Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: oSC2IOyBtACKLNIrXF1iw/r76hgtZnhchijXEGz7LzI=
Subject key identifier: 18:82:9F:F8:B3:92:DF:3A:25:9E:1E:E9:B5:B7:A3:D9:3E:6C:C6:7C
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 019CACB55236C7B4B6D45E0DC7B8642DEFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 170C
Signing time: Mon 02 Mar 2026 04:01:29 +0000
Manifest this update: Mon 02 Mar 2026 04:01:29 +0000
Manifest next update: Tue 03 Mar 2026 04:01:29 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: f0l2ypUMVGnbpfYupZLwozZ89DgrRGTGLZQRXofTSPw=)
2: HWfGqv8oEWKGFm4N1ldYQYMduNo.roa (hash: uTYmV2Hm5c1uRirFhMhd0UK85oM2m8rhW7jcfLm/RrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:52:36:c7:b4:b6:d4:5e:0d:c7:b8:64:2d:ef:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Mar 2 04:01:29 2026 GMT
Not After : Mar 3 04:01:29 2026 GMT
Subject: CN=18829ff8b392df3a259e1ee9b5b7a3d93e6cc67c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8e:82:a8:f0:dd:db:09:35:26:27:d6:07:dd:
b2:c6:82:40:f4:62:b5:be:67:b8:dc:1d:ba:50:f4:
5b:c1:6b:61:3e:e4:be:ee:10:ba:36:29:2a:05:d2:
1b:6d:d0:f5:ab:b8:b9:82:6b:cd:dd:93:a0:38:9e:
4e:92:a5:d0:f6:70:dc:4a:23:28:bf:ad:20:79:ca:
49:25:10:15:30:59:0f:71:ca:44:32:4a:01:dc:d7:
a2:2a:ba:c4:ba:83:c9:8f:39:f4:3e:e2:5f:80:1a:
b7:8e:1e:d9:0b:38:1c:8d:46:36:9f:71:f0:7c:69:
5b:6a:f3:9e:ad:48:fb:e4:ec:4f:9a:85:d1:7e:73:
f6:dd:56:f6:21:df:5f:b5:3d:2c:be:4a:e2:67:02:
5f:d8:b5:d2:b0:82:41:d6:c6:7c:5f:c6:68:2f:9a:
36:ba:93:e1:31:ce:1e:d9:26:7a:4f:bd:bc:0d:1f:
4f:14:04:19:85:cf:aa:4e:69:d2:a7:90:35:a0:e2:
13:56:bd:9f:c0:3a:62:a3:ec:2c:a2:b2:6a:51:86:
52:41:dc:5b:48:3a:61:f3:cb:6a:ff:88:70:dc:78:
71:5a:15:ed:c4:da:69:a9:23:4d:b9:68:71:97:a1:
2a:08:38:0c:c2:30:ff:9b:2f:f3:86:75:e7:27:0f:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:82:9F:F8:B3:92:DF:3A:25:9E:1E:E9:B5:B7:A3:D9:3E:6C:C6:7C
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:f9:73:53:da:5a:c9:1b:91:a4:46:df:75:bb:d7:d2:97:
ab:5a:5d:1f:b2:85:98:bb:58:00:87:17:68:9f:f9:d7:8a:77:
ba:eb:58:47:fc:ad:52:8f:9e:68:97:95:02:93:f9:fa:50:ef:
a9:54:65:4a:cc:3e:59:6b:f5:5b:20:99:37:d3:5f:45:ec:70:
e9:6e:fc:49:06:77:f7:30:d9:bc:04:be:17:9f:62:26:57:16:
e8:a8:34:5f:81:77:85:58:dd:c8:29:43:1e:45:b8:84:ab:93:
00:b4:72:22:40:e9:b8:56:de:bd:f8:da:46:c0:8f:c6:38:c9:
8d:c4:8e:38:04:09:96:ce:47:54:f7:31:13:54:71:b5:1d:f3:
27:56:8b:e7:18:d9:95:6d:b1:7a:b4:45:75:a3:6a:82:52:97:
16:1f:bf:cc:ba:3d:5f:3f:29:fc:88:aa:15:b6:20:ac:1e:49:
56:03:5c:42:8d:81:58:e0:5f:f8:91:2f:dc:eb:0e:e1:15:9d:
2e:cf:58:83:aa:4e:8c:28:4a:e2:52:5a:53:66:c0:bf:32:6d:
aa:98:7e:c2:df:9d:b6:72:1f:0e:df:4f:cf:79:b9:e0:fe:11:
35:e2:f4:c4:80:c7:18:3d:c2:8e:22:26:13:e2:a9:67:71:81:
7d:48:b4:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystVI2x7S21F4Nx7hkLe/yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTgwNDE0Yjk0N2YxOTMxZjIyYmM5Yzg3OGMxN2I3ZDIz
MDc4ZWIwHhcNMjYwMzAyMDQwMTI5WhcNMjYwMzAzMDQwMTI5WjAzMTEwLwYDVQQD
EygxODgyOWZmOGIzOTJkZjNhMjU5ZTFlZTliNWI3YTNkOTNlNmNjNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Y6CqPDd2wk1JifWB92yxoJA9GK1
vme43B26UPRbwWthPuS+7hC6NikqBdIbbdD1q7i5gmvN3ZOgOJ5OkqXQ9nDcSiMo
v60gecpJJRAVMFkPccpEMkoB3NeiKrrEuoPJjzn0PuJfgBq3jh7ZCzgcjUY2n3Hw
fGlbavOerUj75OxPmoXRfnP23Vb2Id9ftT0svkriZwJf2LXSsIJB1sZ8X8ZoL5o2
upPhMc4e2SZ6T728DR9PFAQZhc+qTmnSp5A1oOITVr2fwDpio+wsorJqUYZSQdxb
SDph88tq/4hw3HhxWhXtxNppqSNNuWhxl6EqCDgMwjD/my/zhnXnJw8y3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiCn/izkt86JZ4e6bW3o9k+bMZ8MB8GA1UdIwQY
MBaAFNDoBBS5R/GTHyK8nIeMF7fSMHjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEt
NTE4ZTdhMzU2NjBhLzEvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEtNTE4ZTdhMzU2NjBh
LzEvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagv5c1Pa
WskbkaRG33W719KXq1pdH7KFmLtYAIcXaJ/514p3uutYR/ytUo+eaJeVApP5+lDv
qVRlSsw+WWv1WyCZN9NfRexw6W78SQZ39zDZvAS+F59iJlcW6Kg0X4F3hVjdyClD
HkW4hKuTALRyIkDpuFbevfjaRsCPxjjJjcSOOAQJls5HVPcxE1RxtR3zJ1aL5xjZ
lW2xerRFdaNqglKXFh+/zLo9Xz8p/IiqFbYgrB5JVgNcQo2BWOBf+JEv3OsO4RWd
Ls9Yg6pOjChK4lJaU2bAvzJtqph+wt+dtnIfDt9Pz3m54P4RNeL0xIDHGD3CjiIm
E+KpZ3GBfUi0wA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:16 2026 by rpki-client