Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: Fs4JCDKDbfvSion6PQv69BjVGGiMDiiQAM6ex8m46Yc=
Subject key identifier: 30:9A:C0:79:73:79:D0:32:A3:EA:2B:92:A8:74:FB:73:FF:11:6F:8C
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019CABD95B78C6643E5C4228B03D2371A68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:14 +0000
Manifest this update: Mon 02 Mar 2026 00:01:14 +0000
Manifest next update: Tue 03 Mar 2026 00:01:14 +0000
Files and hashes: 1: A64W6614jSKOipagUq4esU4_VnM.roa (hash: xLqDioXNu9/ImV10GNbnXjX0lmGB/yXNEGDqLOMVfeA=)
2: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: ivVAHnV9A2a+1PiMbcJ4O1TdC3Pe9uxxsMpH2TN8WwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5b:78:c6:64:3e:5c:42:28:b0:3d:23:71:a6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Mar 2 00:01:14 2026 GMT
Not After : Mar 3 00:01:14 2026 GMT
Subject: CN=309ac0797379d032a3ea2b92a874fb73ff116f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:58:13:e3:05:f7:fd:18:fc:e7:45:66:ac:
7e:2b:27:3e:03:90:36:cd:4f:34:4b:25:40:7d:f6:
44:be:dd:31:89:3f:00:de:dc:0b:31:ca:90:e5:d9:
56:dc:13:56:ad:b5:33:63:4e:df:e4:94:d7:2c:43:
8a:15:3c:eb:83:e4:c7:7b:68:19:72:cb:82:ac:f1:
cc:d0:d6:ee:cd:75:4b:66:b7:58:12:44:45:28:59:
3d:4e:6c:17:25:84:83:95:1d:5b:f9:9b:2b:8d:af:
21:b8:47:08:ce:29:b3:92:3b:6e:8f:db:0b:8d:7a:
90:f7:8b:3c:2c:15:4d:e3:c3:eb:47:28:54:d1:00:
58:e2:f9:84:7f:30:76:9b:25:39:c0:43:6f:7d:9f:
6b:a2:ae:ec:1f:c5:cc:ec:d1:63:9d:e8:8b:4b:3d:
a9:37:63:81:2f:e9:dc:4a:50:61:82:d7:1b:a2:a9:
36:22:9d:72:53:2b:4e:e5:e6:04:ed:de:d4:3c:fc:
2d:a1:e6:c2:fd:8d:0a:fb:ab:11:a9:bd:ae:0b:bc:
3a:b3:c1:d2:52:ea:38:c7:85:d0:04:f0:78:65:31:
3f:25:c1:dc:78:ed:dc:0b:c7:04:be:a2:de:43:e5:
c5:e1:60:db:ee:30:e8:5e:95:a1:71:c3:80:a3:0c:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9A:C0:79:73:79:D0:32:A3:EA:2B:92:A8:74:FB:73:FF:11:6F:8C
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cb:25:2e:a6:9c:86:59:9e:3b:8e:c3:6a:4e:e6:74:01:ea:
b5:45:2f:a6:95:1e:7e:0c:a7:5d:2f:9e:a0:55:ad:e3:ce:a8:
f1:bf:e4:f0:46:af:e7:33:72:9b:ef:32:28:e1:41:92:3a:82:
f1:cd:52:c4:be:cf:61:86:30:95:70:c1:35:c6:e8:a2:d4:86:
13:ee:e7:03:c2:b9:4c:97:1f:53:ea:ec:7b:b9:df:21:28:5e:
83:ca:94:5b:8a:54:13:c2:71:e6:0d:10:52:61:a1:c0:43:a4:
34:89:53:4e:41:09:5e:3b:c6:8a:9b:bc:0c:c2:ce:8e:27:bd:
bb:55:bc:6b:ee:78:b5:ad:f7:79:66:6f:00:59:13:b7:93:7c:
a5:48:ff:5c:0c:1e:5a:b7:de:e3:7f:79:bc:3c:87:d0:f0:63:
3e:ee:a9:7d:26:22:5a:43:ee:57:2f:37:dc:45:be:26:93:e6:
c7:d6:f0:4a:38:22:e9:a0:44:b4:88:32:d5:f1:bc:1f:87:82:
f9:0f:ad:ba:ab:5a:7c:05:45:7d:bf:b2:c7:d4:02:83:ac:83:
c2:f5:f5:2e:80:a7:e9:98:60:89:18:dc:be:b4:30:46:17:91:
bc:3d:30:ef:24:bd:83:4c:4a:6f:fa:2e:4e:b7:e3:91:cb:8a:
8b:98:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:05 2026 by rpki-client