Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier: 78Qml7Lt/+Q5vt4Hh92nBG8LZBTtYomLfLWVN7C4Qb0=
Subject key identifier: 24:E3:28:F9:53:77:6C:5E:E6:53:24:D9:36:3C:B2:04:35:8A:6F:E3
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial: 019CAAC6320D5E5D4D685FDA2CD4E20EF146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 19:00:41 +0000
Manifest this update: Sun 01 Mar 2026 19:00:41 +0000
Manifest next update: Mon 02 Mar 2026 19:00:41 +0000
Files and hashes: 1: 3X66D8rd_nYfhEI9M4q9SKmLMaM.roa (hash: hH7Y3DCETnMnnmJRKV+CQ8Ci7Hnqb3mZqszadLViFz4=)
2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: XGKqZKMk7X5pwwwoDrAE0NIzfNt5POTG6uSvyr4GrmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:32:0d:5e:5d:4d:68:5f:da:2c:d4:e2:0e:f1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Validity
Not Before: Mar 1 19:00:41 2026 GMT
Not After : Mar 2 19:00:41 2026 GMT
Subject: CN=24e328f953776c5ee65324d9363cb204358a6fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:6a:83:da:b0:70:d8:6e:df:27:03:d2:dd:
f4:3f:e9:45:53:0c:83:5c:77:54:54:5a:e9:96:27:
b1:68:5e:b4:1e:9a:b9:8c:ee:78:ee:95:be:93:f6:
22:ce:e6:88:6b:34:19:41:60:dd:e2:8b:cb:ab:18:
c3:0b:51:dd:e3:b9:e1:1e:60:de:02:28:32:eb:79:
b3:e3:18:3d:97:9a:78:09:7e:89:b4:af:80:5a:e5:
90:eb:f8:7f:31:1a:9d:5a:34:fa:fb:71:14:ee:b6:
f1:5f:fe:b7:60:dd:aa:a8:bc:d2:73:bf:21:d7:f2:
a6:fe:f5:02:9c:d9:2f:a3:42:64:76:b8:c8:3c:30:
56:1e:74:ee:1e:7c:14:36:b2:58:2d:c9:d9:c3:74:
0d:33:ac:72:4b:b9:64:a2:cb:1e:f5:29:fa:76:2f:
ed:6d:44:ff:5c:2d:99:32:78:ce:c6:e6:14:52:27:
3e:b7:24:1b:cc:f4:2e:ce:d6:46:16:3b:59:01:7f:
76:7f:aa:57:b1:6d:d0:85:86:37:3f:fb:69:36:5c:
01:1f:df:f2:6f:67:c1:3c:2f:57:74:07:a8:7a:44:
5d:4c:66:ee:59:87:99:3d:1f:51:5c:78:e6:07:f1:
80:41:24:10:9e:98:5e:52:f0:ab:f3:ce:85:1d:94:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:28:F9:53:77:6C:5E:E6:53:24:D9:36:3C:B2:04:35:8A:6F:E3
X509v3 Authority Key Identifier:
keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4a:b5:53:56:d7:a0:36:4e:d1:6b:d7:2c:e5:fb:f5:d3:65:
9d:87:c9:5c:b4:a4:51:09:a1:cd:da:d4:e7:ca:3f:10:3b:96:
2b:b7:c7:ba:92:98:2e:6d:c5:ab:88:d8:41:f9:41:1f:6f:cd:
62:0c:3b:d4:3c:4d:ee:63:a2:1b:6e:97:97:43:d0:66:2c:05:
70:aa:ea:cf:69:e5:fe:69:a6:b0:96:47:14:a8:00:18:05:86:
6a:96:97:61:2e:28:89:52:0e:0c:e8:76:83:da:d1:4b:15:e5:
46:f7:fe:f1:97:c3:e0:1f:15:0c:28:ef:ad:15:1a:bb:01:04:
3b:f9:a1:1b:24:01:ca:35:f5:21:18:2b:fd:7c:08:e5:12:48:
15:ee:15:67:85:1a:f5:0c:bb:9f:7a:09:b3:c9:57:fb:38:39:
55:a3:c7:7e:d7:94:fb:dc:a2:00:7b:ea:a1:53:8a:30:53:7c:
62:40:d7:ba:92:e7:25:dd:3f:53:f7:3a:fd:25:1f:f4:f8:aa:
f8:92:ba:ae:91:09:f4:d7:4e:92:23:f5:25:da:38:88:21:4d:
d7:e5:84:4e:4f:0e:90:af:9c:40:d9:eb:78:d1:2a:2b:9b:a6:
b3:02:ef:8b:a3:6d:d9:04:3a:f5:de:b1:78:82:39:29:eb:44:
a0:1c:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:38 2026 by rpki-client