Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json)
Hash identifier: nlt33QT2Md7gSYOE4/0qGl6orw3vZUAjiuAn56K+uYY=
Subject key identifier: CA:E0:BF:09:6A:9A:27:19:60:19:98:DA:EC:3D:24:9B:AC:75:26:8A
Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961
Certificate serial: 019CADC7EB2897A8A0FFA07E2F6CDDE66BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
Manifest number: FB
Signing time: Mon 02 Mar 2026 09:01:26 +0000
Manifest this update: Mon 02 Mar 2026 09:01:26 +0000
Manifest next update: Tue 03 Mar 2026 09:01:26 +0000
Files and hashes: 1: kFGche0sUMJjtQYWtRrXVgbIroM.roa (hash: 34UZsa7v3vzkYl287UK/ejNXOYJMH9D9QG1MuCDxpCg=)
2: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: /74VHk53PajZD84WxxNh3sc07sM35Tm78rU/9pSDRqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:eb:28:97:a8:a0:ff:a0:7e:2f:6c:dd:e6:6b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961
Validity
Not Before: Mar 2 09:01:26 2026 GMT
Not After : Mar 3 09:01:26 2026 GMT
Subject: CN=cae0bf096a9a2719601998daec3d249bac75268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:51:19:f6:74:08:99:48:35:13:07:4f:88:
56:6a:a6:ca:57:59:00:d2:85:cb:59:50:5d:bb:a2:
a2:be:a5:f6:2b:82:fb:76:b1:ef:99:48:0b:a3:e5:
7e:8e:d6:5c:8c:17:6c:e9:15:2e:8b:a7:96:64:f9:
57:49:6e:28:b2:a8:80:9d:55:59:4e:cf:af:77:5c:
e5:d4:8f:a1:f6:cf:11:e1:5e:f8:a4:bf:20:be:42:
ef:10:71:1b:76:ce:2e:53:f1:ab:83:43:b3:b9:51:
8e:cb:60:0e:8a:68:4f:27:a7:1f:b4:07:e1:85:50:
ca:92:6b:36:3a:ce:99:00:8e:4f:6e:58:14:1a:fc:
82:ad:d4:9e:57:07:9d:71:7c:a3:c7:ed:f3:51:77:
e9:2e:5e:88:04:e2:c3:ab:5f:8b:e3:3f:8c:46:fd:
13:16:e1:24:3d:1a:3e:89:54:a6:5d:7c:34:48:62:
9f:3e:a9:4f:0d:70:5f:52:d6:88:96:e6:42:9c:f1:
24:5e:7e:e7:dd:3c:8a:58:0f:d0:f5:e5:e2:29:60:
1b:0b:30:87:1e:19:6a:55:d7:12:a6:5f:09:c3:26:
fb:f7:2e:63:51:65:52:8b:d4:23:32:88:07:a7:2c:
86:74:6c:ba:07:3a:cf:52:91:8a:78:21:08:5a:00:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:BF:09:6A:9A:27:19:60:19:98:DA:EC:3D:24:9B:AC:75:26:8A
X509v3 Authority Key Identifier:
keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2a:a4:be:83:1d:c7:de:10:d3:c5:88:d2:73:07:91:1d:62:
41:1c:48:be:1e:f0:85:39:38:ac:ea:df:8a:88:95:37:b2:e4:
3a:59:4f:47:b4:f3:a1:45:f5:c1:10:90:06:11:eb:a0:88:1c:
35:6e:f2:ff:d2:f3:91:53:b6:87:d6:11:61:00:4d:b5:99:8b:
84:d4:a1:5c:29:ad:c8:9a:bb:16:2c:3a:9a:8f:6b:ea:3a:94:
bc:19:f1:8b:18:72:67:36:04:54:91:45:d3:ef:a1:d5:f3:d9:
f8:b1:b1:33:4d:0f:e3:b9:9e:84:43:10:58:0f:14:b4:de:39:
0e:db:6a:08:8c:cc:9e:db:6b:4e:39:10:bc:58:25:2e:d4:91:
0e:c8:5b:8e:a7:8b:0d:ad:26:2b:3c:19:15:99:3f:d3:6b:eb:
53:d4:b6:84:cf:81:fc:02:8a:04:12:5f:20:76:19:7d:22:44:
cd:b7:d7:d7:0a:63:6d:6a:fb:b9:b4:f3:0b:77:43:21:dd:ff:
10:ae:83:bc:e4:06:13:59:43:15:6c:5a:2b:89:37:fd:33:ac:
b0:df:85:82:9c:43:89:99:a4:a8:44:7e:d6:86:c0:15:c3:d8:
8f:47:a4:71:aa:c2:89:ce:44:99:ed:04:d8:fa:0f:72:84:5e:
1e:70:d6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:03 2026 by rpki-client