Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File: o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier: JZ17fHcdumLr1EwA83ylwzv08lLEA+cXNA6t6di7wio=
Subject key identifier: FD:96:5C:CF:AC:77:79:59:CE:CE:07:49:95:A0:13:5F:EE:71:5E:11
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial: 019CAAC6AE6BE99F5399F7414F8388B9E2D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number: 143B
Signing time: Sun 01 Mar 2026 19:01:13 +0000
Manifest this update: Sun 01 Mar 2026 19:01:13 +0000
Manifest next update: Mon 02 Mar 2026 19:01:13 +0000
Files and hashes: 1: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: jLbT/rcdV0rUvLjf/UrE8ATfEUL2OocS0pugykRd9nU=)
2: w4ITWrVOd87_9Oz-MtY7slczBow.roa (hash: /062+JMxPPoUdp7c8u+6Eta3MA3XDfRjmmRKaz0UrFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ae:6b:e9:9f:53:99:f7:41:4f:83:88:b9:e2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Validity
Not Before: Mar 1 19:01:13 2026 GMT
Not After : Mar 2 19:01:13 2026 GMT
Subject: CN=fd965ccfac777959cece074995a0135fee715e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:ed:96:cc:0e:43:e0:7d:2d:c9:a6:ee:78:
59:97:5b:33:80:b4:e5:a4:0f:0e:19:a7:61:ba:2c:
50:62:5c:5c:96:2f:91:25:73:0e:92:9f:04:84:bf:
22:57:03:bb:c5:1b:c6:11:bd:1a:24:7a:2b:72:bb:
c0:0e:5e:db:b1:29:2e:4b:9c:ac:a2:a1:e0:05:63:
07:a4:a6:ab:e8:b4:8e:87:a4:b9:47:00:ed:ae:77:
6d:b4:c9:84:2c:00:b2:9a:31:34:07:9d:1c:6f:0f:
50:c8:b6:83:3f:11:c9:03:9b:b4:73:13:b2:2b:a1:
43:07:5c:78:5c:bf:1d:40:19:00:0a:c9:cb:3a:81:
9c:ae:2e:52:8b:29:8c:88:6e:c0:45:0a:a7:64:f0:
60:62:a3:99:e6:20:0b:f7:f2:83:36:fa:5a:ac:a9:
d4:cb:fa:d0:1c:4f:ff:0a:b5:8b:da:d6:97:52:4d:
f8:23:be:6e:ae:75:1f:01:4a:07:3d:0a:d5:fa:f0:
2c:03:f4:12:8d:f3:b7:79:6e:35:02:d7:37:fd:4c:
0d:32:34:55:2a:35:b9:e2:0b:58:88:cf:3b:43:6d:
d3:c7:91:0b:a9:3f:e1:15:ca:d6:ff:5a:9a:54:89:
3e:7d:e2:fd:49:e1:22:dd:4f:ff:7b:5d:66:ef:dc:
b5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:96:5C:CF:AC:77:79:59:CE:CE:07:49:95:A0:13:5F:EE:71:5E:11
X509v3 Authority Key Identifier:
keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:82:a3:96:75:bd:45:82:6a:d3:95:c1:c8:19:f4:78:47:8f:
f5:d2:cf:6e:d0:c5:b1:3b:41:02:92:bb:2b:40:50:82:5e:53:
61:e0:f2:49:2a:62:47:0e:38:b4:23:d8:5b:65:ee:6a:33:a5:
5a:ac:29:fb:81:0f:8d:7e:dc:be:cb:94:c1:75:c7:2e:3c:ab:
a2:aa:bc:8f:89:7e:51:05:40:11:4a:30:2c:f5:14:b0:f6:4d:
f0:cf:fb:cb:4d:0d:51:38:82:b6:0f:fb:7f:28:54:2d:e9:f8:
2c:12:a1:06:ea:4f:c8:eb:98:de:a1:2c:4e:21:4e:9c:ed:d6:
a2:dd:2a:4d:29:e3:4d:2b:a9:c6:6f:3a:da:fb:3e:21:f8:d2:
98:ea:74:07:4e:38:50:b2:a4:a5:b0:9b:a5:25:03:22:5c:ed:
78:b6:76:78:a6:41:23:21:c8:bd:48:6b:82:5e:63:02:af:f8:
21:61:43:33:49:8b:ca:55:13:36:9f:4a:0a:f5:74:3a:8a:f2:
fe:e5:83:dd:c5:5c:b0:da:39:d4:7f:c9:8e:f9:b9:3b:1c:f9:
cb:e2:68:8d:6d:4c:fd:de:86:7b:6c:0f:63:a0:25:d9:1d:3e:
41:7e:ba:fb:ff:25:16:fb:fc:73:d2:aa:9a:5c:39:d2:b0:7d:
8d:c7:85:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:04:09 2026 by rpki-client