Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: BzgYLG+MvD0KspoM6wOSOfBgs538LlFrGqKBAa+PWPI=
Subject key identifier: 1A:A5:31:C6:41:4C:1C:F0:97:4C:D6:C7:24:2F:A5:75:8D:8A:16:D0
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 019CAAC71DCD7BC2A591C15F4717BB670E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 19:01:41 +0000
Manifest this update: Sun 01 Mar 2026 19:01:41 +0000
Manifest next update: Mon 02 Mar 2026 19:01:41 +0000
Files and hashes: 1: 0Uqlzj0wBudtuwo65E7ecBxR-5I.roa (hash: 3nBce/u/p8RQlISZvZNTZJ4v/xHNCVwY/ApDTxv5Cr0=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: gKNzKIpudGctgZdE4FDf2PcYVWGU2TuBCVAtDsLeoyo=)
3: pDNCrYaJz93_0ruXQrWKPUYVC7w.roa (hash: dZXhJB4noMnp9QFyGzeSZGgePn7dhbkhRF5jupjuOF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:1d:cd:7b:c2:a5:91:c1:5f:47:17:bb:67:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Mar 1 19:01:41 2026 GMT
Not After : Mar 2 19:01:41 2026 GMT
Subject: CN=1aa531c6414c1cf0974cd6c7242fa5758d8a16d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:01:94:6f:66:4c:37:9b:d1:a9:d0:3b:a8:
64:65:f4:4e:92:03:52:8b:7d:7d:f8:05:e1:5c:a5:
6a:0e:da:ac:f4:7a:ee:1c:ad:f8:a5:e0:ba:02:9a:
52:ae:96:62:b9:70:1a:41:c4:ec:b9:52:bf:68:cf:
50:78:d4:6c:13:03:d0:aa:96:10:1b:bf:4e:da:a0:
3a:4a:d9:05:7b:f8:0a:4f:15:5d:83:1b:07:6e:bb:
98:2a:9c:ab:36:9d:26:be:bc:5b:2b:70:aa:f7:26:
65:c3:69:f8:75:25:c8:b0:46:f0:76:29:c0:55:dd:
df:fc:9b:a4:ba:fe:ff:98:72:dd:5c:22:72:c9:fb:
bb:7e:ce:11:8e:b0:e5:ba:d1:36:1f:0c:ee:d4:c3:
70:fb:da:c7:6f:55:0e:6a:a0:0f:58:41:cd:56:f2:
4a:03:c0:ad:10:1a:e7:63:4a:e1:7d:d3:cf:75:f0:
6f:aa:69:ed:99:7b:a2:c4:f0:11:1f:e4:73:81:33:
e8:50:e3:14:0c:5b:e2:74:dc:83:7e:0d:aa:87:d3:
66:0c:97:f4:17:11:2d:c7:d4:6e:18:8c:6b:c8:df:
ff:ed:0b:e8:73:7b:12:34:83:bf:ab:08:2c:02:e0:
3b:c3:b5:aa:2d:72:fc:36:2e:9e:87:60:ed:c0:06:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:31:C6:41:4C:1C:F0:97:4C:D6:C7:24:2F:A5:75:8D:8A:16:D0
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ed:cc:43:7e:d0:95:e3:dc:93:d6:54:9a:61:29:66:07:bd:
93:27:f5:5f:d7:0f:12:44:07:4a:28:f6:58:f2:70:4c:72:81:
66:6d:2d:63:b0:a0:96:37:58:38:d4:85:1a:01:a8:60:cd:46:
7b:89:12:3c:d7:25:54:12:74:ed:ce:05:c9:c7:3f:33:80:ce:
1f:69:b7:48:4a:77:aa:bb:e4:81:f9:1c:8c:0d:57:3e:a9:f3:
b8:6b:98:4f:39:de:9b:97:ec:45:da:c0:15:3f:a7:44:b4:42:
05:81:1e:07:68:e8:43:84:36:e4:27:57:70:46:a5:f0:6f:19:
55:e5:8c:2c:31:45:20:b1:63:91:4b:41:7e:3f:d5:88:03:28:
fc:56:34:00:e0:52:32:44:69:0e:9b:f5:ca:78:e6:28:f2:05:
79:3c:c0:52:4e:af:5f:9b:52:90:ba:21:da:4c:f4:b1:a5:d3:
5c:8d:cd:ff:17:8d:23:ed:d7:fa:61:23:69:7b:ed:40:ac:b0:
d9:ba:d5:81:78:f2:fb:d1:c7:9d:c9:07:ad:91:76:fc:3e:f1:
71:96:0b:50:63:55:c5:4d:16:1d:91:2e:63:a5:0d:05:33:a8:
8d:6d:bc:50:80:64:3e:3e:18:3e:1c:6f:0f:26:30:3d:75:06:
65:c5:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:53 2026 by rpki-client