Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: +W/Qh+ofy7xZAjnHw2E3nae/jsz7w//qMPw4KN3NiuQ=
Subject key identifier: 22:16:3C:B4:85:BD:C4:BE:EC:00:04:1F:E5:22:7D:F3:CA:4F:4C:75
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019CAA21EE372DD96D51B90563C8417AF755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1856
Signing time: Sun 01 Mar 2026 16:01:16 +0000
Manifest this update: Sun 01 Mar 2026 16:01:16 +0000
Manifest next update: Mon 02 Mar 2026 16:01:16 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: 6gcDsJpxsKX0PxtnBH4T97xLx9M.roa (hash: hIekIZFh7o66l7NKTjbYJTeEDYrlWcQFjp4xOD1i0cs=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: CEIlDkogYjskD1Z7N6tk7CAXX0XmVzNANUCn/UmHH8k=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: vXfLmPKQvq8Xsk8o-7vsGcFAvdA.roa (hash: JskXRzeILl7MbBJ3/C+4HYyn6osGgL+SJwbO/w3txgs=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:ee:37:2d:d9:6d:51:b9:05:63:c8:41:7a:f7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Mar 1 16:01:16 2026 GMT
Not After : Mar 2 16:01:16 2026 GMT
Subject: CN=22163cb485bdc4beec00041fe5227df3ca4f4c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:7a:19:05:11:ea:c8:4c:4b:b6:07:cb:02:
99:ed:0c:75:77:26:9a:23:39:5d:2c:51:70:b3:6f:
be:09:7d:96:37:fc:64:88:28:87:9c:f0:25:98:62:
e8:7a:ff:5c:3b:c2:e1:6a:87:ef:58:5e:bc:dd:c7:
fd:d7:f2:da:81:ec:78:03:d1:0f:17:13:ea:29:9b:
dd:df:97:d5:39:03:fe:b0:e4:e0:90:29:5e:4d:7e:
8b:e8:2d:f7:05:92:7e:77:00:71:e2:48:41:df:1c:
ee:83:6a:c1:d5:3c:79:e1:da:8d:2b:d5:38:6a:01:
3b:da:54:e1:5a:0f:31:eb:b4:15:ed:66:13:20:9f:
18:ec:d5:37:da:2c:6e:1c:aa:7f:7d:15:d2:2a:7d:
bd:44:44:32:6f:b7:0b:d2:80:87:0f:5b:5b:60:49:
79:e8:58:a5:f4:f7:c7:88:11:70:a2:d5:36:c8:f4:
f9:64:b3:63:d9:9b:42:f5:d4:56:8d:bc:ca:28:43:
0e:28:06:46:65:2d:1f:72:8c:67:2e:16:48:5c:4d:
6b:06:76:91:dd:a3:9f:7f:af:74:b8:cc:79:53:43:
d6:53:a0:ad:30:e7:ed:13:c6:f7:27:0b:af:e0:21:
1b:a8:0c:d4:d8:b4:dd:65:06:37:7d:97:81:52:26:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:3C:B4:85:BD:C4:BE:EC:00:04:1F:E5:22:7D:F3:CA:4F:4C:75
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:09:76:d8:75:b1:f3:e0:20:09:fd:77:cf:09:0e:d9:29:95:
43:c9:43:e9:bb:38:3e:37:44:85:24:b7:07:e7:3a:91:c1:67:
c3:61:c5:9f:c0:80:a1:2d:7e:4c:43:b5:77:9b:2c:58:8e:5d:
69:33:a1:8d:94:07:1d:0d:ef:a5:22:2a:ab:5f:16:af:54:f0:
28:f6:2b:fe:ca:d1:47:eb:59:03:9a:89:ae:e2:ff:6f:d4:17:
74:f1:f0:01:14:27:25:85:87:59:cc:ff:03:9a:67:08:f2:cc:
f4:92:ee:bd:dd:15:cc:59:26:82:cc:ed:5a:1f:93:a3:da:40:
cb:28:15:79:37:1e:17:49:0e:89:1e:af:f2:01:e6:f3:63:80:
82:48:50:f2:4f:c0:1e:8a:bf:18:77:2b:af:c4:14:b9:c7:00:
54:11:eb:70:c5:79:82:48:ac:06:67:9e:f5:01:f8:af:de:fb:
00:e4:35:6f:6f:e0:22:44:58:6c:ab:3e:4f:fb:2c:da:7d:c1:
f5:7b:99:89:a8:1a:50:8a:77:11:e2:ba:d1:34:f4:a7:27:9d:
9c:09:5e:56:0b:23:97:c6:11:d6:2a:aa:5d:df:a3:ed:4b:e9:
ec:38:74:d2:e3:80:d2:f3:0c:98:8f:f8:2e:5b:96:67:d6:e3:
d1:69:43:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:43 2026 by rpki-client