Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: bAdufiiyslyGuLl93Em++rdkqaIB/tT5+de2c2crnS8=
Subject key identifier: AD:BC:2B:50:0E:ED:AA:E9:48:CA:9C:A9:E4:8B:CF:DE:47:4E:89:8E
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 019CAB3419ADCA5808EBA5A6A6BAAD2FEB7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 21:00:44 +0000
Manifest this update: Sun 01 Mar 2026 21:00:44 +0000
Manifest next update: Mon 02 Mar 2026 21:00:44 +0000
Files and hashes: 1: MuBqNt1syXndOYY-i5CsiyzlTpI.roa (hash: ePoNVRZGhSsK8En0WwtEIpiiLLOOy80WDIwT7dGHkIU=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: l9fHs/HOGXj3p2TdTSUvnZWo+bqt0GaVNEZu9I/M8/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:19:ad:ca:58:08:eb:a5:a6:a6:ba:ad:2f:eb:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Mar 1 21:00:44 2026 GMT
Not After : Mar 2 21:00:44 2026 GMT
Subject: CN=adbc2b500eedaae948ca9ca9e48bcfde474e898e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:02:cb:14:91:7c:fa:98:de:ab:f1:91:1e:cf:
ed:03:d5:f3:b2:84:63:56:01:87:f9:0b:24:4a:2f:
68:dd:14:75:8a:d2:fc:0c:6e:d7:88:7f:30:8f:cb:
86:61:2d:93:34:17:78:e4:15:19:bd:4e:6e:bf:d2:
e3:11:2b:78:cb:95:0c:12:1f:cf:be:35:67:25:6a:
40:88:f1:db:7b:88:69:5d:ba:e5:30:63:88:84:75:
09:ba:1b:e5:4c:14:e3:c2:e3:15:22:66:69:2a:11:
7b:c6:32:9d:05:96:bd:90:7b:a9:8e:7d:aa:b5:8a:
99:d8:cd:75:eb:5b:5f:b6:95:d3:90:8b:e9:43:16:
a9:b9:64:1a:47:34:56:83:22:55:c7:91:56:20:8d:
19:54:1c:46:10:57:6e:98:07:ae:6d:6e:09:00:82:
ca:15:ae:bb:48:d1:b2:1f:6a:69:11:5d:6a:12:b6:
fc:77:7f:64:95:75:cd:63:76:73:04:17:47:f1:cb:
5a:86:a2:b8:e3:bc:43:d5:37:c5:2c:31:80:09:46:
7a:f9:14:dd:00:d8:fb:42:d3:93:f9:d9:eb:50:bd:
70:a8:09:ff:8b:e8:cc:75:1b:ba:1c:b1:17:86:44:
c2:bc:ba:65:4a:65:e8:6c:b0:76:84:98:8a:9a:dc:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:2B:50:0E:ED:AA:E9:48:CA:9C:A9:E4:8B:CF:DE:47:4E:89:8E
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0d:67:98:14:15:49:4b:5f:00:a5:5d:8b:49:cd:65:a3:0b:
54:0b:04:f0:45:c0:ce:93:16:8d:36:92:e5:76:e7:1f:77:f1:
c9:d2:af:36:ca:86:e5:a6:b5:c0:ab:8a:83:49:28:ed:0a:b8:
cb:30:b8:66:24:b7:80:06:19:3d:6a:04:7a:f9:24:93:4c:c0:
92:0f:85:2f:ec:04:c5:64:0c:49:b1:f7:3e:61:74:2d:01:8b:
4d:d9:e0:d9:9e:20:9e:fe:53:37:66:ea:58:b6:c0:a7:3d:c7:
5c:63:b7:08:e2:c2:ab:7b:5f:6f:2d:bb:12:73:a8:10:c6:c6:
04:e8:02:46:29:2a:38:5f:ce:6c:01:72:b0:f6:cc:4f:92:d2:
ef:be:53:99:f1:fc:dd:59:7a:85:53:f8:1c:85:80:66:e9:30:
8d:0c:d3:f0:f2:33:72:a2:06:97:57:7a:49:8d:76:44:3d:73:
60:b3:8d:8b:d7:c8:45:0f:9d:8f:26:73:00:d1:02:8e:c8:c3:
42:66:c5:d1:7d:e0:a9:3b:a7:55:24:ea:5c:67:7e:6f:01:29:
30:0c:28:b1:5c:f4:51:f3:5e:75:23:84:05:5b:bd:41:74:b9:
e7:57:ea:c1:9a:26:62:38:56:fa:5d:17:66:74:21:d9:fa:6f:
f4:ec:1e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNBmtylgI66WmprqtL+t7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMTc4OGMwOGFhNDM3ZDExNjVjZWNiZDY4ZmRiMTk1YTE1
ZGZhMDgwHhcNMjYwMzAxMjEwMDQ0WhcNMjYwMzAyMjEwMDQ0WjAzMTEwLwYDVQQD
EyhhZGJjMmI1MDBlZWRhYWU5NDhjYTljYTllNDhiY2ZkZTQ3NGU4OThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgLLFJF8+pjeq/GRHs/tA9XzsoRj
VgGH+QskSi9o3RR1itL8DG7XiH8wj8uGYS2TNBd45BUZvU5uv9LjESt4y5UMEh/P
vjVnJWpAiPHbe4hpXbrlMGOIhHUJuhvlTBTjwuMVImZpKhF7xjKdBZa9kHupjn2q
tYqZ2M1161tftpXTkIvpQxapuWQaRzRWgyJVx5FWII0ZVBxGEFdumAeubW4JAILK
Fa67SNGyH2ppEV1qErb8d39klXXNY3ZzBBdH8ctahqK447xD1TfFLDGACUZ6+RTd
ANj7QtOT+dnrUL1wqAn/i+jMdRu6HLEXhkTCvLplSmXobLB2hJiKmtwI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK28K1AO7arpSMqcqeSLz95HTomOMB8GA1UdIwQY
MBaAFKIXiMCKpDfRFlzsvWj9sZWhXfoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTBjN2MtZjJjYS00YWE5LTg3YzUt
NzdmNGZkNTM0MjVlLzEvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83YTBjN2MtZjJjYS00YWE5LTg3YzUtNzdmNGZkNTM0MjVl
LzEvb2hlSXdJcWtOOUVXWE95OWFQMnhsYUZkLWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJA1nmBQV
SUtfAKVdi0nNZaMLVAsE8EXAzpMWjTaS5XbnH3fxydKvNsqG5aa1wKuKg0ko7Qq4
yzC4ZiS3gAYZPWoEevkkk0zAkg+FL+wExWQMSbH3PmF0LQGLTdng2Z4gnv5TN2bq
WLbApz3HXGO3COLCq3tfby27EnOoEMbGBOgCRikqOF/ObAFysPbMT5LS775TmfH8
3Vl6hVP4HIWAZukwjQzT8PIzcqIGl1d6SY12RD1zYLONi9fIRQ+djyZzANECjsjD
QmbF0X3gqTunVSTqXGd+bwEpMAwosVz0UfNedSOEBVu9QXS551fqwZomYjhW+l0X
ZnQh2fpv9Owe1A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:00 2026 by rpki-client