Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: aVDXkyHfnGlXrkP7Hm2es6XGVq9ngkQzkPvPlOgu7Lk=
Subject key identifier: DD:AB:AD:4F:4A:36:9C:27:C0:4A:A9:48:B6:87:57:66:B1:A9:0C:C2
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 019CAA588AD47061CE9F6219987397485639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0EF5
Signing time: Sun 01 Mar 2026 17:00:55 +0000
Manifest this update: Sun 01 Mar 2026 17:00:55 +0000
Manifest next update: Mon 02 Mar 2026 17:00:55 +0000
Files and hashes: 1: W9xaJeA3RdjL7ZURoBAfHYKpbpA.roa (hash: uj8H5eTLBr1gPNFQuaCxy8xIYKyHOwh/HEUJd6NH5bA=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: qNC63ULpOFpXiumUqIebJaT//iion/s4xc1T5mamniM=)
3: qRvOBOttCCifdXKg-Zoy28a2Djg.roa (hash: 5kgQNG99oZ4RgWldWg89plnXeCTFfBF0bfhCfheFwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:8a:d4:70:61:ce:9f:62:19:98:73:97:48:56:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Mar 1 17:00:55 2026 GMT
Not After : Mar 2 17:00:55 2026 GMT
Subject: CN=ddabad4f4a369c27c04aa948b6875766b1a90cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:4a:b2:9d:36:65:4a:c2:a7:ef:db:dd:8a:
9b:31:71:87:0e:1d:9b:46:33:07:06:59:ff:6b:25:
b5:48:b9:cc:40:4d:37:96:fe:45:5f:ae:11:6f:e5:
7a:3b:9d:a3:5c:c5:8a:8d:88:c6:48:1f:ad:bb:62:
38:f7:e4:df:3a:1a:1e:6a:49:1e:2d:a4:5e:fe:2e:
f6:8b:a9:ec:15:84:01:a9:70:f6:7a:99:9c:c1:9b:
49:9b:38:92:71:5b:46:aa:27:a9:54:af:64:97:a2:
40:49:94:3f:9a:10:42:ba:f9:24:f9:9b:6a:81:1a:
f1:42:b3:db:66:5d:53:af:b3:b5:42:f5:9d:f7:75:
ac:77:b4:3d:e6:5e:46:9c:4e:3f:68:66:9a:5c:78:
3e:5e:d5:ef:3e:2b:6d:26:4e:e1:63:8a:8c:b1:ad:
2c:e3:26:d7:d3:65:f5:9c:d4:b7:e9:b3:84:d6:94:
b7:b1:57:e3:e6:80:06:d5:b6:33:1f:07:81:36:78:
0f:6d:c9:c6:bb:c8:eb:82:ec:1f:66:32:35:84:98:
02:08:d8:24:05:c4:fa:57:90:79:8c:70:c0:ca:b1:
c2:f1:a5:cf:17:d1:de:ab:9b:44:49:79:e0:86:7c:
e4:94:76:b5:51:68:2a:bf:af:7c:dc:2d:81:4d:6e:
27:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:AD:4F:4A:36:9C:27:C0:4A:A9:48:B6:87:57:66:B1:A9:0C:C2
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:a9:88:3a:0b:53:6b:2f:2d:de:73:a4:df:be:6f:19:f2:
8b:05:a1:d9:0c:bf:ec:b4:e1:09:75:c0:6c:e6:ca:c0:5c:ea:
5b:7f:1c:c6:e2:c9:a1:e4:88:b0:86:03:a4:94:8d:63:07:2d:
bc:c8:2c:fd:87:b4:ad:96:86:8d:c3:98:a8:04:32:94:ec:ef:
ed:90:3d:59:fa:39:66:4d:41:64:82:64:e8:2f:1b:53:d5:a1:
e9:21:09:7d:ee:b8:dc:c6:5e:a9:df:f9:68:f7:2f:ab:17:7c:
6e:08:2d:1b:53:c6:0a:33:32:e4:5f:ec:a2:87:64:ba:e4:51:
1b:8f:66:b0:97:ab:53:82:d4:50:f3:74:7d:67:70:6a:9f:60:
be:de:2e:be:1e:32:ca:2e:46:6e:44:c3:66:9c:3d:32:9a:5f:
1e:94:63:8f:1d:a8:7a:58:73:51:a0:48:47:8f:9f:13:e5:8c:
50:85:f5:c6:cf:e3:cf:bb:6e:4f:bd:d9:52:5d:15:a4:f7:55:
d1:a8:aa:55:e4:fb:f5:03:3d:b5:3c:dd:c4:c4:a2:ca:22:db:
3f:d9:54:0e:3c:c9:5a:0c:0d:67:8f:ee:a0:12:d5:a6:5b:b4:
95:33:06:fe:2e:f4:a4:1b:09:92:2e:e7:12:e2:71:82:47:8f:
52:fa:c3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:13:39 2026 by rpki-client