Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier: EPRSnj1/ntUrkZXFsUMj4Q4+OHZNvGzh7iLKuKS3AGw=
Subject key identifier: 28:70:95:46:DD:04:D2:4C:56:21:23:DE:A2:55:74:23:EC:7D:64:A8
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial: 019CAC101F2B38A35B3786F601445A32CCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number: 17AE
Signing time: Mon 02 Mar 2026 01:01:03 +0000
Manifest this update: Mon 02 Mar 2026 01:01:03 +0000
Manifest next update: Tue 03 Mar 2026 01:01:03 +0000
Files and hashes: 1: eB9ojJLa3oWBFrlNK0k4b9Cie5I.roa (hash: ztnCVdjoCnesK+ihroQfAdypwMeqhVL1q+oU4stV8zI=)
2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: eOQetcrcdFZEL8I4JHSmYlurH7Gbi1/M987JWlW1p2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:1f:2b:38:a3:5b:37:86:f6:01:44:5a:32:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
Validity
Not Before: Mar 2 01:01:03 2026 GMT
Not After : Mar 3 01:01:03 2026 GMT
Subject: CN=28709546dd04d24c562123dea2557423ec7d64a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6e:30:3c:e5:ca:22:16:81:c7:ea:ec:bc:42:
87:a2:c1:a6:e9:07:0f:cf:20:8f:64:f8:5b:30:7e:
30:5b:f2:2f:f3:e9:61:77:25:1e:41:31:c1:cb:48:
cf:38:8e:35:25:07:78:f4:8c:d3:40:8c:d5:83:a8:
f1:85:39:76:5f:5f:63:e8:39:6e:03:11:57:6a:1f:
85:89:6d:b6:f1:c1:53:b6:f7:32:43:55:20:63:1e:
89:96:f1:d1:ba:5b:11:c4:70:ee:de:8b:8b:af:b9:
60:76:92:b5:97:3d:af:b9:a1:ed:6a:6c:49:b0:a5:
60:61:4b:d3:89:a2:98:cc:1f:f6:3d:72:a9:d5:cd:
c2:3d:a3:9f:08:9b:9d:89:be:ef:c3:aa:9c:dc:e4:
9d:8a:a9:22:a4:e9:de:e0:09:2f:a2:5f:ce:54:8b:
b0:f2:08:2a:b3:76:b2:b1:04:68:6e:73:cd:0a:ac:
96:a0:e0:00:a9:da:7a:6a:0d:e1:45:55:0a:d2:3e:
3a:9b:74:b0:f2:fd:2f:e0:09:3c:f7:bb:41:0b:91:
fc:fc:bc:a1:14:23:b1:34:46:98:fa:aa:ae:5d:df:
03:7a:80:08:9e:fe:ee:aa:e3:a6:da:b4:8b:b2:23:
b8:49:5c:93:02:06:00:33:ad:36:fb:90:2f:9c:61:
06:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:70:95:46:DD:04:D2:4C:56:21:23:DE:A2:55:74:23:EC:7D:64:A8
X509v3 Authority Key Identifier:
keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f2:7a:aa:21:7d:1a:60:a6:a1:7b:1a:a0:4c:71:76:a9:2a:
0c:5a:11:e3:e9:9d:16:d9:12:44:bb:83:87:8f:86:bf:1a:ba:
8d:4b:76:5d:01:7e:c3:bc:56:da:09:6c:76:50:87:d1:ce:6d:
33:38:a0:66:92:53:77:19:53:4d:39:da:5b:f3:ef:4f:c7:4a:
0d:aa:26:8e:86:64:36:6e:ef:0a:5d:14:11:63:6b:7e:0b:c9:
bb:99:51:41:4c:d5:94:48:3a:86:88:9d:5e:42:21:94:54:c4:
6b:5a:18:d8:9d:c1:ca:c7:e8:f4:10:3d:a1:9b:fe:23:cd:56:
f7:d1:13:4c:44:f7:12:a6:65:25:d4:6e:d4:eb:6d:e6:10:9f:
12:53:f5:50:61:34:64:65:3b:03:bc:2c:3e:f2:ed:d6:10:48:
e1:5d:9c:20:2c:fb:5c:ef:1f:0c:d4:20:6f:4a:f4:11:3e:1e:
a3:57:2c:95:5b:b7:e3:56:86:d1:83:a9:3c:18:7e:c8:7b:65:
fd:48:38:fc:05:77:8f:7a:ec:3c:46:bd:a7:29:d0:53:ca:e0:
e2:03:c9:d1:cc:e3:c5:4e:c8:db:bc:68:eb:43:a2:cc:f5:dd:
a1:2e:79:6b:3a:02:f5:23:9b:db:ee:e6:6c:b8:97:45:b3:1e:
a3:9d:91:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:49 2026 by rpki-client