Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
File: o3U2my1LsuLe3maGRTE-NE5vHMA.mft (raw, json)
Hash identifier: X7o+qfzu6lu5wkBKGCD1ilDkvs5z7r98A8WW/O57huc=
Subject key identifier: 01:C7:4D:5C:83:0D:0B:07:65:F1:F7:F4:28:E3:AA:DF:90:56:EA:95
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 019CAAC6A285486B45956DE13ACC4AC646C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 19:01:10 +0000
Manifest this update: Sun 01 Mar 2026 19:01:10 +0000
Manifest next update: Mon 02 Mar 2026 19:01:10 +0000
Files and hashes: 1: cqrDqsllU4angXR7ZhiixighcHI.roa (hash: fhOWug7UyzusWzCmpcbK8cX3/PPspaEdcPiG9KdZ6F4=)
2: o3U2my1LsuLe3maGRTE-NE5vHMA.crl (hash: fhREaeJM+u+0vBEkgvWv23Ic8T3QjvHgeyhEHDWrjL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a2:85:48:6b:45:95:6d:e1:3a:cc:4a:c6:46:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Mar 1 19:01:10 2026 GMT
Not After : Mar 2 19:01:10 2026 GMT
Subject: CN=01c74d5c830d0b0765f1f7f428e3aadf9056ea95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:b5:55:f1:e8:fe:a3:69:57:c2:3a:d5:cf:
47:9c:e0:2c:ab:50:1e:d4:be:76:da:78:b8:c1:df:
c4:bf:b1:75:33:3c:9f:b5:0d:ac:d0:20:b5:f1:69:
b2:20:71:fa:72:ff:f5:d2:6f:7b:49:e5:19:5d:b1:
17:d7:ae:5f:ef:c1:dc:5e:46:c8:2b:9b:a7:ec:36:
e5:23:05:3b:e8:b1:45:f6:0d:b8:83:ca:3c:f9:7d:
be:27:8a:83:88:0f:14:36:52:94:96:b7:67:8a:a6:
99:d0:8d:a9:9e:7c:9f:81:72:69:30:f4:66:29:4c:
03:1a:60:2b:55:22:2f:65:bb:f9:17:ce:73:bc:66:
8c:33:fa:45:dc:97:94:56:aa:44:41:1e:4f:81:26:
7c:54:77:51:e6:d2:e3:47:16:1b:7f:ce:b4:c8:6e:
f5:00:b0:88:46:5e:cd:c6:79:25:d8:41:28:4b:d7:
4c:7e:69:98:a3:fe:fd:db:5a:e0:a8:4f:92:61:63:
1f:b3:04:0f:3b:19:09:ad:71:26:85:2f:11:eb:bd:
53:3d:4b:99:fc:57:1c:f9:7b:e8:77:fd:90:5a:3a:
68:b4:90:f1:9b:8c:ef:ba:1c:86:f4:3f:eb:6d:a7:
b7:5c:2b:bf:68:ee:6a:f0:22:8d:31:7f:1e:14:2e:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C7:4D:5C:83:0D:0B:07:65:F1:F7:F4:28:E3:AA:DF:90:56:EA:95
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:28:57:80:bd:17:15:89:b9:a8:37:cc:66:1f:52:ae:04:d6:
af:ed:35:d3:17:74:e6:b2:80:18:e1:26:6b:e5:e4:8f:5e:0e:
65:4a:99:4f:d1:3b:f3:7d:56:1f:5e:f9:aa:83:78:aa:3d:ff:
87:9e:e3:c3:8d:2f:86:45:d6:2f:9b:1e:db:0a:91:56:80:97:
a0:6c:32:de:98:6b:61:7d:2c:33:bc:fa:a0:8a:8f:8f:da:df:
24:61:c3:e6:57:42:48:e9:95:1c:e3:00:3f:5d:9c:8f:47:99:
07:68:a6:c0:69:eb:df:b5:59:ec:cc:2e:99:8d:94:97:09:71:
f2:10:eb:5f:21:00:61:61:41:61:48:a1:14:61:ae:e2:8d:05:
fa:59:ae:bc:33:19:dc:1e:f0:c7:7b:82:3f:01:bb:80:d5:71:
70:e7:1b:61:a8:d3:e2:3b:55:86:33:93:6e:17:e0:95:5d:4d:
61:12:46:8e:7b:49:c5:56:81:44:00:8d:24:10:dd:a1:26:01:
3d:07:47:3c:26:f7:b4:28:27:a5:cf:3b:0e:06:5e:e0:4c:0f:
15:7d:f4:c0:02:98:fd:fa:ca:fa:cc:65:fe:77:2c:d0:92:4a:
72:eb:b2:f0:8b:8a:25:31:ea:8a:36:72:df:70:49:78:f5:72:
fc:43:53:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:23 2026 by rpki-client