Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: GW6qleMH8LCTVXZT5o+5kaCfaX3okYsk0GeYf/gnvno=
Subject key identifier: 86:4F:CF:B5:0B:C3:2D:35:B1:E8:16:6F:68:92:79:3C:27:1E:5C:83
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019CAE34E8381369980E87AEC0058EF5BE3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1858
Signing time: Mon 02 Mar 2026 11:00:28 +0000
Manifest this update: Mon 02 Mar 2026 11:00:28 +0000
Manifest next update: Tue 03 Mar 2026 11:00:28 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: +o+nkoDHCQGOg+53kQWYd7cPI3Zpmx/rXa1ZOSa6xdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:e8:38:13:69:98:0e:87:ae:c0:05:8e:f5:be:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Mar 2 11:00:28 2026 GMT
Not After : Mar 3 11:00:28 2026 GMT
Subject: CN=864fcfb50bc32d35b1e8166f6892793c271e5c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:b7:8d:8e:62:da:1f:c9:30:59:1c:b4:0e:
2c:2c:f2:2b:ab:4a:60:1e:69:f6:f1:ab:f4:f0:c0:
48:c5:a3:a0:d7:ad:1e:8b:03:58:7e:31:ef:27:6a:
f1:26:a0:57:85:ed:35:03:db:5c:14:c8:86:4c:f5:
ed:97:00:c3:79:42:79:1e:ce:ec:ca:00:51:8c:be:
b3:86:c1:4b:61:ed:e7:f6:79:3c:ee:01:5c:66:f7:
bb:a2:3f:08:00:d5:2b:17:14:ea:b0:32:66:d9:95:
4d:d1:80:30:b3:18:aa:39:fd:81:2f:a3:6c:f3:b0:
a1:96:b7:8b:d8:c1:5f:8f:eb:91:ca:44:44:b6:f1:
6b:6c:f8:5b:c6:a0:23:e0:f0:d2:93:1d:83:db:fb:
91:5d:b9:d7:3c:ea:9f:96:bf:f1:48:e5:2c:e0:63:
66:b5:6e:11:3e:b7:07:b4:e8:bf:95:60:8d:40:83:
e3:2b:64:a5:42:ea:14:a2:d8:93:5c:01:f6:af:65:
04:6d:04:2b:c6:52:d8:c7:49:28:da:dc:04:42:f0:
34:58:02:6f:2a:2c:88:f3:87:35:5d:40:67:e8:68:
e6:7f:b2:62:c5:cf:66:d5:41:0a:f6:03:40:55:31:
f8:c0:b2:20:ef:6f:73:dc:e5:80:b0:28:e2:06:cc:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4F:CF:B5:0B:C3:2D:35:B1:E8:16:6F:68:92:79:3C:27:1E:5C:83
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:12:56:6c:eb:61:44:c8:8f:40:66:2e:f9:4a:21:45:ef:
ff:01:fa:38:22:2f:97:be:22:32:0c:78:3a:ca:71:9e:60:c7:
f5:84:e0:b0:21:8b:22:a3:b8:c0:87:0d:9b:13:ec:b4:3e:6b:
1d:0c:8f:18:d4:08:cf:21:c1:c4:0c:c6:50:e5:69:e9:6f:98:
aa:e9:31:34:31:a0:bd:5c:ab:67:6b:2c:9c:11:c1:36:33:06:
9a:c1:3c:f8:cb:42:62:56:d7:8c:3b:d5:b4:46:49:fb:77:18:
4a:e5:23:5b:bb:29:b0:cf:30:73:37:6d:06:42:f2:d0:e5:a6:
64:f6:35:3d:0f:2e:81:61:8c:8c:bc:ae:42:d4:06:ba:14:c5:
40:75:a2:d8:0a:6e:80:84:81:57:89:a9:b9:33:2e:5e:ae:8c:
6b:f6:bb:3d:36:56:4f:72:8d:b4:7d:0c:7d:83:b6:d9:f1:60:
e1:aa:2e:f7:6b:fd:e0:6d:dd:f0:c8:17:ff:b0:a6:fe:5b:0d:
96:b1:0e:05:5b:24:8f:be:9d:ff:41:90:59:71:39:49:45:09:
62:36:86:55:d5:4a:66:08:43:5d:99:93:7f:cd:3e:8d:e6:ca:
85:b1:cd:e0:3c:a1:2c:df:e1:dd:f6:9d:3f:f7:1a:9b:0a:1f:
62:fe:08:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:56:12 2026 by rpki-client