Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
File: oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json)
Hash identifier: 2nSxmdo4Ooh+uyhtEF4nlhm/53BggGrIkuCkhevaKlg=
Subject key identifier: 78:78:C7:46:8B:2C:45:8D:5C:53:32:80:4B:B1:AA:21:75:EA:23:59
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 019CADC74381CCB64DEFEB4464745583094E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 09:00:43 +0000
Manifest this update: Mon 02 Mar 2026 09:00:43 +0000
Manifest next update: Tue 03 Mar 2026 09:00:43 +0000
Files and hashes: 1: XYUJ8YEpWRVKnEs1lud3ZGRwErY.roa (hash: ODygtNmaduKQgGbNRUfrQ+Q4mGtK3q6vsVkBCLpr8rg=)
2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: mZ6O+JXSf4W8LPPdGgYPo2E2Lq8IgPDQ8eiLZ/nnR7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:43:81:cc:b6:4d:ef:eb:44:64:74:55:83:09:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Mar 2 09:00:43 2026 GMT
Not After : Mar 3 09:00:43 2026 GMT
Subject: CN=7878c7468b2c458d5c5332804bb1aa2175ea2359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:38:96:88:85:69:0f:01:17:0f:12:fe:ef:
0c:5c:cf:39:ca:c9:b9:a2:9d:c4:81:4e:67:ce:65:
ab:64:57:c2:ba:20:be:1c:06:f3:bb:6e:f1:81:41:
f7:41:49:84:b9:79:ce:a1:c2:a9:64:af:8d:72:42:
5d:92:c7:fc:88:9e:58:5b:69:88:6f:78:81:b0:f9:
a5:3f:6e:a0:5e:07:65:57:8d:97:34:3c:b8:40:4f:
10:9b:30:2d:d8:ca:57:1d:a9:68:29:20:17:56:5a:
2e:6c:7f:17:8d:cd:0d:97:2e:69:7a:fe:b3:32:93:
99:00:ac:60:c4:ef:0b:12:0d:41:80:1f:82:d3:24:
a7:3c:43:5a:b9:8e:e0:73:f6:e4:82:95:7e:95:69:
f9:07:10:56:4c:4e:c6:c3:58:a9:cd:3b:a3:d3:34:
42:96:63:61:7c:b9:e0:72:b6:f5:b5:d1:65:9d:73:
fe:c9:ab:30:fe:4b:cd:f5:09:e5:ed:67:e7:00:14:
5d:7d:24:34:b8:bb:f4:ce:a2:7c:64:d6:79:e8:5e:
52:d9:f6:30:25:c6:28:52:d0:81:53:bd:5f:75:e5:
83:fe:47:a0:1b:f6:ab:cb:ec:2a:eb:08:7e:b8:f1:
dc:45:46:6f:e4:bb:9a:07:5f:20:81:9c:7a:61:0e:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:C7:46:8B:2C:45:8D:5C:53:32:80:4B:B1:AA:21:75:EA:23:59
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5e:59:29:de:97:99:21:a4:d1:2c:02:c9:93:94:bc:86:47:
53:88:e2:b7:9b:8d:fe:bf:ac:50:e9:ea:ae:13:df:35:14:be:
34:14:d3:b5:bb:8d:57:36:5a:bb:f6:db:d2:d5:c9:e6:f0:19:
3a:ed:20:10:90:e7:b2:39:1a:52:9c:40:7c:65:7d:00:6d:ec:
9d:6a:55:25:d7:4f:41:03:1e:26:b4:14:9f:62:2b:5b:8e:10:
b6:3c:5e:bf:6c:af:8d:27:d4:07:29:0e:b4:40:1d:c4:15:36:
51:22:ff:52:94:72:f9:23:87:96:a8:0b:a2:fd:a3:d6:16:c8:
a3:7d:ba:9c:c7:8c:2a:be:5e:c0:76:e0:0b:1e:04:36:c4:d3:
71:99:5c:34:d2:33:27:e7:89:85:41:09:d2:41:07:7c:41:55:
af:da:04:29:b1:54:6d:50:10:cf:f3:f9:46:50:c9:7e:a1:80:
97:69:ef:05:ea:7b:ba:25:19:10:59:c0:ae:32:e1:e7:b1:23:
4f:6a:ff:9f:f8:f0:19:bc:9e:72:26:93:8d:82:da:7d:64:5d:
7a:45:6c:7e:5d:46:7f:8c:7d:a1:32:31:db:86:cb:f5:67:cb:
c3:a1:57:d6:3f:8f:8f:fb:8d:69:5d:db:e2:c2:74:17:99:03:
11:97:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:56:05 2026 by rpki-client