Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: hpbKabRUiIuvYC7sgpZ5y6tkgEIbpx/UEUM6Kve4G9o=
Subject key identifier: 39:72:FB:59:32:D5:D9:BE:70:42:98:73:1E:B6:B4:9F:BD:3C:4C:81
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 019CADC76FC90A019B998890D516E4D2BDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 03D6
Signing time: Mon 02 Mar 2026 09:00:54 +0000
Manifest this update: Mon 02 Mar 2026 09:00:54 +0000
Manifest next update: Tue 03 Mar 2026 09:00:54 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: Dz3Gg+/d6B3hwdZn+vHplUuO7ef9S18xc29X2deYYvg=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:6f:c9:0a:01:9b:99:88:90:d5:16:e4:d2:bd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Mar 2 09:00:54 2026 GMT
Not After : Mar 3 09:00:54 2026 GMT
Subject: CN=3972fb5932d5d9be704298731eb6b49fbd3c4c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:bc:9f:26:c7:ad:1d:0c:91:04:1f:4f:1f:
46:f3:15:1e:f9:a4:1d:ce:63:17:4f:70:e2:06:d0:
bf:18:6f:25:8c:2e:ab:82:41:1a:73:70:e2:2d:a8:
62:09:61:12:60:ae:ed:46:cf:ab:c2:af:3e:15:46:
d6:a9:22:51:54:a0:67:94:20:ce:da:7c:06:80:ab:
25:24:78:88:db:a9:65:44:39:a1:bd:b0:b0:4a:f1:
3f:81:0f:3a:5f:c4:e7:75:dc:eb:37:0f:5c:e7:f1:
7c:06:67:bf:42:47:f5:24:25:1b:4b:7c:81:c5:2b:
ea:91:d9:46:4a:de:bd:73:09:54:1b:99:9f:be:1d:
6b:ce:32:ba:54:c2:6f:d3:43:51:4b:25:89:4c:05:
e0:eb:72:3a:d0:14:cb:c6:38:e3:7c:6f:e1:bb:b6:
3a:ce:e0:8d:ef:ee:5f:e5:2f:77:4f:aa:c4:74:47:
2c:3e:b5:dc:7f:47:97:a5:d8:a4:3a:18:8b:a6:5f:
bb:bf:81:bb:d4:2f:47:6d:e5:93:a8:6d:b4:85:04:
7e:ae:b7:b4:bb:0f:d8:8b:8d:64:3d:6f:96:1d:e6:
74:19:c1:57:55:90:3e:de:6f:35:b5:ec:5d:54:25:
84:70:e4:1f:6e:d2:0a:4b:9c:03:3a:4a:8b:39:df:
11:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:72:FB:59:32:D5:D9:BE:70:42:98:73:1E:B6:B4:9F:BD:3C:4C:81
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c3:d9:3f:e0:f5:c9:5d:6e:35:05:21:9e:45:a5:a1:51:59:
6a:e8:82:8b:2b:87:62:65:c3:cf:4a:8e:86:69:f3:df:f7:32:
cc:d4:e7:a9:cb:6e:62:2c:b9:bf:3e:2d:e5:1d:64:41:17:18:
60:db:e3:28:cd:11:72:5a:48:ea:2e:b3:9d:02:46:90:55:34:
3b:ed:8c:7e:00:a3:98:a0:b9:c0:34:17:49:23:5a:15:be:97:
e1:70:ba:73:1d:aa:20:8f:5b:5b:51:c8:50:99:20:1f:88:76:
9a:e7:13:57:f7:32:aa:42:d6:0c:29:3b:4c:19:5b:0e:5e:e4:
2a:60:72:a2:2c:c8:98:62:a5:fe:a2:1a:ea:06:47:9a:19:c2:
07:15:a1:7c:6f:d1:9a:c0:62:5f:51:8c:93:5c:c8:1d:08:d0:
49:a1:58:d1:59:01:6b:17:86:0d:32:93:ee:d4:2c:1f:1b:d0:
f1:aa:e4:51:9f:36:ba:a2:a6:b2:bb:a8:d8:01:b7:51:5c:a7:
69:e5:a4:f5:70:d0:df:69:49:d9:c3:86:07:66:14:37:d4:4f:
6c:cd:76:0d:0f:f6:b7:ec:ab:32:13:79:dd:8f:9a:da:48:39:
a8:63:e9:2d:8a:37:61:c4:57:51:38:10:d4:09:5e:07:a7:c9:
c4:85:3a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:32 2026 by rpki-client