Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
File: o4SlYxesgXmFG1cPDjp6oEToCKY.mft (raw, json)
Hash identifier: pb79Zn2q8SQVku7rBjJCNFziNRSQF8RbAM+hYBgGPZQ=
Subject key identifier: 43:AE:82:E7:E7:4D:B5:BA:97:06:BF:77:72:21:DD:E4:E4:4C:27:9A
Authority key identifier: A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
Certificate issuer: /CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Certificate serial: 019CAAC6AC2C5F227CB7CCD0B323FE24AEBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
Manifest number: 0667
Signing time: Sun 01 Mar 2026 19:01:12 +0000
Manifest this update: Sun 01 Mar 2026 19:01:12 +0000
Manifest next update: Mon 02 Mar 2026 19:01:12 +0000
Files and hashes: 1: o4SlYxesgXmFG1cPDjp6oEToCKY.crl (hash: SBs2ySqzYtn4LSae8WQoen2GQoIqKE8RWI/tu1RiMwM=)
2: sucnq0ecm8m_nWAQ-4GJKwNEi2U.roa (hash: fAx7NlwCpyfEvSm9rr9kk8PoUxL5xfjmL9DDVwXszMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ac:2c:5f:22:7c:b7:cc:d0:b3:23:fe:24:ae:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a384a56317ac8179851b570f0e3a7aa044e808a6
Validity
Not Before: Mar 1 19:01:12 2026 GMT
Not After : Mar 2 19:01:12 2026 GMT
Subject: CN=43ae82e7e74db5ba9706bf777221dde4e44c279a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:85:79:ef:de:a5:2f:a4:71:e2:23:46:96:
ea:40:83:08:47:75:fb:11:35:1d:e6:e6:0b:66:16:
05:95:30:89:17:65:04:44:27:f1:0e:8a:6c:3c:67:
b5:2e:e9:20:bc:46:63:0d:a7:31:b1:dc:de:87:e8:
29:e5:e6:6d:21:e4:0a:3f:e3:8b:3c:b0:30:1d:36:
bc:41:57:51:e6:b9:f6:b1:e1:0b:af:3a:8e:dc:5a:
5b:20:c9:64:c3:ef:44:73:0b:f2:3e:4f:63:91:df:
5f:61:35:24:8f:d6:03:40:f3:90:ef:54:46:89:83:
4a:1a:e3:68:ad:46:68:26:ee:1b:9a:67:3b:e0:77:
0c:d5:8e:57:f7:f4:4f:29:4f:14:14:27:db:11:79:
d5:46:f3:e9:3c:50:96:d5:8d:91:e2:2c:5e:dc:55:
12:74:0d:b6:39:0c:e6:3b:30:36:f3:10:29:be:13:
c3:1c:c5:61:d3:8c:ab:f6:1c:74:a3:8e:33:cd:f3:
72:53:3f:ea:d4:c3:5c:8b:9b:a1:9f:b4:e6:72:2c:
57:35:34:b2:a2:46:db:78:b2:d7:cc:c7:84:4a:5d:
f2:e6:bf:49:af:1f:bc:65:32:2c:64:bc:50:9a:c0:
3a:c2:30:fb:da:b8:bf:8d:e5:af:e9:86:95:05:55:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:82:E7:E7:4D:B5:BA:97:06:BF:77:72:21:DD:E4:E4:4C:27:9A
X509v3 Authority Key Identifier:
keyid:A3:84:A5:63:17:AC:81:79:85:1B:57:0F:0E:3A:7A:A0:44:E8:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4SlYxesgXmFG1cPDjp6oEToCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c2fbe1-dd9d-4204-9066-e225a249378e/1/o4SlYxesgXmFG1cPDjp6oEToCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c4:34:f9:d8:f8:f1:9a:39:46:82:90:69:5f:23:65:3a:60:
98:5b:30:6e:15:4e:26:28:f8:5d:a3:b0:e4:19:cd:40:ed:64:
a7:5a:55:61:6a:82:45:50:4d:20:a6:8c:7f:1b:b2:04:f5:23:
09:55:3b:e8:89:98:04:22:39:7a:87:75:9b:82:2d:d0:b9:d6:
bb:77:36:46:f1:18:5f:4b:cc:68:1e:7a:58:61:b1:a5:3f:53:
1c:38:88:9c:5e:23:ad:a1:66:a2:9f:eb:03:8c:9e:8d:47:bb:
0f:74:e7:44:e7:99:e5:63:96:54:68:16:4b:65:b6:09:77:c7:
d0:47:c9:6a:d2:04:cc:5a:ab:57:1e:1e:c2:8b:31:7a:ca:c2:
f3:99:53:ec:d1:2a:c7:8b:90:60:d4:c9:86:57:37:e9:ab:3d:
98:2d:5f:4a:1d:87:d2:2b:4d:80:5b:3b:eb:9c:e0:e7:e4:dd:
c6:2b:e4:01:d7:cc:7e:a8:af:36:46:04:91:ac:08:d7:54:42:
66:36:b3:bf:7b:50:dd:b0:3e:77:ce:c5:06:fa:39:dc:71:51:
33:42:cd:96:97:31:71:b8:7c:f4:e9:63:51:85:1c:e7:2e:65:
20:ee:c9:bb:51:c9:61:63:36:9f:be:3a:09:4a:28:1d:71:6f:
e6:6f:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:59 2026 by rpki-client