Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: vDj8nsgJRw4a1m9zuexpsbFdKFYtQZ8tIEXzJUufB6w=
Subject key identifier: 87:EE:D0:BE:D6:02:45:E4:73:CE:A6:C8:A4:D7:AE:EB:44:F1:16:95
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019CAD22E3906F12A2BBB281D265D94FD9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 06E9
Signing time: Mon 02 Mar 2026 06:01:10 +0000
Manifest this update: Mon 02 Mar 2026 06:01:10 +0000
Manifest next update: Tue 03 Mar 2026 06:01:10 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: 8SVcazJnmu-hFQWM3wOb0PrKho0.roa (hash: wcEIMGn9kXQiu8d1LEAtjcXokRGRSiotTvI/O0MGe9E=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: oNSPvWQRnJmQnyAKMkyHTBKAnirRr2ycMbmhrN3lNcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e3:90:6f:12:a2:bb:b2:81:d2:65:d9:4f:d9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Mar 2 06:01:10 2026 GMT
Not After : Mar 3 06:01:10 2026 GMT
Subject: CN=87eed0bed60245e473cea6c8a4d7aeeb44f11695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:7f:16:2e:e2:0d:2d:33:b6:c0:87:d8:1e:
34:92:14:1d:8f:aa:e2:31:be:a1:14:43:75:73:f2:
4a:ea:1b:60:3f:31:52:01:22:1d:92:34:fa:91:5a:
b7:eb:b0:b0:7e:4a:59:d0:4b:e6:f3:86:32:e2:bb:
37:b1:cf:79:8b:32:00:20:b2:2c:39:df:78:34:41:
c9:16:99:c2:34:77:85:0f:e9:c0:51:9e:57:60:7f:
98:cd:ba:9f:6b:c6:20:f2:72:99:2a:94:5e:f7:60:
74:93:9a:b0:45:e2:c9:9e:c6:77:93:ee:7d:83:fa:
7e:01:29:6e:86:ec:21:8e:06:c4:fa:aa:7d:4f:40:
65:2e:bd:54:c8:e4:84:5c:6a:c7:af:92:52:76:99:
b1:01:a4:b0:84:2e:c1:21:c8:9b:c8:1d:48:d7:e8:
cc:c3:8c:a0:ee:28:fa:2f:84:01:53:0f:78:91:e3:
f5:38:17:06:9d:92:7b:6c:2c:42:d9:86:73:7d:4e:
4f:63:4c:53:67:dd:cb:58:a2:30:12:7b:f4:d4:d3:
d9:32:2a:9b:11:f7:6d:4d:35:3c:37:35:8e:5b:e0:
ce:ea:4f:4c:cd:12:51:63:2a:6c:7e:c5:46:3e:65:
90:44:2a:d2:7d:e8:7c:f3:69:ec:0e:ed:6e:3c:7d:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:D0:BE:D6:02:45:E4:73:CE:A6:C8:A4:D7:AE:EB:44:F1:16:95
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e9:f7:f7:76:28:e3:e8:bf:52:d0:c9:61:6d:d3:64:20:7e:
32:00:9d:73:9d:fb:51:93:3c:a0:02:56:6f:dd:3c:88:ea:4e:
c6:d4:7e:aa:62:ce:f4:2d:cf:30:02:42:1e:1b:13:a8:b4:ff:
ae:05:0c:c5:6a:de:79:ec:45:f5:26:9d:ef:9e:4f:1e:37:9a:
f4:cd:35:da:4e:fb:c9:9c:b4:e0:7f:b1:4e:86:bc:ee:44:6e:
92:89:e4:a6:4e:d3:d6:04:c1:2f:c2:36:0b:3f:b8:a4:d6:d8:
28:b3:8b:71:5f:2b:01:62:fd:9d:2b:ae:50:f9:f2:f9:2b:10:
f1:5e:d4:d0:13:8a:f1:87:76:66:3a:8d:30:56:63:ad:8e:a3:
33:79:86:5c:34:89:37:20:2c:3c:88:9c:e4:aa:76:97:dc:1a:
12:08:0f:86:df:50:93:2e:26:3a:d7:85:b3:05:f7:ef:98:fa:
ab:22:2a:f4:b0:f5:cb:c2:7a:45:f4:c2:21:84:f4:bb:c7:eb:
c9:19:d9:db:ac:80:33:45:80:97:ca:3c:f3:c4:62:ed:8d:9c:
f8:e0:c4:1a:a7:74:5f:c4:43:8b:fa:76:41:49:71:b0:4e:9c:
ce:ee:7e:8e:3e:98:f2:0f:4d:79:e4:51:02:ab:76:53:a9:ba:
7d:bc:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:54 2026 by rpki-client