Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: /ht7eUvdwWb10BB3mydJOJR5eb1JGFv0RghXQHebOZA=
Subject key identifier: 31:C6:29:52:9A:AD:5D:16:B9:1F:82:FA:01:D9:EF:C8:20:2F:DB:6C
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 019CAE35C84D13FEF03ED2727652BD11724C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 11:01:26 +0000
Manifest this update: Mon 02 Mar 2026 11:01:26 +0000
Manifest next update: Tue 03 Mar 2026 11:01:26 +0000
Files and hashes: 1: 9qy5igh9qX4Uci7bRZZV_psOu7w.roa (hash: Tnhc5d5aGwpLgFhdFa9P4ZDIL3T2P5zMzH6turPE6uU=)
2: fOlQP3-PfpjSE6EMsORwi3KiU_0.roa (hash: 9xJNvssU8LW9KKQFyieBw8RskBII5JpvnR6eOew6NAc=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: rrs3kpBLZxifplnor2XIvN9SA0sNbkQaHzvWT4QsrCY=)
4: y_vM2bxFeu3R2ZRJCgBGtdVcJNE.roa (hash: 1lKjAhubbXr/HU27nWYgH1iiL0s0e2dhdfsbjU73q04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:c8:4d:13:fe:f0:3e:d2:72:76:52:bd:11:72:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Mar 2 11:01:26 2026 GMT
Not After : Mar 3 11:01:26 2026 GMT
Subject: CN=31c629529aad5d16b91f82fa01d9efc8202fdb6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:21:1f:ef:c9:47:87:7f:75:9a:03:4a:9d:
7d:ee:81:46:28:8c:4f:a5:8e:e6:9d:41:ae:76:6d:
ce:df:b3:dc:dc:98:25:6c:6b:d4:ba:c3:33:f8:12:
e8:16:9a:f6:d8:8c:ed:1f:2a:f0:a5:44:91:c4:de:
b5:e7:d1:c1:46:09:56:c5:b5:71:eb:c9:05:b4:9b:
9c:d8:94:2d:93:d7:b3:fa:bf:b2:0a:4e:be:b2:c8:
50:d0:4d:84:e1:80:29:8d:07:bb:24:3b:c4:aa:33:
2b:fb:d5:b6:69:2c:f9:8f:e0:15:71:bd:58:44:19:
d2:ba:2f:e7:97:bb:99:ee:43:58:16:3f:f2:c4:2d:
81:d5:7a:dc:5b:7b:b1:3c:34:a1:55:c0:24:16:f7:
f2:47:28:26:65:4c:ab:d9:0a:5f:e9:61:73:ca:b5:
7e:cb:77:e8:81:94:1b:64:12:0c:1b:97:86:ad:2e:
b5:57:42:0f:5d:0d:74:cc:f8:de:8e:6f:15:4c:df:
c8:4d:5f:c4:ad:2c:73:54:17:e9:c4:0b:a3:f7:37:
ea:87:1a:b4:c2:a7:54:98:2f:ad:04:48:d5:95:1f:
04:23:fb:68:47:36:a2:12:94:11:b8:f0:72:98:bf:
0f:08:a2:c9:fa:a6:43:3d:4d:dd:97:8f:b3:ef:c3:
0f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:29:52:9A:AD:5D:16:B9:1F:82:FA:01:D9:EF:C8:20:2F:DB:6C
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:14:d4:c8:c8:f3:d2:47:0c:86:ff:49:96:62:73:cf:19:3d:
0f:53:7c:86:8e:5d:39:a6:f4:90:83:61:8e:c8:6f:19:d9:5e:
47:1e:ee:b4:39:3d:6c:8d:75:85:9a:d8:f1:25:88:85:7d:4a:
c7:36:85:e0:bd:35:e0:f5:97:2b:8d:5d:b0:11:13:1f:3f:31:
11:eb:d3:64:65:2a:a9:62:ea:79:a3:4a:16:97:90:78:c3:34:
4c:f1:0a:80:98:0c:59:96:2d:09:de:1f:c4:58:78:2d:09:23:
89:78:02:29:a0:58:34:cd:14:71:c9:06:b8:3c:21:87:dd:cd:
41:76:f8:4e:a8:d7:52:b3:5c:03:f6:10:13:70:f5:85:9d:7f:
33:5d:fe:d9:1a:5e:d2:f0:19:dd:8a:17:3f:61:98:9d:63:42:
8a:8d:7e:78:de:43:46:d3:93:67:3a:4d:36:18:66:47:31:f2:
78:26:0a:f8:67:5b:32:46:a7:9c:3a:7d:54:2d:42:74:a1:3d:
2f:99:cb:dc:08:97:cb:d8:44:26:d4:3f:d5:73:1a:35:67:e6:
60:f1:d8:9b:58:ed:cc:0f:34:bb:0d:7c:87:f3:45:99:a8:0d:
75:7a:4a:b5:96:d3:b0:71:79:7f:2f:ab:a7:12:aa:a7:7b:d4:
49:c7:5e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:28 2026 by rpki-client