Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: +YDvY7gTYfxHZFYddKI/Tjqp9o4eZaMYh//e9OTMRPw=
Subject key identifier: A3:E4:BE:5C:8A:24:C6:30:7E:36:87:19:0B:7B:F3:7C:95:FC:FC:2C
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019CABD9084643D1B268F29364BDBB80E3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1408
Signing time: Mon 02 Mar 2026 00:00:53 +0000
Manifest this update: Mon 02 Mar 2026 00:00:53 +0000
Manifest next update: Tue 03 Mar 2026 00:00:53 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: hjvDj4TEC6157Xy91qFH65RQsNwrj+jhUt338zzL+h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:08:46:43:d1:b2:68:f2:93:64:bd:bb:80:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Mar 2 00:00:53 2026 GMT
Not After : Mar 3 00:00:53 2026 GMT
Subject: CN=a3e4be5c8a24c6307e3687190b7bf37c95fcfc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:2a:21:fb:75:d1:a4:2d:e9:aa:22:98:bf:
24:64:32:26:a8:2f:7c:fa:b3:68:ca:f6:0f:b0:7d:
b7:c7:51:a2:78:7b:80:c8:63:f7:73:59:6b:86:3a:
e5:ba:48:9c:6a:22:87:da:8b:d4:cb:bf:43:36:72:
0f:7b:80:8d:55:d3:5b:ef:ab:18:ff:da:f9:67:59:
f7:29:62:09:87:bc:ea:8c:f0:e6:0c:2e:a2:0e:ed:
0d:20:65:19:ec:b7:9a:19:77:8b:e2:94:b1:6c:4e:
a3:41:9e:b2:eb:bb:dd:24:bd:5a:cb:bd:80:86:c6:
41:25:11:cd:c9:b8:5c:44:20:25:86:e2:41:00:e9:
48:78:e1:5d:74:c8:b7:26:61:65:ea:56:10:2f:a5:
90:22:94:ce:7c:12:d5:95:dd:53:15:7a:7a:cb:4c:
a3:7c:98:ab:3d:2b:5d:54:fc:fa:b3:7d:7a:c2:a5:
49:15:79:28:a2:c6:d8:f2:81:89:a6:20:2e:d1:a0:
94:4f:1f:f4:0c:e7:55:30:69:f8:f3:cf:1e:ee:7b:
60:3f:c8:8d:81:06:1c:34:72:45:d1:35:fc:bb:56:
55:1e:bd:06:5e:2c:2f:da:e7:62:4d:e3:17:a1:d1:
2c:3c:91:2b:56:31:ef:04:15:ff:df:1c:01:bd:6e:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E4:BE:5C:8A:24:C6:30:7E:36:87:19:0B:7B:F3:7C:95:FC:FC:2C
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:4a:03:97:f8:7f:f8:8d:62:16:fe:3a:b3:67:47:82:09:e0:
0c:cc:7d:2e:66:1a:b0:ed:12:55:62:5e:73:14:27:fa:a5:04:
de:dd:31:e7:43:c6:95:88:44:bf:1d:ae:2e:bc:f7:a7:77:e7:
13:87:a7:36:81:16:bb:1a:cb:c3:a1:5c:f7:87:fc:2a:b9:60:
4a:a1:26:36:01:be:7c:73:bc:7f:9a:78:58:a7:7e:73:f8:0f:
2c:93:91:b1:06:e5:7d:08:a8:c8:a9:a9:c9:9b:0b:59:15:99:
f9:3c:80:9b:77:91:e3:b5:a9:0a:f0:b4:de:96:77:9d:75:1c:
81:87:84:01:e1:3a:ef:c0:97:29:9c:67:fe:ac:61:14:49:47:
5d:41:58:36:36:80:7d:9c:69:40:cb:b9:ed:35:51:ac:0c:96:
5c:ff:b1:17:e0:c7:94:5c:03:ca:25:19:fc:fb:57:cb:c3:52:
fb:77:40:44:f9:c4:67:a4:2b:3f:78:6c:62:0c:d6:4e:ed:5a:
c8:2d:93:c3:74:5d:cc:f2:23:07:85:ab:e7:59:de:66:75:f3:
a7:e8:6f:75:3c:97:a1:e5:38:d8:aa:b0:88:cf:f1:83:fc:41:
ef:08:86:d3:5b:b0:19:1e:64:fe:a1:d6:13:00:74:0d:70:2c:
1a:d8:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:52 2026 by rpki-client