Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
File: s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft (raw, json)
Hash identifier: s1M/xUI+C/UIjJKOxfB6N5L3oZuAfzfbQ6CmNlN6xw0=
Subject key identifier: 01:BB:F7:98:2F:BD:69:B6:54:59:AD:B0:8B:95:38:81:A9:56:91:71
Authority key identifier: B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
Certificate issuer: /CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Certificate serial: 019CAB6B846159A47176B77F4692E5DE47E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
Manifest number: 0FB9
Signing time: Sun 01 Mar 2026 22:01:16 +0000
Manifest this update: Sun 01 Mar 2026 22:01:16 +0000
Manifest next update: Mon 02 Mar 2026 22:01:16 +0000
Files and hashes: 1: ROos3zBuxQkxrmV-6L_KMGEOsaQ.roa (hash: yeIMYP8pUIaSbhg8Y2l0OyY+AdGzsCSyQTyWjAoPCS8=)
2: f9tlvRsRIPOuG0I4J9FyfmZyNWE.roa (hash: gD8lBkeNmMP/yM8L2z9Jlxh7FwEKNnW8Lx9hYy3Jdus=)
3: s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl (hash: 6j3x9ahuA9XSa2HHR5BJ5QyH8y0ozupzXsKyxdYSVsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:84:61:59:a4:71:76:b7:7f:46:92:e5:de:47:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35a20a86939c8de8aedc305243b0fd4ad8654d0
Validity
Not Before: Mar 1 22:01:16 2026 GMT
Not After : Mar 2 22:01:16 2026 GMT
Subject: CN=01bbf7982fbd69b65459adb08b953881a9569171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:75:17:02:d9:25:3e:db:cd:ff:d9:b9:a0:
cf:9b:2b:4f:3e:31:8f:78:0a:88:a8:e7:48:39:44:
e8:05:bc:76:88:03:ca:c6:98:3d:cb:92:6b:90:ac:
9a:09:8f:18:60:c3:9b:e1:ae:37:6b:e3:dd:59:51:
6a:0b:94:85:87:fc:5a:d6:bd:6d:0f:5d:1c:a4:49:
2b:4f:66:f4:cf:6a:0b:e8:38:5a:5e:15:7f:de:a3:
04:59:af:e8:19:de:fc:0a:52:19:e3:4a:ed:55:2d:
92:20:55:f1:58:b5:bc:8a:ef:60:41:f2:86:8f:56:
eb:21:38:7e:16:d6:39:66:4c:f5:88:83:3e:c9:2c:
65:f7:a4:be:ab:ad:48:e2:39:3b:1c:0c:b1:be:3e:
58:30:3e:82:ae:8f:69:ae:f6:da:9c:e4:33:ba:4a:
cd:65:77:51:ae:7c:9b:9b:af:86:f9:76:b8:f6:63:
51:b3:4f:00:8a:61:f2:2e:e8:63:fa:8a:06:34:d4:
ed:58:7d:3d:48:71:f5:41:57:fc:73:69:d4:64:e0:
bf:ae:ad:33:9c:50:70:4b:f8:6c:07:84:3c:1a:11:
7d:32:65:6d:94:1c:2e:68:a2:ad:a4:40:d3:2a:a4:
b0:d0:77:a7:72:f8:88:18:3c:c1:7e:ed:7c:04:95:
9c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:F7:98:2F:BD:69:B6:54:59:AD:B0:8B:95:38:81:A9:56:91:71
X509v3 Authority Key Identifier:
keyid:B3:5A:20:A8:69:39:C8:DE:8A:ED:C3:05:24:3B:0F:D4:AD:86:54:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ogqGk5yN6K7cMFJDsP1K2GVNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/162186-50d1-4761-aaf0-a542589799bc/1/s1ogqGk5yN6K7cMFJDsP1K2GVNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:0e:c7:2f:40:50:56:25:03:6f:4d:7c:12:07:6c:6d:07:2f:
15:97:8d:5c:3e:11:dc:c4:fc:42:b8:10:b8:45:5b:a9:24:50:
7e:20:4a:93:dd:5c:cc:97:6d:58:79:2a:22:36:4c:4e:f0:d7:
0b:81:02:37:30:e0:3b:74:79:15:27:18:d6:f6:3e:42:64:65:
99:4a:83:de:8a:92:2f:35:bf:e1:7a:eb:da:0d:1a:42:30:25:
ef:3a:4c:1f:90:10:0b:72:bf:80:7c:5f:7b:9e:45:cd:e9:9c:
fd:d5:4c:b8:f1:e0:3d:b1:0d:0f:56:57:24:ec:ec:f4:15:bd:
41:1f:84:75:b2:4c:ae:55:42:71:57:53:2a:91:62:f9:ef:40:
d8:80:1c:6c:61:2b:60:4b:7e:6d:92:e3:52:82:82:bf:d8:f4:
9f:a2:84:1c:9b:e4:2b:42:df:9c:ae:ec:33:73:3e:8e:9d:d1:
9a:dd:8e:dc:21:6d:bf:28:1e:af:53:6e:9e:21:4a:8b:a2:dc:
27:f3:93:ac:c0:49:c2:be:45:07:36:14:3e:ba:d8:de:d1:a2:
c0:e6:0b:b7:2c:ea:af:45:54:ae:10:08:d8:c1:9f:d8:b6:ca:
80:1c:f5:3d:89:f7:8a:06:66:39:71:df:f4:db:02:da:b7:66:
7b:dc:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:18:17 2026 by rpki-client