Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: 0bnc2tWfNkgJOmvSSxddDYV4gU19pLRzwnJRg5KXsvo=
Subject key identifier: F5:1B:61:2E:66:0A:1B:EE:2A:A3:71:80:41:73:89:0D:38:47:B2:60
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 019CADFE96627C83120C140DB521706A1978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 10:01:08 +0000
Manifest this update: Mon 02 Mar 2026 10:01:08 +0000
Manifest next update: Tue 03 Mar 2026 10:01:08 +0000
Files and hashes: 1: DO0j4v3mEz3qd5IvdV_Cnx8CXlg.roa (hash: utTjxlZWKu9J3DkdZuLkviiFIN8/pSjqYt+kL5WYAx4=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: k/pwdOSfTdwbeiOnrv5WCxuqkvbVWYJdI01m3RPl2rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:96:62:7c:83:12:0c:14:0d:b5:21:70:6a:19:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Mar 2 10:01:08 2026 GMT
Not After : Mar 3 10:01:08 2026 GMT
Subject: CN=f51b612e660a1bee2aa371804173890d3847b260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:08:2e:14:47:9a:3b:51:49:2b:6e:d5:65:2e:
17:45:fe:c7:ca:3c:60:51:db:ba:d1:95:7c:d0:4a:
e3:11:1c:44:9b:45:33:a5:15:ab:a2:5d:cf:ca:4e:
d5:6f:cd:bf:e1:a1:f4:1b:1c:36:c5:dc:65:52:fb:
aa:c2:3b:6a:10:a2:e2:ce:9b:03:85:9f:4f:c0:1a:
d0:e1:7b:c2:31:88:13:01:76:8b:9b:14:03:c6:6f:
c3:09:bf:ae:9f:08:21:07:b3:47:42:86:e4:66:2b:
5e:28:9c:cf:fa:65:9f:74:c8:22:cf:ea:37:cc:2c:
4f:93:8e:30:de:58:40:8f:1d:10:bf:f2:c3:54:91:
30:34:9c:aa:31:10:49:fd:76:10:2f:a8:10:35:68:
3b:26:3f:1c:fd:12:e2:6d:41:90:5f:e0:b8:f3:6f:
da:ab:dd:2c:a5:a6:6b:d1:cc:d4:8c:62:c4:c4:a3:
7d:98:e0:2c:85:ac:a1:bb:d8:5a:c0:01:c9:76:c3:
e2:b8:3e:64:ab:4d:f7:90:ef:f8:ab:97:5a:6c:62:
14:f4:3e:a7:fd:dc:a0:3e:cf:89:8c:ce:b8:29:ee:
64:95:f4:65:2f:a6:90:a7:8e:f8:32:03:91:85:9e:
3b:b5:a5:0d:3c:58:08:8f:97:ad:f4:d0:66:27:bc:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1B:61:2E:66:0A:1B:EE:2A:A3:71:80:41:73:89:0D:38:47:B2:60
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:95:6c:cf:2b:8b:d1:61:76:5d:03:42:f8:b7:67:6b:9d:3b:
2d:63:bd:73:c4:1a:41:b7:77:b7:c5:cc:55:65:7d:2b:f3:74:
65:d6:3d:93:00:ff:3f:e0:f9:34:50:ff:67:49:96:fa:10:67:
6c:8e:33:79:e0:34:6a:0e:54:27:d5:7c:a3:a3:bc:ae:39:ec:
92:8b:b9:6a:76:8c:7e:b3:7b:43:f3:7d:20:fc:1b:b9:7f:0c:
33:da:aa:64:4d:16:56:d6:09:3d:6a:e4:ff:9c:50:18:f9:2e:
ac:63:8e:c0:d6:9f:af:9a:98:8b:9a:72:8b:5a:a7:19:6c:4b:
8a:4f:44:b8:b3:cb:5b:57:96:39:42:68:07:5d:4a:af:5c:0c:
57:4e:20:7e:a2:da:96:83:43:e7:35:4b:9b:52:bf:bd:4b:10:
0d:f7:a2:f8:82:f4:42:d7:88:2c:01:26:13:79:11:bb:84:9c:
4d:de:c8:3b:ca:b8:0d:eb:46:69:b7:e3:a1:77:af:3b:97:09:
a3:fc:be:af:ff:ff:69:6b:91:af:0f:22:36:af:39:7d:68:11:
3c:96:8e:4e:91:3b:22:68:c0:33:4b:50:0f:8d:bc:e0:3f:9c:
bd:9f:24:f9:48:14:b6:c4:1c:33:23:9e:b9:69:78:5b:97:66:
dc:3c:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:59 2026 by rpki-client