Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: nj7iar2ZqyJBZ/YhCcPsniB8VDIN+yjBdD/Go0jAlXA=
Subject key identifier: 2E:66:89:99:5A:C9:05:3A:58:2C:0D:84:5B:A9:4B:A4:6E:AB:EA:DF
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 019CABD9FCAA45301E5A334D84E64826F343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 046C
Signing time: Mon 02 Mar 2026 00:01:55 +0000
Manifest this update: Mon 02 Mar 2026 00:01:55 +0000
Manifest next update: Tue 03 Mar 2026 00:01:55 +0000
Files and hashes: 1: 5LuAukBT-PYtoVc1x_YPxle1wsc.roa (hash: h17Dfweg2VbRUUt3KQP8Gh9v6kUcdiw65gP5QtU0txQ=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: DrFlLGpvxlzYJuMeQtD7socPHpO34FgXj51jh131LMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:fc:aa:45:30:1e:5a:33:4d:84:e6:48:26:f3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Mar 2 00:01:55 2026 GMT
Not After : Mar 3 00:01:55 2026 GMT
Subject: CN=2e6689995ac9053a582c0d845ba94ba46eabeadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:78:83:0a:26:26:b2:58:a8:08:c9:b4:b8:ee:
bd:f7:66:20:f4:c1:2c:71:e6:aa:06:49:f3:0c:a4:
b8:78:63:05:c7:63:06:c4:3f:b5:33:17:87:dd:84:
ea:e2:bb:d9:f0:b7:bf:50:5f:69:67:31:c7:d0:f5:
cc:70:04:75:aa:46:12:49:61:02:97:2d:3f:ac:be:
f3:c2:1f:58:f3:12:9a:84:4b:a8:8f:db:d8:cc:8c:
f4:c2:a9:c3:78:46:ca:2d:4d:c3:81:67:48:73:fc:
20:0e:5a:0c:03:97:d9:01:6d:e3:28:21:cf:73:a8:
57:dd:b9:a1:e2:00:ea:ba:6e:f8:1b:6c:26:04:1b:
41:97:a2:65:94:bf:61:bc:a7:af:1e:35:9a:63:1c:
21:de:da:0b:a2:3f:cc:95:37:7c:68:3a:fe:84:50:
73:8d:9d:72:45:c7:ca:7a:f2:f5:77:33:a6:9c:48:
dc:a6:e3:0c:bc:f1:46:e6:23:79:a3:ed:7f:d3:e2:
61:9c:49:d3:24:8b:7a:bc:93:14:86:47:f9:96:3b:
42:39:65:87:0c:e8:20:11:ee:a8:72:7b:02:9a:e6:
7b:09:84:91:4d:52:4f:91:be:7d:78:1a:1f:d6:72:
2e:7a:4d:31:c9:07:2c:c7:5f:81:73:61:52:f2:35:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:66:89:99:5A:C9:05:3A:58:2C:0D:84:5B:A9:4B:A4:6E:AB:EA:DF
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0e:b9:f8:8c:4f:f4:8e:2d:e3:2e:b6:0d:5d:73:17:71:3e:
b0:72:42:f8:3d:37:31:91:13:3d:b1:69:5e:99:2f:ad:f9:86:
7d:ad:c6:ce:50:8f:5e:3b:dd:5f:93:bf:0f:dc:dd:50:86:c8:
2e:c0:53:40:42:2b:1d:78:f8:f0:77:ac:06:22:90:89:88:8c:
1f:21:4a:e7:c5:13:08:c1:62:76:33:cc:d4:90:82:b4:e4:09:
da:f8:4e:8c:e4:23:49:3f:93:cd:f9:64:24:43:7b:d0:fe:8a:
aa:05:06:01:e7:73:b4:40:ed:3c:50:51:78:b9:6a:d7:d0:29:
f2:85:0a:ca:cb:c5:9d:f5:00:3a:75:33:8b:66:98:28:55:55:
64:c5:ed:df:00:03:4f:1d:fd:62:70:de:92:51:54:d6:fa:ee:
81:71:22:e0:24:00:7c:ba:97:4d:bc:6b:ae:33:bb:81:d3:13:
d5:90:33:66:ac:5e:e7:a0:21:51:46:1f:7d:ed:d6:de:9b:c3:
e2:f0:a0:e9:15:fc:ab:d9:67:f6:7e:03:f2:cb:23:cb:b8:a2:
37:51:fc:26:29:06:b6:23:fc:53:64:0a:4b:97:ac:f1:1c:46:
12:54:99:22:f5:8f:b0:c6:4a:bf:9a:f9:db:25:86:99:68:a8:
42:0c:12:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2fyqRTAeWjNNhOZIJvNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODM4MjRmZGMyOWViZTRhYzI4NmNhMDE4NDRkZjg2ZDRk
NzVlYzAwHhcNMjYwMzAyMDAwMTU1WhcNMjYwMzAzMDAwMTU1WjAzMTEwLwYDVQQD
EygyZTY2ODk5OTVhYzkwNTNhNTgyYzBkODQ1YmE5NGJhNDZlYWJlYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HiDCiYmslioCMm0uO6992Yg9MEs
ceaqBknzDKS4eGMFx2MGxD+1MxeH3YTq4rvZ8Le/UF9pZzHH0PXMcAR1qkYSSWEC
ly0/rL7zwh9Y8xKahEuoj9vYzIz0wqnDeEbKLU3DgWdIc/wgDloMA5fZAW3jKCHP
c6hX3bmh4gDqum74G2wmBBtBl6JllL9hvKevHjWaYxwh3toLoj/MlTd8aDr+hFBz
jZ1yRcfKevL1dzOmnEjcpuMMvPFG5iN5o+1/0+JhnEnTJIt6vJMUhkf5ljtCOWWH
DOggEe6ocnsCmuZ7CYSRTVJPkb59eBof1nIuek0xyQcsx1+Bc2FS8jUWJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5miZlayQU6WCwNhFupS6Ruq+rfMB8GA1UdIwQY
MBaAFK6Dgk/cKevkrChsoBhE34bU117AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTkt
OTcwMDU0NmI1NzExLzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC83MTc0ZWUtMzA3Ni00OTZjLWIyNTktOTcwMDU0NmI1NzEx
LzEvcm9PQ1Q5d3A2LVNzS0d5Z0dFVGZodFRYWHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaw65+IxP
9I4t4y62DV1zF3E+sHJC+D03MZETPbFpXpkvrfmGfa3GzlCPXjvdX5O/D9zdUIbI
LsBTQEIrHXj48HesBiKQiYiMHyFK58UTCMFidjPM1JCCtOQJ2vhOjOQjST+Tzflk
JEN70P6KqgUGAedztEDtPFBReLlq19Ap8oUKysvFnfUAOnUzi2aYKFVVZMXt3wAD
Tx39YnDeklFU1vrugXEi4CQAfLqXTbxrrjO7gdMT1ZAzZqxe56AhUUYffe3W3pvD
4vCg6RX8q9ln9n4D8ssjy7iiN1H8JikGtiP8U2QKS5es8RxGElSZIvWPsMZKv5r5
2yWGmWioQgwS6A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:54 2026 by rpki-client