Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
File: oKzKnE_pv57fO8blyrxSg42TyxM.mft (raw, json)
Hash identifier: ileB+wMiWtQIRPHLlTwuC9OXsV5OmgR2JfxkqEIIrOQ=
Subject key identifier: AF:11:97:60:E2:56:B9:AB:7E:3D:A7:19:CC:B6:C7:8A:03:2D:F8:BF
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial: 019CAAFD27B6766C5E211D96B3A31039E8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
Manifest number: 018B
Signing time: Sun 01 Mar 2026 20:00:43 +0000
Manifest this update: Sun 01 Mar 2026 20:00:43 +0000
Manifest next update: Mon 02 Mar 2026 20:00:43 +0000
Files and hashes: 1: 55KKjKcQLAiKHyLfRXd8THHBm7E.roa (hash: Zdgu4/3X2vJw//wqqWZ/GedlI5kEMUP7EA+P2fQ6mqg=)
2: RrTe8QV_gMsJ1Tl-RiSkuV05pTQ.roa (hash: 4Oj4O0lJnbS0vIhCNkku9oof6OJDYClFor4irkWJmcw=)
3: oKzKnE_pv57fO8blyrxSg42TyxM.crl (hash: GRgTC+nS+/e8jXLdi6mF1YMUaARt2SqLsUvHV5O76Ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:27:b6:76:6c:5e:21:1d:96:b3:a3:10:39:e8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Validity
Not Before: Mar 1 20:00:43 2026 GMT
Not After : Mar 2 20:00:43 2026 GMT
Subject: CN=af119760e256b9ab7e3da719ccb6c78a032df8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:df:3e:e0:e6:72:72:5f:21:5c:5b:f0:2f:d3:
50:23:72:e3:54:33:11:b7:87:15:ec:3a:d4:a6:83:
54:d1:76:48:82:30:55:db:8d:fa:b7:4b:f8:2e:c9:
84:de:a9:ae:12:f5:39:36:34:7c:a0:98:8e:c2:54:
3c:e9:6d:29:29:c2:08:a4:40:b3:a8:4c:81:84:00:
1b:38:dc:d8:d2:0a:df:9d:d8:d7:85:e4:4b:7c:d4:
13:48:67:5a:20:8b:74:f0:3c:27:52:87:6d:93:c3:
a5:64:12:8a:59:d0:a1:e6:f0:a2:f3:60:a4:00:ec:
8e:42:44:5a:c3:54:d5:62:06:76:46:bd:97:70:b0:
9f:e8:a8:3f:1b:98:6c:91:51:8b:1a:4c:e8:43:46:
79:05:42:86:76:0d:37:ae:0f:a6:68:f9:a9:7f:94:
13:52:fa:b4:7b:32:33:e4:cf:6f:d6:1d:d7:0c:8a:
d1:41:63:e1:99:9a:85:eb:ad:45:31:8f:cc:a9:7d:
1c:e6:17:88:9f:90:df:5b:1a:1b:70:32:02:85:d6:
56:f2:84:43:84:01:eb:7f:7f:cd:7e:67:77:87:49:
e3:66:77:3c:ae:17:2d:b2:02:0c:47:37:b3:ee:ad:
9c:ee:1c:ec:a4:12:aa:3e:5c:b0:b8:e8:ba:d9:51:
93:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:97:60:E2:56:B9:AB:7E:3D:A7:19:CC:B6:C7:8A:03:2D:F8:BF
X509v3 Authority Key Identifier:
keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:90:e8:5f:67:44:58:04:78:bc:25:06:f2:d0:ef:6c:4b:55:
f6:35:32:d3:7b:e5:09:4e:c0:32:22:33:cd:b2:83:49:61:40:
78:a4:02:9d:e8:60:de:d8:f4:52:aa:fd:15:80:96:40:90:2f:
1c:37:6b:61:3e:37:0d:7d:96:eb:fb:8f:c6:ed:2d:1f:ca:df:
83:7a:67:ff:b2:f4:90:83:02:57:99:c7:3e:e2:56:48:12:ac:
1b:83:26:01:c3:3d:8d:7f:9c:f1:0e:4f:00:a4:ca:05:05:62:
94:f7:6f:9e:00:e0:8b:cb:90:15:f8:9c:47:30:83:82:40:a9:
db:fa:c5:1d:68:28:da:e2:ad:bf:4e:78:bb:39:3d:54:09:8e:
0c:d5:3a:c2:82:bc:96:00:64:c7:23:27:95:86:34:8f:a4:a2:
2e:8b:0e:5a:ab:f6:25:67:4b:71:ea:54:83:03:62:8f:d8:e3:
06:76:6f:46:29:5b:2f:24:36:ee:21:79:6b:3d:10:b4:2d:35:
df:ea:d6:d7:5a:a0:fb:f3:65:f7:db:05:70:15:4e:d3:6a:52:
05:52:12:d2:37:68:bd:76:92:37:6a:32:48:33:b9:dc:b8:69:
a2:75:44:5b:32:79:f1:4b:40:1e:e3:4f:a1:42:86:d6:64:6d:
74:d6:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:09 2026 by rpki-client