Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: Duyp/fuLPvGpTRM0fMjJqtGC3qlPel2ByIIJiYkZnZc=
Subject key identifier: 40:AA:FC:42:90:34:40:45:B0:B7:CB:F1:65:6D:6C:DC:C9:05:24:6F
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019CAB6B160193D1AC695AF6D663BF3A7348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0E66
Signing time: Sun 01 Mar 2026 22:00:47 +0000
Manifest this update: Sun 01 Mar 2026 22:00:47 +0000
Manifest next update: Mon 02 Mar 2026 22:00:47 +0000
Files and hashes: 1: 5u5zeseIIAH3rUGwZvq3TcUwkp4.roa (hash: TkiEDmRqN7mva7bSv299QA1BJ0MJDg4yMGlz2EkHVWc=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: 0gnqIBtpQZBq2NUSfxDNciskaYx+QVULt1hhL0/lDG0=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:16:01:93:d1:ac:69:5a:f6:d6:63:bf:3a:73:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Mar 1 22:00:47 2026 GMT
Not After : Mar 2 22:00:47 2026 GMT
Subject: CN=40aafc4290344045b0b7cbf1656d6cdcc905246f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:1a:c4:2a:58:8e:3a:91:38:b2:b3:e9:19:
48:0d:8a:11:1f:dd:23:fe:be:9f:35:5d:98:83:32:
60:5f:75:71:56:59:ad:10:6e:9a:af:64:a9:2d:fb:
53:59:be:8c:88:0b:4a:d3:c7:cb:5d:68:50:1d:7e:
8b:d0:14:a1:3f:ab:4e:1a:26:33:f8:e2:ec:45:53:
e1:4b:b1:42:b9:52:1a:54:de:34:c7:c9:61:8d:65:
f1:f8:f8:f3:78:1f:b6:e6:77:b8:8b:e1:45:48:b7:
e0:31:3b:58:57:76:d8:86:d9:64:e6:03:17:79:5d:
02:5c:61:98:ef:5b:c2:bf:68:66:3b:a5:f9:80:54:
38:48:af:7f:90:e1:28:3d:1a:cb:24:55:f9:87:87:
27:58:68:00:74:2a:bc:a2:8e:1e:6d:55:13:be:d5:
2b:40:82:f6:e4:4d:7d:1d:5b:59:81:1d:28:6d:65:
34:ba:d5:ef:30:67:9a:5e:72:ce:63:d6:29:e9:53:
70:c1:cb:de:11:bb:8d:30:8b:37:ba:4c:16:b5:7b:
04:d0:d1:31:7f:ad:d3:c6:8f:ce:53:57:ac:b5:74:
58:67:cc:51:ff:a7:7e:71:ae:34:f0:1b:ba:97:23:
7c:ae:80:63:fc:ea:07:ad:97:69:78:6d:82:50:87:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:FC:42:90:34:40:45:B0:B7:CB:F1:65:6D:6C:DC:C9:05:24:6F
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:9c:fa:d2:29:6c:bb:39:5c:b0:f6:a4:fe:56:a3:1b:4c:74:
af:5a:71:b8:ea:1a:d8:eb:9b:1d:67:65:09:90:a1:cf:a2:ab:
fb:44:04:43:71:0f:59:5d:db:7d:a2:cb:d5:6c:01:4a:f6:2d:
25:c7:1a:12:f5:08:b7:6f:fe:b2:23:9a:b1:41:57:9f:e1:72:
97:87:38:5a:41:54:39:ad:e3:54:2b:e5:e2:41:4d:2d:a6:64:
07:3d:6e:9e:4c:66:c6:ff:7d:99:41:83:56:26:ff:2c:20:bf:
5e:f6:3b:05:7d:9d:39:d6:67:3e:30:28:2a:bc:60:18:5b:ac:
53:7d:d4:24:8b:ac:6c:3c:14:05:cb:9e:32:3f:30:3f:38:5b:
ed:ae:1c:05:c5:59:e2:82:9b:54:06:64:5f:06:27:1b:dd:d5:
6b:f3:97:8b:cb:a9:5a:e7:be:44:e6:4d:03:f0:8d:24:01:aa:
68:96:b6:38:3e:1e:47:26:a0:b7:2f:a7:00:f9:56:ae:c5:02:
46:a0:bc:1d:f8:ba:9d:a5:a5:6c:00:4a:f2:50:d2:f7:39:bb:
40:d4:48:7e:ea:6b:32:59:35:a5:e1:32:f9:71:ba:f7:69:01:
b6:be:8a:67:46:2f:86:52:fb:72:e5:28:33:a2:8e:2f:21:b1:
fe:53:bd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:38 2026 by rpki-client