Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: T2YPLkS+fMQcztydN3WogRTQyRlXQHqWlG66qk6DOoU=
Subject key identifier: 10:F3:C5:EE:54:A4:7E:80:06:11:ED:DE:D2:4B:F8:44:A7:EE:CB:FA
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 019CAAC6DCAA3597828F907007EF3C9DEF56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:25 +0000
Manifest this update: Sun 01 Mar 2026 19:01:25 +0000
Manifest next update: Mon 02 Mar 2026 19:01:25 +0000
Files and hashes: 1: EGhCTTfVVprxfgVg9w5atVlArWI.roa (hash: JDsw+DMZgV8QwOWY/aZzhS3S31WDwwwLV0nKa6xyF8c=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: Q10DGhlV4dwEQ0u0GaFOv+E/CCVuXDWSI252i0bCpcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:dc:aa:35:97:82:8f:90:70:07:ef:3c:9d:ef:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Mar 1 19:01:25 2026 GMT
Not After : Mar 2 19:01:25 2026 GMT
Subject: CN=10f3c5ee54a47e800611edded24bf844a7eecbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:34:eb:2d:84:30:15:d4:84:35:93:55:20:
05:39:3a:5b:f6:c5:35:09:1f:6a:c6:20:3b:bf:98:
95:59:e9:3f:7e:8a:f2:6c:a1:de:b1:f4:09:21:ce:
8d:16:dd:01:d7:03:1a:b3:3c:da:82:45:ec:32:04:
c4:84:03:f4:c6:86:cc:66:5f:57:35:5b:93:3e:24:
fd:e3:5c:c7:8b:af:c1:e5:07:aa:e0:70:a3:93:52:
a2:64:a8:05:31:33:cb:87:5c:58:06:75:0b:cd:8e:
0a:3a:41:d6:27:45:3d:a9:c1:29:65:85:52:99:ab:
37:07:3f:20:50:38:31:f9:18:14:c6:62:bc:e0:0e:
08:46:be:ac:3e:05:d3:ea:77:22:c0:09:eb:ae:fb:
fc:62:f5:88:89:29:7f:93:77:52:5e:29:a3:71:f8:
be:b6:61:f5:86:24:77:a2:a5:34:5c:c8:d1:81:69:
fc:23:59:fc:b7:58:01:22:61:91:60:16:01:9d:02:
0f:b0:47:4b:4a:6d:18:f7:89:f7:4d:92:b2:59:97:
a6:88:21:6f:b8:00:9e:94:89:5f:63:1c:0c:3f:39:
27:03:98:f0:2a:80:ca:d6:e3:22:ff:0e:86:5c:5c:
6c:0a:ba:5a:7b:57:11:18:da:aa:e1:b5:9d:f4:0c:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F3:C5:EE:54:A4:7E:80:06:11:ED:DE:D2:4B:F8:44:A7:EE:CB:FA
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3b:f0:3b:5b:18:32:91:4d:ac:ba:e4:a5:98:1c:cc:31:15:
f4:79:2f:19:5c:74:17:d8:25:10:3d:6e:cd:49:44:34:3a:b8:
e1:4f:36:c5:f2:42:58:cc:f9:81:51:16:54:fb:b7:b0:37:6f:
a6:6c:29:7b:db:24:a9:f4:d0:48:cc:b0:18:38:7d:23:8e:04:
c8:03:20:51:57:e2:ff:6c:40:c7:10:50:8e:f7:ef:46:f1:88:
75:46:8c:64:95:d0:5b:76:c4:fd:09:54:4b:cc:11:41:13:f4:
4d:4b:f3:bc:48:5d:ed:a8:af:e3:16:07:6a:5a:e4:bd:6f:f3:
a9:20:d5:45:4f:03:fc:df:3c:d4:f3:1f:f2:9d:fc:31:af:fd:
90:b3:f1:41:29:d2:84:ad:c8:0a:66:d7:a8:9a:02:ea:4e:54:
9d:7d:01:7d:e2:d9:c7:42:4d:9f:e5:79:60:6e:17:4b:10:f2:
52:57:01:dc:1c:af:cd:b2:3f:63:ba:2a:1e:d7:b0:00:4c:fb:
86:1c:82:fb:2d:9a:06:d1:a7:a7:57:e5:db:11:d3:9d:26:df:
a8:b3:67:1a:86:4a:10:c4:b9:9d:af:8a:ff:bc:ff:2c:ac:03:
87:34:9f:8f:78:85:69:8d:0d:73:6f:2f:ec:a7:58:a9:7c:ff:
a2:07:57:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:46 2026 by rpki-client