Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: w44it6RQ6HF6Yn+Am8ieiOCwzt5D6qzPaK3iY+qaWm4=
Subject key identifier: 9A:14:FD:CD:D8:2A:47:24:7B:17:B5:CA:17:2D:C1:14:FC:F2:F8:6C
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 019CAA214B4A0FD282065B20B3A9EA7BF3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 16:00:34 +0000
Manifest this update: Sun 01 Mar 2026 16:00:34 +0000
Manifest next update: Mon 02 Mar 2026 16:00:34 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: kICUGrb+bPfChOd5cQ8zNlNTG1GQGMuxWRrchtryl9s=)
2: wd-oYNXbGl3iBZHEfglW7P_Xdoo.roa (hash: y4wg+I7p29l8Do6A3p1FTIrG+j7k3dKo1xpUB8J2zSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:4b:4a:0f:d2:82:06:5b:20:b3:a9:ea:7b:f3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Mar 1 16:00:34 2026 GMT
Not After : Mar 2 16:00:34 2026 GMT
Subject: CN=9a14fdcdd82a47247b17b5ca172dc114fcf2f86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:78:f0:81:96:46:d5:b8:9f:e3:26:11:b6:3f:
ab:a3:b4:36:ea:86:e5:87:cd:aa:2d:b5:30:06:2f:
a4:8f:92:57:67:85:80:e1:54:97:53:85:c9:87:0b:
20:84:d2:61:c0:22:cc:80:ed:9f:67:21:35:2a:f9:
1c:80:80:06:d5:1a:5b:bd:c7:ec:7b:1b:aa:28:67:
6d:ab:f7:20:c3:cf:f9:ce:cc:2f:33:f7:a1:91:94:
b0:74:9e:1f:1e:3c:c7:23:04:20:c6:72:d8:b0:ad:
09:30:85:33:58:b8:87:87:f9:b7:00:30:79:db:46:
6b:20:ef:50:45:9a:69:83:72:8d:92:17:8f:47:28:
64:3f:ac:3a:f1:eb:df:56:7b:4b:43:b2:e8:90:d9:
8f:ce:3f:c4:c6:45:86:a5:52:10:62:74:35:b2:64:
77:b6:e6:80:18:c8:25:60:ff:6a:63:a9:0e:8f:9c:
9c:30:6c:a5:44:8f:91:93:18:67:88:3b:34:5d:d9:
6a:1b:16:01:70:04:f6:29:53:07:81:ca:ab:fb:9e:
7a:66:1f:34:ef:49:39:d4:42:de:2d:86:d5:85:3d:
2c:fa:a6:73:9d:46:bc:3e:4e:e4:ed:78:d9:47:2a:
d5:d3:a7:83:4e:36:31:d5:57:a9:0c:76:7d:39:5c:
8a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:FD:CD:D8:2A:47:24:7B:17:B5:CA:17:2D:C1:14:FC:F2:F8:6C
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8c:bf:56:ff:75:7e:60:d4:92:8f:77:fc:be:15:69:00:17:
cf:3e:de:f8:02:66:46:6a:44:0b:d4:fb:09:ef:f3:fd:46:07:
b7:e5:f4:08:08:41:a5:22:5b:53:e0:36:df:66:8d:39:98:c7:
19:e5:4b:4c:e2:7e:d6:99:d9:6b:8e:2d:3b:f6:8c:cf:69:9e:
30:d6:f9:72:24:d7:ea:26:d4:44:81:f5:f4:b3:fd:44:ce:fb:
67:56:e6:db:9e:d2:6f:93:58:df:72:ef:74:fe:8d:c1:f8:19:
44:ff:4d:fa:a9:c3:f6:4b:02:17:35:e7:b9:f2:a5:6c:9c:ca:
a0:93:3a:c1:8c:d3:43:36:4d:6a:05:35:d0:67:b3:57:c8:f4:
ae:73:dc:c0:c3:11:71:ed:84:b3:fe:b8:eb:ec:44:45:80:b8:
42:de:0e:47:34:bd:7f:2e:8a:cf:04:77:dd:10:01:9a:43:52:
69:57:68:1a:ae:d6:63:c0:b6:d5:69:26:7e:b2:49:32:74:c5:
d6:af:d1:b5:be:e9:a6:e0:03:f9:97:8f:9e:fc:4e:1c:0d:cc:
e8:e5:34:3b:cc:39:ab:11:b0:47:ae:95:c1:d1:e5:40:d2:29:
41:7d:b3:4f:8c:0e:68:71:e6:a1:f3:2b:b6:4e:56:b9:87:c1:
c1:86:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:00 2026 by rpki-client