Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: 9x+6v+aeKePjtMIvAo6C9nhpTDm05fTCn68ZEUEScUo=
Subject key identifier: 56:3F:57:39:9D:5E:CF:98:D0:36:59:1C:F1:36:88:91:32:54:7D:BE
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 019CA94594F313F8696C71BA545841F38CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0D7A
Signing time: Sun 01 Mar 2026 12:00:35 +0000
Manifest this update: Sun 01 Mar 2026 12:00:35 +0000
Manifest next update: Mon 02 Mar 2026 12:00:35 +0000
Files and hashes: 1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: DdbEAcOwSizUcrFp0Lgi+289EOvYgoSLn1K5yysjCF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:94:f3:13:f8:69:6c:71:ba:54:58:41:f3:8c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Mar 1 12:00:35 2026 GMT
Not After : Mar 2 12:00:35 2026 GMT
Subject: CN=563f57399d5ecf98d036591cf136889132547dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:1c:46:db:38:e5:47:4b:54:1b:b9:b2:5a:
6c:9d:bb:80:04:87:bf:0c:e1:a5:7d:e6:4e:be:a6:
ba:77:ed:b5:08:e5:59:3a:88:93:b8:9a:da:6f:d9:
37:c5:ab:c5:96:0d:83:43:15:ee:ce:c8:1a:e0:8e:
47:fb:0b:21:68:b6:12:d2:1e:b6:69:77:38:01:11:
a0:f7:82:52:bb:e9:51:91:a2:e2:4d:f1:3f:27:f0:
fb:7b:84:df:09:bd:7c:e6:b4:5f:1b:0e:44:5a:54:
f6:8e:10:0f:91:bc:e0:ce:09:37:fd:84:73:7f:b1:
8b:0f:df:6c:ac:16:ab:9e:40:7e:10:00:47:39:c8:
d2:c2:1c:47:bd:57:dc:cc:57:d8:e7:25:21:ee:05:
9c:ab:8c:e3:79:81:e8:8f:32:e6:8a:df:62:d6:b3:
e9:3c:7e:fd:a7:70:e4:ac:57:8a:36:2c:c3:95:c8:
f7:5f:18:ef:55:b5:a0:38:cb:e7:bd:3a:bf:2b:29:
de:ef:90:6e:8a:96:41:fc:83:90:93:a2:8b:20:aa:
31:8c:46:a6:01:48:dd:a9:14:8e:f8:36:c8:d6:e1:
66:49:71:97:e9:ac:07:66:e3:da:92:a7:41:95:b4:
a9:dc:38:93:ba:31:36:c4:52:f9:ee:6d:d8:c0:fc:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:57:39:9D:5E:CF:98:D0:36:59:1C:F1:36:88:91:32:54:7D:BE
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b5:d4:52:88:17:9a:9f:95:62:fc:c5:a2:70:c5:1f:6f:5e:
01:e0:02:f3:86:04:77:fa:06:9b:fc:41:c8:4b:0b:1f:c2:8d:
88:fd:c5:46:51:fb:31:20:01:07:c4:47:39:16:c4:d6:06:47:
19:14:a1:b4:74:b5:50:be:20:4e:a9:13:68:3e:1f:11:47:00:
c2:97:58:15:f7:7c:5a:7a:23:a7:a0:6d:d8:14:b0:8d:f3:85:
26:e8:95:7e:c7:58:c1:d3:d3:72:32:71:d2:30:f3:e9:db:1d:
85:7d:db:6c:fa:f3:04:a1:ce:1f:4a:84:fb:1e:1c:cc:d2:94:
62:cd:bc:ec:b5:89:f0:47:2b:93:b7:2b:48:22:b4:cd:75:97:
e5:32:40:4c:7a:88:68:22:a1:14:d2:f7:be:4c:65:7c:5a:7d:
f3:c4:f5:ad:08:c5:a0:63:26:a6:59:38:b7:1a:b5:28:84:71:
52:70:97:6e:4f:dd:fa:ac:da:fa:8b:15:1d:46:56:32:63:11:
7a:77:62:85:17:55:42:a8:8c:e2:9e:63:2d:7d:56:79:b3:a6:
10:1d:90:93:22:18:f2:eb:d7:b7:61:7f:cf:6f:3a:75:42:80:
26:fe:9f:f0:c4:f6:ba:cf:b8:ea:2a:68:bf:ba:08:ea:db:ab:
0b:2e:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:47 2026 by rpki-client