Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier: sDaxFTE89eI/G0qqNiADSnJDpgHFBP1heJV+mNWzSik=
Subject key identifier: 9D:37:C1:72:6B:8E:88:72:BC:3C:A4:3A:F4:6B:1F:BB:57:06:74:EE
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial: 019CAAC682D23EDD589EFEA5DC285020805A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number: 04B8
Signing time: Sun 01 Mar 2026 19:01:02 +0000
Manifest this update: Sun 01 Mar 2026 19:01:02 +0000
Manifest next update: Mon 02 Mar 2026 19:01:02 +0000
Files and hashes: 1: CWrDgc5NbM6Zs9itj9MrhDXauLk.roa (hash: 560ydlJiyR+07bXN/UJ/XSK5/4Gksiqy4Mjbt8hjlzc=)
2: OCEiEUZpQX4IfkDXndiYKVx7Rgk.roa (hash: xLtEsQO8UdeepjNku1qAfZc3+09x5R6wQp3loe3bF74=)
3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: qegbqkUb99sNZL3Ek2C7CamdlXb7IZbQ2Acv0nQSJGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:82:d2:3e:dd:58:9e:fe:a5:dc:28:50:20:80:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Validity
Not Before: Mar 1 19:01:02 2026 GMT
Not After : Mar 2 19:01:02 2026 GMT
Subject: CN=9d37c1726b8e8872bc3ca43af46b1fbb570674ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:4c:a8:f8:ba:56:71:87:f5:85:35:59:7c:
3e:40:7a:c5:22:01:7d:25:40:36:22:ce:9b:76:4d:
5c:5f:31:01:fc:e6:c0:9e:71:0f:32:a9:9a:7c:20:
a7:58:ad:66:ce:9d:b1:8f:cc:f1:4c:a3:22:8a:75:
c8:95:2c:0e:37:3c:5f:47:e4:b8:cf:94:6f:c8:01:
eb:ea:16:5b:9b:d5:a2:37:39:46:14:d1:db:91:b4:
3a:5f:2a:68:af:8c:6a:9b:85:60:c3:eb:b7:d8:ea:
db:d2:d6:4c:8c:12:9a:e6:18:60:a2:6b:be:c6:b5:
57:b7:90:75:c5:94:a2:9d:8f:6a:88:3d:d9:05:e9:
e6:0b:99:b9:10:a9:39:e0:e6:2b:d1:60:d1:09:95:
43:7f:0f:fb:98:f9:bb:58:6d:99:32:85:0f:46:c7:
ca:4b:71:13:b0:35:ed:37:4e:ac:e8:f8:72:91:1f:
c8:26:12:ea:3c:0a:96:73:ab:7b:a6:fb:01:50:92:
16:03:81:f8:f7:a0:a4:84:ff:78:eb:a5:5e:d0:e8:
b4:3e:39:b6:4e:75:61:3a:7e:17:87:3c:90:4c:43:
3f:6e:3a:09:84:6f:ac:a3:44:c7:58:cd:da:11:fa:
c3:33:5f:99:82:cf:28:39:36:e6:0b:9c:6f:5e:af:
5b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:37:C1:72:6B:8E:88:72:BC:3C:A4:3A:F4:6B:1F:BB:57:06:74:EE
X509v3 Authority Key Identifier:
keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:61:63:f2:ec:33:85:d5:3a:8d:e9:1c:73:2e:44:15:aa:d6:
44:db:8a:6a:e9:90:9f:ab:71:04:4c:b0:7b:9a:29:5d:ef:b7:
07:f3:a5:66:49:83:09:05:74:3a:1a:e5:32:fb:dc:da:9e:bf:
f0:e6:41:aa:a5:0b:30:a6:27:38:cd:87:64:99:0d:61:e2:39:
02:42:38:25:a4:2a:d3:bf:4d:16:e1:4b:d0:3b:0d:b0:91:27:
d4:2c:6f:79:9b:07:f4:9e:1b:9f:5e:91:07:c2:17:2b:40:a1:
15:f2:38:6d:da:a8:bb:be:5d:7c:f7:41:a3:91:d0:c3:1a:ff:
7c:32:b2:97:dc:02:e6:28:2f:b3:fa:c3:24:e1:d8:88:26:a8:
66:1f:aa:22:53:ac:58:9e:78:58:25:da:04:28:3f:73:7c:2d:
13:dd:64:00:27:da:80:b4:3c:b4:81:53:c4:50:dc:3d:b5:62:
c9:e5:47:87:31:2a:2c:6f:bd:f4:aa:38:5e:fe:1a:c6:bc:66:
ab:e5:0d:3c:ef:d3:e6:fa:2f:b1:63:83:40:6f:3b:09:a4:3b:
fc:b5:af:71:1c:b0:9a:3d:0f:f4:de:04:55:7a:bb:c2:84:0c:
17:7c:c4:83:36:c8:88:a4:c4:e6:3a:e0:59:fa:b3:54:3e:5c:
cd:05:49:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:28:11 2026 by rpki-client