Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: H5Mkh3P/foY0pF/dvQ2JnOCuG543VjMEacG+FWOtYE4=
Subject key identifier: FB:44:8E:F8:16:B3:61:B3:4F:65:F5:35:C8:20:1D:2B:B6:4A:00:24
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019CAAC6B27B62A61E908D6FFBC4BB9C77B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1861
Signing time: Sun 01 Mar 2026 19:01:14 +0000
Manifest this update: Sun 01 Mar 2026 19:01:14 +0000
Manifest next update: Mon 02 Mar 2026 19:01:14 +0000
Files and hashes: 1: MLjbVMiRwhEAuiBClDq7yIq_Cco.roa (hash: qjQLREPR53G7Hkk3HqQsejh4IBaZHidcZlNtBnhEo4U=)
2: UIKGm79Lht7FyBF2TD_d2G3aiRY.roa (hash: 7SB2+Ki5n311mjSVoVxfEgYxVlmvoTNXsRptZtFuT3g=)
3: fJDlavYr0-NMC00ttEvY72-2RT4.roa (hash: yNHRWjXk0fcz5wbO2o3VOi+H81xn7Ikg9L039EJvkuA=)
4: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: 7nlgJvGz8kRTRRJnPy1IOrr7HjeY6zGCk5LRkhdoAek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b2:7b:62:a6:1e:90:8d:6f:fb:c4:bb:9c:77:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Mar 1 19:01:14 2026 GMT
Not After : Mar 2 19:01:14 2026 GMT
Subject: CN=fb448ef816b361b34f65f535c8201d2bb64a0024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:b9:0d:40:39:be:b8:6a:ea:28:6d:f4:5f:
68:f0:74:af:e7:bb:f5:cb:20:f9:05:ba:8b:c2:43:
aa:7c:cd:76:91:09:f7:4f:b6:10:88:03:38:f1:0f:
42:ac:79:d6:4f:6a:17:31:b5:3d:40:f8:21:de:9a:
0a:1e:43:69:f1:59:45:c3:98:fb:d7:c6:9c:c4:a4:
8a:b8:6b:42:32:2e:85:cb:66:c4:d2:28:2f:c3:fc:
77:1b:ee:24:f8:0c:27:ef:3c:6a:b1:54:9f:ae:ba:
72:2d:fc:1f:b0:f0:8c:96:1d:af:df:46:0e:74:62:
7d:34:c5:ea:d5:44:30:96:9f:a2:26:bc:54:3e:c7:
e5:6f:68:c3:50:6b:29:f5:cf:82:9f:39:0e:6f:4e:
5b:4a:d3:8e:4e:02:34:de:11:a9:57:31:b0:1c:18:
7b:8a:2e:95:ed:cc:e7:52:17:c4:a7:c9:26:38:f5:
0a:c4:a2:28:e8:35:a9:3b:7a:36:0e:35:13:8e:69:
bd:df:ed:51:fd:9a:63:04:ca:62:23:44:35:77:09:
f7:1b:c1:d8:87:65:4c:bc:d4:23:c1:a4:86:c3:03:
1b:82:79:f7:0a:d4:9b:d2:54:ab:5d:f7:a9:4c:0b:
8e:9b:b9:dd:b9:d8:a4:16:42:f9:17:27:0a:00:68:
93:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:44:8E:F8:16:B3:61:B3:4F:65:F5:35:C8:20:1D:2B:B6:4A:00:24
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b8:77:76:c5:14:9a:ba:03:11:28:c0:a5:f6:5f:3e:71:be:
62:7b:55:05:d9:2b:50:74:00:10:33:50:c3:d0:53:5e:39:99:
26:ca:e3:eb:9e:49:7b:f6:de:f9:25:66:ed:18:a7:a0:16:11:
a0:08:28:81:e6:b4:2c:32:34:c3:46:c7:f5:91:4e:37:48:68:
cb:62:67:90:2a:9d:bb:d1:b8:8d:78:ca:ae:43:eb:4b:25:c8:
a9:87:a9:ca:8d:46:49:cd:e8:8f:a0:8c:c3:58:75:1b:a0:2e:
e8:e5:f9:ec:94:cb:ca:25:ae:b8:1a:96:39:fe:b0:b4:21:aa:
22:da:d4:cc:c7:4c:aa:2c:43:40:65:b7:62:5b:0b:ec:9a:97:
b4:cc:ce:b2:19:99:6c:11:fb:eb:98:3d:bb:cb:f7:d1:e6:a7:
1b:3d:f8:3a:7f:a1:59:cc:3d:d9:71:6a:65:9d:70:c3:d7:40:
8e:6a:46:44:37:5a:49:4d:5a:fd:d4:e8:43:36:a0:52:d1:93:
f3:19:a1:67:c0:07:98:4b:f2:15:69:a3:56:16:57:87:ed:03:
ae:c0:ab:25:12:46:52:ac:1d:66:57:41:80:57:e6:00:40:34:
96:ef:42:c7:4e:5d:e6:26:79:22:cb:2a:b2:12:c2:79:2f:25:
e8:a1:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:37 2026 by rpki-client