Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: SnialeqtT24/AHyH16CCmlh/quHlDT6zhX/qEvlgDc0=
Subject key identifier: 4A:FF:D2:EA:41:F4:57:81:8D:0A:F5:8A:DF:D9:0C:E8:34:ED:F4:39
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 019CAE6C8806A67A4CD7FFAA528936E03418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1496
Signing time: Mon 02 Mar 2026 12:01:14 +0000
Manifest this update: Mon 02 Mar 2026 12:01:14 +0000
Manifest next update: Tue 03 Mar 2026 12:01:14 +0000
Files and hashes: 1: 1-hhSM4eMmsTiLbPCZpcq2Ck0aV0.roa (hash: 4gk83pk4KN/M2N7zNy4kba1x3tC2aGnSA6i7cR5tf1Q=)
2: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: 8PzspySa/TyAaqRB1a8TGtbyxBTEou9PxHItM//sbxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:88:06:a6:7a:4c:d7:ff:aa:52:89:36:e0:34:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Mar 2 12:01:14 2026 GMT
Not After : Mar 3 12:01:14 2026 GMT
Subject: CN=4affd2ea41f457818d0af58adfd90ce834edf439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:3a:c4:f4:64:b6:ec:e2:72:ea:2a:5b:d9:
fd:30:03:bc:1a:4a:21:63:ce:3a:b5:0c:bf:69:9a:
40:ab:ef:17:22:f8:6b:cc:7f:23:a1:99:c0:e8:80:
64:47:8f:ac:61:21:6d:26:d8:6b:2e:fb:6a:dd:fa:
41:0d:c2:b7:e7:77:97:64:0f:a0:9e:2e:24:f7:73:
86:b4:c7:4f:5d:ef:0d:6d:95:ed:65:0c:d3:0e:a3:
47:47:89:b3:dc:ed:68:35:78:d7:ac:91:32:8b:06:
53:7d:83:84:93:1e:1b:52:5b:07:36:10:f3:a5:a3:
f9:be:e8:21:c8:92:28:3a:60:74:31:27:50:58:67:
ca:9b:60:73:fb:05:15:39:8c:fd:59:f7:ba:3f:12:
45:81:27:43:9b:a8:55:d8:06:14:50:78:08:48:6f:
d2:88:33:61:25:6f:81:fe:3a:28:81:0e:f8:ee:c4:
70:ca:64:40:71:3a:ec:d5:c8:34:ba:35:22:30:89:
ec:a5:3c:33:19:ce:fa:fa:8a:ab:68:9c:be:e6:a8:
7a:d9:ef:59:91:00:65:ee:dd:b4:41:d9:45:d0:b1:
5f:84:78:e8:53:5b:13:ff:2e:ac:98:2d:9e:1d:03:
a2:50:1e:bd:4a:67:ae:63:22:6d:b3:66:bd:d4:11:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FF:D2:EA:41:F4:57:81:8D:0A:F5:8A:DF:D9:0C:E8:34:ED:F4:39
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:77:c8:58:c0:59:2c:ed:fd:5d:4a:a6:94:d7:10:b7:ac:0d:
ce:e3:9a:ac:e2:3d:11:39:4b:e4:d3:61:72:b9:0b:e1:70:93:
b2:44:a4:87:30:cf:72:47:12:db:06:4c:51:31:c4:79:7b:a8:
b7:78:e5:f5:80:d0:49:e2:e0:68:68:dd:8c:6b:c1:d3:ca:15:
b0:72:93:42:e7:68:e8:08:cf:37:49:20:f5:3c:bb:6d:64:9d:
d1:9b:1f:89:9e:06:f9:d1:f2:35:bf:e9:2f:49:4a:37:72:2d:
89:48:38:1d:82:f5:28:c1:e3:72:7f:20:b5:d7:84:1b:16:f0:
70:a0:4f:dd:69:34:c1:25:e3:af:9b:b9:9f:a8:d4:aa:10:7e:
39:a7:49:54:c6:72:ce:a0:89:68:5d:db:8f:62:4f:1c:7e:5f:
86:56:b9:fc:6c:ec:ca:dd:c7:6f:2c:fe:83:e9:1a:0b:cc:3c:
a2:0e:50:14:8e:36:b7:8d:12:ec:85:4a:8b:ca:79:93:45:7e:
73:a5:c7:8f:36:25:3c:75:75:be:c7:c2:8e:43:3c:0c:a6:36:
dc:ba:89:41:6c:25:68:22:b3:89:5c:ca:40:d0:3f:85:be:4b:
02:75:a8:d3:86:d0:16:36:04:ff:15:b2:37:d5:79:18:fd:b5:
3d:e1:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:59:34 2026 by rpki-client