Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: kapnz8qX1w+LexupyqCf9mH+9oqzap0FIxdmYgbaT20=
Subject key identifier: E6:9D:0A:70:FF:65:E2:99:F8:A3:63:3B:37:E8:73:05:AC:78:FD:D5
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 019CAA58BC31F7D31954B15D9FEB469FE553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: gcS09coV3tYRSHKvn2o3h9dZceM.roa (hash: KOrW9L8xSpofYaRTy6Uu+7nddcrmYguuELnOw+Ry36k=)
2: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: kQMtfb1VTZwiY4UA8CB5cwe2CikCJX4hZwNmlHpuvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bc:31:f7:d3:19:54:b1:5d:9f:eb:46:9f:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=e69d0a70ff65e299f8a3633b37e87305ac78fdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:99:65:1a:1f:72:94:9e:93:df:18:4c:06:
88:10:0f:6f:70:20:90:fd:fa:bd:a1:bc:23:10:01:
9e:ee:43:fd:46:22:4d:fe:9f:be:60:a7:99:8c:ae:
05:3b:db:19:af:e8:8f:3e:31:91:04:bc:31:fb:e1:
ca:ed:be:66:12:52:49:ac:da:62:6a:f5:21:73:59:
86:0a:96:8d:2e:66:2b:81:28:e9:86:19:e8:f8:7d:
6f:94:42:fb:d5:75:ce:eb:67:f3:ca:4b:d9:3f:b5:
ed:8d:cc:f8:9f:db:47:e4:9c:1b:96:8a:fe:ef:ca:
a0:26:2c:e1:00:85:2f:7b:9a:b0:d3:60:1b:d2:b9:
9f:d3:16:3f:c5:1a:e6:1b:0e:1d:c3:80:3b:23:06:
97:49:1c:85:bd:78:e1:8c:12:41:42:90:59:b9:bd:
22:ec:19:a1:d0:26:d4:95:27:5b:5c:89:e8:1c:a8:
60:19:97:98:50:26:d6:fe:54:cb:dc:ad:b7:1f:db:
f9:a1:60:1f:4a:40:bc:07:7c:f1:ff:da:6c:2f:1b:
8e:01:0f:63:a5:9c:2f:93:87:cc:6c:1b:75:69:02:
93:f0:b7:7f:8c:80:34:cc:77:7d:ad:a1:48:b7:8d:
db:42:80:4e:06:c5:70:91:1a:57:33:24:82:4f:b3:
86:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:0A:70:FF:65:E2:99:F8:A3:63:3B:37:E8:73:05:AC:78:FD:D5
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:be:02:71:15:87:da:16:28:8f:7f:15:df:09:ac:bc:28:73:
0d:15:b8:26:97:49:68:b4:ec:80:87:a7:62:ec:9f:71:ea:f6:
ca:58:40:b8:26:de:46:a1:0a:7b:61:f6:e0:b8:1e:8c:4e:20:
83:a7:40:f1:22:e9:ba:76:93:75:71:f8:41:43:d7:eb:e8:bf:
f9:54:ce:3c:1a:23:07:7b:89:05:3b:d9:49:33:3b:ea:4c:d1:
e7:c0:22:97:1d:76:ee:df:f2:51:ea:87:7e:ac:b5:c7:0a:02:
9d:7a:87:cb:23:a9:8b:51:69:dc:10:25:e6:6c:f1:85:44:52:
77:90:d3:af:06:b3:43:3e:39:31:34:ba:18:54:6a:e7:5e:b8:
7e:cb:36:82:84:34:76:4b:31:b9:07:be:46:ef:62:34:5e:bc:
ca:fa:6f:c1:eb:7d:b6:c6:27:6b:2e:d1:69:64:4b:fd:0d:93:
9a:7b:97:02:fd:fd:a4:5f:ee:19:52:42:7f:e6:f3:98:77:13:
0b:42:80:87:03:0e:ba:4b:a9:b9:55:6e:41:5b:30:c7:0d:2a:
04:7d:98:c1:70:d6:fc:37:c2:24:8a:34:1e:2d:b6:fc:7a:7b:
6b:b1:0c:69:c3:12:bd:77:12:77:ef:da:66:b2:4d:86:ef:ad:
fc:44:43:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:14 2026 by rpki-client