Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: FflNiKF/4zgacHA0GZJr+yN+VU0w8C71W+JGZZSRKpM=
Subject key identifier: 20:F1:55:B0:A6:05:EF:18:D4:99:82:32:C3:2A:95:74:AA:45:0D:46
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 019CABD9EC3F71CA8B34AE28081D3B18F0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 1853
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: 99glb-3Nuv_a0drFASic1bJFZuM.roa (hash: EO6/AN96gR8JorI8GqJHXMAny+YSIF2zqACbqvRTJsE=)
2: IJPq1vTmby5eiLb59FjMHsI8kO8.roa (hash: TSRPeSrUsn2p8OKZKn5eOe4aj6tQf87gvJ5n6A763wg=)
3: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: Mtvs1JVd9CAAzmSetR7iOt5ZrLkvnHFj6N6B3tS95xo=)
4: OFEBywh1Kwn1I5HYsaeGw4Ma2k4.roa (hash: RYqKKTPbXc/XKGK59E0CVeAp+/m79LKM8knlKmtIDxU=)
5: T5yYywsjzls8YnVZdYQ-a-4k-Ko.roa (hash: krQ0smxzDZda7B7KpUT9hBrYxqmFAcCTTFjGI8ObPzU=)
6: a3rA8eGuwHcYBSwVzbbc11I2Urk.roa (hash: cT4DoQsTYje8hNsAaND3rx8+vYRHrFLlE/W9JtRBh+8=)
7: hfXT8LQHaBMfJkasTrm7RdvVn3Y.roa (hash: z2Fk8o05kqf7vSmZOKJV+E6QrC7t6Pe5xa8E+bNZIE0=)
8: sDR3Qo8DCVWVTmCrOSCeC4FMQOw.roa (hash: AssTAkGRC23ZzSmSnnu6XD2o7Ux1qMOvYA5IiLgtAlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ec:3f:71:ca:8b:34:ae:28:08:1d:3b:18:f0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=20f155b0a605ef18d4998232c32a9574aa450d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:f0:d7:68:83:51:df:ec:d2:32:27:a6:d9:
2b:b4:2c:9b:07:a9:38:14:22:7a:0e:7c:40:bc:b8:
1c:dc:ef:be:07:ee:bd:5d:64:2f:0b:24:cd:41:79:
04:a6:5a:83:cc:25:c5:3d:78:67:0e:49:73:16:5f:
8e:fb:67:f7:0b:8d:f5:ae:5f:1a:d6:1f:09:93:50:
f6:fd:d3:e4:5d:b3:50:38:c6:96:ff:b4:85:8e:49:
20:36:b3:7d:11:1c:31:78:62:dd:86:ce:91:a9:7f:
c5:b2:9f:28:ff:1b:b4:a4:94:4e:df:41:22:33:7b:
eb:4b:4e:2a:c4:07:9f:57:98:ed:af:3c:66:fc:b3:
9e:9c:27:2e:09:74:e2:d0:ff:15:79:c0:b5:08:64:
20:4a:23:75:ac:0e:d5:3b:88:67:95:18:f6:9a:8e:
5c:94:c7:26:55:1d:24:cc:22:88:d8:26:51:82:d9:
a3:76:ea:e8:c1:cc:c8:b4:f1:29:4e:1b:b0:b8:4a:
af:8f:ae:81:63:67:94:37:9b:76:c6:d7:a6:b7:7a:
8a:41:06:9b:e7:bb:73:c3:8c:d8:ee:b4:43:14:6c:
d3:2f:59:88:5e:ea:a9:31:66:ed:3c:1d:4b:7c:69:
19:bd:04:75:9f:a5:45:e3:cc:e1:42:fb:87:3d:a6:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:55:B0:A6:05:EF:18:D4:99:82:32:C3:2A:95:74:AA:45:0D:46
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:db:85:74:a9:88:ea:09:c2:86:9f:86:d1:52:50:c0:6a:fa:
3a:a8:8c:da:cd:75:e0:14:56:72:bd:d3:e6:54:58:16:d8:1a:
52:69:2c:9d:27:df:40:17:29:1b:27:b8:a1:be:5c:86:61:24:
a9:31:cc:04:18:fb:7d:3c:d1:4c:5b:11:b8:11:ae:4c:d9:c0:
f3:7c:84:86:fd:17:20:a9:9a:9f:4e:55:db:9d:01:2f:de:9d:
27:f9:b2:fb:92:66:9b:20:26:df:28:4f:f6:d4:e2:7c:48:f2:
fc:2b:18:37:74:4c:30:6b:6b:1d:b4:ab:2e:68:02:6c:26:9a:
ea:87:e2:15:30:29:1f:f5:4f:84:02:de:b8:b5:c2:f7:f0:32:
36:bf:0d:a0:2c:26:da:95:49:74:38:94:91:49:4d:f8:c5:09:
ae:27:ca:5c:be:9f:e4:92:8e:28:b9:93:df:d0:fc:81:7b:60:
ac:e6:c2:0f:96:93:5c:83:f5:97:9e:32:1b:98:c1:c3:35:0f:
96:b8:e4:d2:b4:d8:1e:37:ff:fc:9b:4c:b9:e0:7d:c0:49:c4:
75:73:b5:c2:5d:db:04:2c:26:09:7c:7c:74:0d:2f:83:27:6d:
7c:33:62:d5:7d:aa:c3:4c:1e:51:5d:84:0c:d1:18:e3:9f:5e:
db:5c:15:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2ew/ccqLNK4oCB07GPDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2
Nzc3MGQwHhcNMjYwMzAyMDAwMTUxWhcNMjYwMzAzMDAwMTUxWjAzMTEwLwYDVQQD
EygyMGYxNTViMGE2MDVlZjE4ZDQ5OTgyMzJjMzJhOTU3NGFhNDUwZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzELw12iDUd/s0jInptkrtCybB6k4
FCJ6DnxAvLgc3O++B+69XWQvCyTNQXkEplqDzCXFPXhnDklzFl+O+2f3C431rl8a
1h8Jk1D2/dPkXbNQOMaW/7SFjkkgNrN9ERwxeGLdhs6RqX/Fsp8o/xu0pJRO30Ei
M3vrS04qxAefV5jtrzxm/LOenCcuCXTi0P8VecC1CGQgSiN1rA7VO4hnlRj2mo5c
lMcmVR0kzCKI2CZRgtmjdurowczItPEpThuwuEqvj66BY2eUN5t2xtemt3qKQQab
57tzw4zY7rRDFGzTL1mIXuqpMWbtPB1LfGkZvQR1n6VF48zhQvuHPaZVuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDxVbCmBe8Y1JmCMsMqlXSqRQ1GMB8GA1UdIwQY
MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt
Y2NmNjQ1NGJiMjRjLzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj
LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASduFdKmI
6gnChp+G0VJQwGr6OqiM2s114BRWcr3T5lRYFtgaUmksnSffQBcpGye4ob5chmEk
qTHMBBj7fTzRTFsRuBGuTNnA83yEhv0XIKman05V250BL96dJ/my+5JmmyAm3yhP
9tTifEjy/CsYN3RMMGtrHbSrLmgCbCaa6ofiFTApH/VPhALeuLXC9/AyNr8NoCwm
2pVJdDiUkUlN+MUJrifKXL6f5JKOKLmT39D8gXtgrObCD5aTXIP1l54yG5jBwzUP
lrjk0rTYHjf//JtMueB9wEnEdXO1wl3bBCwmCXx8dA0vgydtfDNi1X2qw0weUV2E
DNEY459e21wVKQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:29 2026 by rpki-client