWig.mft (raw, json)
Hash identifier: iC63Ktzm8PWElkqYHdI596gfMZ9s8dNL7gm+ZNWSJy0=
Subject key identifier: 12:D5:71:EF:32:8E:8F:84:53:01:5D:1B:DF:18:9E:70:25:76:F4:71
Authority key identifier: A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
Certificate issuer: /CN=a09d65b926fdd743da5b473d34185fe101b05a28
Certificate serial: 019CAC0FF8D534E7A5B2BEA8FFAADBF1E283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 01:00:53 +0000
Manifest this update: Mon 02 Mar 2026 01:00:53 +0000
Manifest next update: Tue 03 Mar 2026 01:00:53 +0000
Files and hashes: 1: jvhBNJv-kjTUWe2w73IOrhsH8ZM.roa (hash: QuobanihGf2Vt3kAlHWHavYrnvmF3ftRBf2VjsfIBoY=)
2: oJ1luSb910PaW0c9NBhf4QGwWig.crl (hash: snKTw0eX9R9TXeMKT9hCpaKfNlPNczFf/bbvcu1g9Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f8:d5:34:e7:a5:b2:be:a8:ff:aa:db:f1:e2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09d65b926fdd743da5b473d34185fe101b05a28
Validity
Not Before: Mar 2 01:00:53 2026 GMT
Not After : Mar 3 01:00:53 2026 GMT
Subject: CN=12d571ef328e8f8453015d1bdf189e702576f471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:56:77:15:dc:a5:de:95:c7:6d:50:33:92:f5:
15:f4:ff:4e:12:09:56:18:88:6b:ec:98:92:2f:b9:
46:30:4f:e8:64:26:8b:f5:63:9f:d2:89:fc:d2:1c:
ca:a3:ea:9f:c1:5c:d6:ce:46:39:c5:4f:94:7f:cd:
f2:df:ca:a7:19:f2:2a:c6:f7:7c:fd:58:26:37:8b:
bd:85:d5:f2:fa:88:72:c7:3b:35:b1:90:94:eb:e7:
4e:0a:a6:99:2d:64:0e:3a:32:8b:6c:88:dd:3e:b9:
60:ee:a8:be:04:82:ec:65:c5:04:d9:cf:9e:68:85:
1e:df:6d:89:79:51:4e:01:5f:14:e1:da:1d:69:09:
3d:94:e7:57:e9:68:69:a8:05:66:50:87:f0:a6:e4:
5e:a9:c5:4c:88:a5:1f:10:27:2a:00:28:54:c6:1d:
ff:88:7a:85:fd:eb:93:6a:aa:75:e0:fc:bd:60:86:
68:6f:c5:0b:5b:b1:9b:75:81:2a:11:e5:c7:e9:e8:
f4:3d:6d:95:20:3b:37:08:1b:df:65:cf:71:e5:95:
b5:89:89:14:fd:a1:1e:2a:3b:70:70:d6:11:f1:f9:
eb:e8:41:04:8e:67:9a:28:5d:46:f6:66:55:5b:48:
c6:31:2e:08:4d:62:3a:fc:ef:b4:b3:9c:93:ad:b0:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D5:71:EF:32:8E:8F:84:53:01:5D:1B:DF:18:9E:70:25:76:F4:71
X509v3 Authority Key Identifier:
keyid:A0:9D:65:B9:26:FD:D7:43:DA:5B:47:3D:34:18:5F:E1:01:B0:5A:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJ1luSb910PaW0c9NBhf4QGwWig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cbec33-0325-41e7-8266-79a7eaa7ae58/1/oJ1luSb910PaW0c9NBhf4QGwWig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:42:3d:87:03:ae:f3:05:c0:5d:97:d5:81:d9:d8:f8:ed:ff:
c7:4a:e6:3e:6b:f1:9b:5b:ab:7b:09:99:7e:18:93:b5:5d:8a:
0d:da:6f:2c:0c:6e:77:6c:fd:fb:2f:de:81:5f:ed:cb:97:f0:
53:f7:b2:c0:28:ed:47:8e:a0:2e:eb:f7:e9:b4:1b:ac:27:5d:
58:fb:ec:8a:27:20:09:77:1e:0d:7e:75:97:5d:ac:62:57:e9:
ea:a3:59:af:38:06:d3:51:61:ab:4d:a5:5e:af:61:24:f5:44:
01:81:18:ce:c7:d4:1b:99:68:77:5d:73:ad:40:58:f7:49:d0:
e5:fb:8b:1d:eb:2e:61:67:63:81:eb:00:b8:8a:55:6c:5b:3d:
d7:e6:de:6c:4c:07:1c:e3:92:d5:84:83:e4:8d:70:7f:ba:1e:
ee:fd:e7:3c:d2:05:40:26:b6:bf:28:05:f8:18:1e:44:d8:ea:
35:13:40:76:0d:e9:78:e1:02:52:4b:2d:4f:b8:11:76:54:86:
42:f4:6b:af:93:21:3c:57:b0:ae:1b:a4:be:06:a7:56:b1:9a:
18:c4:b4:16:50:ed:2a:38:9b:28:91:33:d8:a1:28:5f:71:8c:
bc:55:c8:d7:ba:54:ff:94:30:f1:58:ed:53:7a:15:c4:c5:31:
be:62:28:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD/jVNOelsr6o/6rb8eKDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOWQ2NWI5MjZmZGQ3NDNkYTViNDczZDM0MTg1ZmUxMDFi
MDVhMjgwHhcNMjYwMzAyMDEwMDUzWhcNMjYwMzAzMDEwMDUzWjAzMTEwLwYDVQQD
EygxMmQ1NzFlZjMyOGU4Zjg0NTMwMTVkMWJkZjE4OWU3MDI1NzZmNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFZ3Fdyl3pXHbVAzkvUV9P9OEglW
GIhr7JiSL7lGME/oZCaL9WOf0on80hzKo+qfwVzWzkY5xU+Uf83y38qnGfIqxvd8
/VgmN4u9hdXy+ohyxzs1sZCU6+dOCqaZLWQOOjKLbIjdPrlg7qi+BILsZcUE2c+e
aIUe322JeVFOAV8U4dodaQk9lOdX6WhpqAVmUIfwpuReqcVMiKUfECcqAChUxh3/
iHqF/euTaqp14Py9YIZob8ULW7GbdYEqEeXH6ej0PW2VIDs3CBvfZc9x5ZW1iYkU
/aEeKjtwcNYR8fnr6EEEjmeaKF1G9mZVW0jGMS4ITWI6/O+0s5yTrbCsbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLVce8yjo+EUwFdG98YnnAldvRxMB8GA1UdIwQY
MBaAFKCdZbkm/ddD2ltHPTQYX+EBsFooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYt
NzlhN2VhYTdhZTU4LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9jYmVjMzMtMDMyNS00MWU3LTgyNjYtNzlhN2VhYTdhZTU4
LzEvb0oxbHVTYjkxMFBhVzBjOU5CaGY0UUd3V2lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEI9hwOu
8wXAXZfVgdnY+O3/x0rmPmvxm1urewmZfhiTtV2KDdpvLAxud2z9+y/egV/ty5fw
U/eywCjtR46gLuv36bQbrCddWPvsiicgCXceDX51l12sYlfp6qNZrzgG01Fhq02l
Xq9hJPVEAYEYzsfUG5lod11zrUBY90nQ5fuLHesuYWdjgesAuIpVbFs91+bebEwH
HOOS1YSD5I1wf7oe7v3nPNIFQCa2vygF+BgeRNjqNRNAdg3peOECUkstT7gRdlSG
QvRrr5MhPFewrhukvganVrGaGMS0FlDtKjibKJEz2KEoX3GMvFXI17pU/5Qw8Vjt
U3oVxMUxvmIoMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:02:38 2026 by rpki-client