Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: Sj6XH+7DH+4pao9Cd4n/bgEhrX6+dCRbOVpgADKRKPQ=
Subject key identifier: 8B:B0:A8:82:94:68:F9:0A:67:C7:42:B4:43:51:6E:61:A8:2F:11:D4
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 019CAC1034124F2A9A8CFA0DB7BE3ED20FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 1850
Signing time: Mon 02 Mar 2026 01:01:08 +0000
Manifest this update: Mon 02 Mar 2026 01:01:08 +0000
Manifest next update: Tue 03 Mar 2026 01:01:08 +0000
Files and hashes: 1: 1nYeCdEIBl74RW5H49WfsI_nh5E.roa (hash: EcWzaBWnHXuF+60jlRtvVMtfG/DsbN91ytwmWQKXBaU=)
2: WJ5q-_YpjemWY4gDwOrsfg8-7ps.roa (hash: 7c7RZOTv3Be2R6ZcFGTG+yBTp0jpJb35qh0V1e0nACU=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: m6w9QRtLwx4++Xus+kRL9SoGnm73SmUdjZDpcdruW8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:34:12:4f:2a:9a:8c:fa:0d:b7:be:3e:d2:0f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Mar 2 01:01:08 2026 GMT
Not After : Mar 3 01:01:08 2026 GMT
Subject: CN=8bb0a8829468f90a67c742b443516e61a82f11d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:a9:08:7f:4d:00:32:56:02:6d:d5:e5:1a:
a2:f2:27:99:0e:a6:fc:bc:44:7b:ec:10:c8:42:6b:
f0:c9:0f:e0:b4:01:43:20:1a:f8:67:89:93:e1:13:
d4:16:69:0f:48:e5:7c:66:66:e8:91:7a:94:9a:d6:
b8:3f:cb:26:0b:bc:0c:76:9e:42:c8:0b:de:8a:d1:
a5:c5:07:b1:d4:6c:2e:11:77:18:48:46:7b:d5:92:
ec:7c:8d:83:0a:8f:7a:72:fc:fa:4c:62:c6:66:8c:
13:c8:7d:33:4c:f6:c2:aa:46:7b:8f:4e:aa:2e:c1:
58:57:35:87:f8:9c:cf:60:8b:fe:b5:8c:37:8f:07:
0e:38:2b:31:ff:01:db:21:0e:3e:a7:c0:fc:e5:c8:
e2:14:63:fc:1c:e6:b9:55:d0:c2:22:15:22:95:b5:
79:59:bc:88:65:45:73:a4:37:b5:65:c9:fb:67:ec:
0d:1d:35:3b:d0:d7:d1:4a:f0:c1:c8:f8:7d:6c:5a:
38:32:e5:af:b3:7d:4f:5d:9b:d2:b2:74:74:f5:9b:
38:2a:dc:ce:89:63:91:d2:a1:36:91:03:3b:e4:a6:
31:45:b0:07:e4:a0:d1:59:e3:a6:c4:4f:9d:69:9c:
67:75:bd:2d:87:f8:1a:6f:5f:e3:b7:c6:30:ff:d3:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B0:A8:82:94:68:F9:0A:67:C7:42:B4:43:51:6E:61:A8:2F:11:D4
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f8:e2:f1:7d:ad:68:c1:65:b8:e6:56:5b:52:8c:9a:38:dd:
c2:78:f6:8a:a8:25:15:2f:b5:b9:9d:7d:59:05:b3:59:34:e8:
8c:23:1a:82:f1:83:0e:60:5b:19:f9:43:71:82:d3:97:76:ea:
1f:37:4c:15:f0:2c:33:cc:8b:34:7b:45:08:3c:da:99:c9:34:
79:62:51:15:83:50:e7:71:b3:9f:62:7f:87:02:5b:ef:71:7b:
42:4b:6d:fe:dd:4a:18:e3:88:72:7e:05:41:a4:1f:28:97:73:
53:40:77:f8:fa:9e:1f:12:d3:30:03:69:6e:64:e1:6a:58:25:
74:f9:df:e8:26:e6:9b:47:63:fb:b0:73:99:fd:bc:6f:17:c5:
44:65:23:3d:5d:f2:c9:ec:73:92:b5:6c:cb:d7:57:b1:42:8b:
22:d5:6e:27:a1:5d:fa:a6:d7:69:22:ea:6a:13:0e:40:be:c6:
7e:3f:fe:fb:4d:76:55:a3:51:04:52:c5:7c:aa:5f:7d:4f:17:
fa:dc:17:2b:4b:64:d9:4f:3b:cb:af:08:0b:35:36:7d:28:cd:
c6:5e:21:67:42:19:c4:01:d0:e1:f5:9f:db:f1:43:9c:d4:e7:
6d:d8:90:b7:ed:1d:75:1a:cc:29:26:1e:f7:85:7c:02:4a:df:
a8:0e:d1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:22 2026 by rpki-client