Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: Y1gh8oRhO/zYRMV53d+npx1UujufKjm7S8oCoGFzOFw=
Subject key identifier: AA:9A:20:5D:D8:5F:59:29:E2:6C:4E:1C:15:72:A6:6A:45:0F:D7:68
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019CB0234DC79F6852183F8A486E80D63965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1859
Signing time: Mon 02 Mar 2026 20:00:29 +0000
Manifest this update: Mon 02 Mar 2026 20:00:29 +0000
Manifest next update: Tue 03 Mar 2026 20:00:29 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: XLgQ9Ri9kAvFy1HigMOB9bzg5Ktk+oROiumRdwLFnTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:23:4d:c7:9f:68:52:18:3f:8a:48:6e:80:d6:39:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Mar 2 20:00:29 2026 GMT
Not After : Mar 3 20:00:29 2026 GMT
Subject: CN=aa9a205dd85f5929e26c4e1c1572a66a450fd768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:b3:57:b3:ed:80:60:20:85:c8:0a:47:5f:
e4:d6:6a:57:ed:3a:73:c5:c4:e6:dc:90:f5:20:ad:
2a:33:71:f5:f5:56:c3:9e:c6:92:5c:fc:69:9f:a0:
12:d2:e5:de:c8:54:c0:53:6a:d9:de:4e:72:7e:83:
0d:10:20:a1:9e:ee:07:9d:06:8c:f2:36:ba:db:15:
d6:bf:94:a1:1d:f8:e8:50:7f:07:60:61:c0:41:f4:
92:1a:1a:d4:dd:19:8b:0d:41:8a:34:4d:8f:64:c1:
63:d0:15:38:39:32:67:6c:5a:05:f0:da:c4:c4:06:
ce:e2:e7:e2:5a:72:d7:5d:8e:3c:1d:d5:9b:af:4c:
31:dd:0d:4c:a1:92:d3:13:e5:ec:d5:4e:48:ec:9b:
9d:bf:84:38:7b:6b:76:75:78:e9:63:17:01:b7:6d:
f1:af:7d:86:34:1f:bb:72:36:8c:de:87:11:44:eb:
9c:92:1c:b6:10:bc:fd:3d:13:00:07:9c:d9:23:8e:
e3:00:6d:6f:f4:b5:a3:e7:78:c2:4c:9b:fc:3f:4c:
5a:1a:11:e3:81:3d:bc:6c:4b:99:06:9b:eb:0d:fe:
85:51:dd:26:55:80:da:db:30:d0:88:c1:25:30:e2:
6c:ee:16:df:06:67:92:bf:46:20:66:57:d6:25:34:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9A:20:5D:D8:5F:59:29:E2:6C:4E:1C:15:72:A6:6A:45:0F:D7:68
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:13:2d:64:ed:52:da:07:04:d2:44:4c:94:6a:07:2a:e8:
36:c9:02:9a:d9:d6:de:d1:80:b4:d8:1c:21:1d:b5:11:3f:b2:
09:8f:00:de:0b:f8:3d:7d:fd:3f:7c:ce:29:b6:12:59:e2:c7:
08:42:67:6d:db:48:41:75:e5:95:2c:60:23:a8:3c:ba:c9:77:
db:19:3f:71:db:c5:1c:8a:db:6a:4e:f4:6e:b8:c0:a7:7b:ce:
84:9b:31:6b:5b:a5:62:5b:17:60:3c:6d:03:04:0a:1f:d2:6a:
e7:e9:0c:27:20:ac:10:05:1e:30:2e:97:01:76:b8:0e:f7:9e:
3f:5a:45:4f:6c:ec:e4:4a:e5:f4:76:3c:5a:ef:ec:77:d2:e5:
e2:b9:c0:29:5e:b5:3b:49:e0:70:86:fc:c6:bd:4b:93:78:4c:
d6:ee:91:15:ab:b7:b7:09:a2:98:48:56:71:53:08:cf:91:bd:
72:f0:fa:18:73:91:c3:31:d6:47:c7:9a:d1:93:f5:03:41:a8:
06:f1:47:99:02:fa:a3:b6:33:c5:5f:df:e5:1d:30:96:a2:70:
0d:2c:73:b2:d4:55:66:51:26:8e:43:5c:72:48:93:8a:c8:4a:
36:de:cf:d1:4c:64:10:3d:a5:a0:8a:53:c4:fa:86:0b:d4:1c:
03:62:1b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:49:36 2026 by rpki-client