Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: RfdYE179fdGJlpfweLJpArsiTQL+QZedj4FZr1antbw=
Subject key identifier: F4:C8:FD:0D:7A:53:CD:F4:CE:93:C3:D1:08:B0:72:75:DB:C0:9C:79
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019CAC46CC7E1D982E0A40EF3C40C28D1E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0EF6
Signing time: Mon 02 Mar 2026 02:00:46 +0000
Manifest this update: Mon 02 Mar 2026 02:00:46 +0000
Manifest next update: Tue 03 Mar 2026 02:00:46 +0000
Files and hashes: 1: W9xaJeA3RdjL7ZURoBAfHYKpbpA.roa (hash: uj8H5eTLBr1gPNFQuaCxy8xIYKyHOwh/HEUJd6NH5bA=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: KA9NTU55lJLGmdWqFqhrJZkrewK34LNZ/F9/L7+fZ7k=)
3: qRvOBOttCCifdXKg-Zoy28a2Djg.roa (hash: 5kgQNG99oZ4RgWldWg89plnXeCTFfBF0bfhCfheFwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:cc:7e:1d:98:2e:0a:40:ef:3c:40:c2:8d:1e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Mar 2 02:00:46 2026 GMT
Not After : Mar 3 02:00:46 2026 GMT
Subject: CN=f4c8fd0d7a53cdf4ce93c3d108b07275dbc09c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b5:b7:21:0c:2d:e1:0a:ac:39:2e:ed:66:7e:
74:b7:71:92:fd:41:29:4d:9c:0f:a1:ef:d7:78:4b:
6d:4a:c3:c4:f2:d0:c4:af:d7:e1:14:38:b2:e9:1a:
56:87:71:c3:c1:f6:d5:f3:e1:56:1c:9e:40:11:d1:
3c:62:f7:6c:96:f1:9e:7c:81:96:bb:b5:3e:15:25:
40:b5:ba:46:b1:50:97:e2:25:6f:e3:a6:af:12:15:
0e:e8:7b:37:45:83:a8:4a:9c:2f:29:2d:da:be:01:
f6:2d:42:da:fa:56:a7:ab:d1:72:48:9a:da:50:cf:
a5:94:a5:98:e3:ca:9b:49:32:2b:97:75:9a:3f:72:
57:04:97:d7:80:e7:db:06:b4:17:e5:e2:13:dd:e1:
30:9d:02:96:16:8e:aa:34:74:50:3a:25:ba:6b:95:
fe:b5:8f:42:6c:e8:bd:76:a4:6e:10:91:19:5d:32:
d8:2f:57:da:bf:64:dd:ef:f0:7a:52:ef:61:3b:99:
ec:eb:a5:8e:f1:f3:91:11:83:3b:a4:55:54:02:f8:
fc:90:2a:ea:2e:4c:26:9f:6b:5c:9e:00:3e:78:f7:
cb:db:95:1e:ef:dc:a1:e0:a0:7e:43:4d:f2:ed:53:
8b:d9:e3:c2:64:af:3d:2a:5a:93:cf:dc:db:a5:63:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C8:FD:0D:7A:53:CD:F4:CE:93:C3:D1:08:B0:72:75:DB:C0:9C:79
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:db:aa:04:31:5f:12:63:36:ed:6c:1c:51:ea:e8:51:39:97:
9b:09:62:4c:46:de:a6:f1:23:e4:31:a9:8b:dc:cc:34:51:c6:
ba:a1:6e:53:06:9b:a6:ed:ba:6e:cb:26:15:f1:47:18:99:14:
a7:79:1a:11:b6:dc:af:d4:cc:26:82:11:6c:58:8a:eb:5c:38:
d9:73:0b:34:14:1a:e1:af:bd:7c:6c:1b:a8:58:35:44:be:b4:
c4:9d:63:4e:3b:7b:91:61:e2:1f:d0:df:14:e7:47:b9:a2:bf:
65:a7:f0:5a:73:e5:0d:53:e8:ab:9f:06:e2:4a:63:a1:74:11:
44:13:ee:56:b2:fe:51:bb:e1:45:80:9c:fd:78:b2:54:b9:91:
0e:e4:f8:26:d4:00:93:15:c7:99:5d:23:d1:27:9f:be:3a:ab:
a6:1c:6b:b4:8b:b1:d7:48:de:29:e1:90:81:d6:dc:ca:2a:80:
96:db:29:a9:46:94:60:1f:9a:fc:c3:11:d4:50:0a:8e:3f:46:
5a:0e:91:78:45:5d:7c:53:7a:7e:e9:f3:89:e8:f1:98:81:c1:
74:40:aa:d1:ae:31:d4:42:a3:48:8c:59:c7:29:e5:fc:a8:e4:
f7:e4:55:5e:58:4a:bb:8a:6c:8f:d3:ab:60:0f:1c:3c:3b:c3:
12:84:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:01:19 2026 by rpki-client