Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
File: oI4K7xzR6dMqYWrfWCRaOriKVUs.mft (raw, json)
Hash identifier: IFpytXi+U+GEfg+nk2jGMydF3kOkEX+y5GD4XtMPJsc=
Subject key identifier: 3D:77:69:DA:79:96:57:91:32:7C:A0:80:9C:C1:CF:AB:4D:17:65:4C
Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Certificate serial: 019CAC46F7C7D621449A684502BCC2A0811F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
Manifest number: 179F
Signing time: Mon 02 Mar 2026 02:00:57 +0000
Manifest this update: Mon 02 Mar 2026 02:00:57 +0000
Manifest next update: Tue 03 Mar 2026 02:00:57 +0000
Files and hashes: 1: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (hash: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM=)
2: oI4K7xzR6dMqYWrfWCRaOriKVUs.crl (hash: fn023z/xKgLoncQ2GeI9ePF1gMEXVut57tpeVtdPmL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f7:c7:d6:21:44:9a:68:45:02:bc:c2:a0:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b
Validity
Not Before: Mar 2 02:00:57 2026 GMT
Not After : Mar 3 02:00:57 2026 GMT
Subject: CN=3d7769da79965791327ca0809cc1cfab4d17654c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:43:29:7d:4c:52:6b:d1:a8:fb:b9:ed:31:
9f:ec:7a:64:93:cb:5e:35:c8:7e:6f:bc:05:90:e0:
43:09:8b:11:ac:95:36:b1:30:28:86:d2:d1:20:ba:
76:74:26:eb:15:2b:ca:2f:61:86:35:a0:0e:39:0d:
58:86:d4:22:8d:23:04:d2:3d:5a:9a:f7:f4:d8:25:
b2:94:ff:c7:37:d0:4c:c4:41:5a:6f:22:e3:0f:d0:
07:54:05:cc:44:fc:1a:a3:bc:70:97:9f:f9:f8:1b:
43:e3:ff:ad:da:39:d8:6e:8d:84:4f:16:c6:d5:6b:
11:a0:e7:78:b7:45:a8:5b:5c:74:20:df:7a:1f:ec:
4b:33:3f:b8:46:bd:5c:eb:2a:5f:cc:3b:10:4e:cd:
de:8c:a3:68:eb:6d:ac:99:4d:00:d3:44:09:1a:15:
a1:a4:1e:5e:d7:f5:63:a2:14:17:71:f6:1d:3c:9f:
4b:ef:93:d6:46:c1:1b:41:8a:ac:cb:8e:84:87:61:
5a:ca:cc:93:10:37:92:52:54:c8:4a:45:50:cb:7d:
57:1e:2a:98:07:20:7a:a3:23:1e:0f:f2:52:6f:4a:
5c:1e:f4:51:3a:44:0f:59:55:c0:ae:65:8c:f4:31:
0f:33:a7:38:6c:33:a9:e4:76:e6:ec:08:a3:17:29:
d5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:77:69:DA:79:96:57:91:32:7C:A0:80:9C:C1:CF:AB:4D:17:65:4C
X509v3 Authority Key Identifier:
keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:97:fe:59:ce:72:52:41:2d:1d:1c:2a:66:46:3e:bd:96:2a:
52:93:39:d5:81:f7:a6:c5:8a:e1:c0:4b:9b:92:25:a0:f3:32:
bc:d5:ce:0d:4c:6a:4e:75:4f:ff:8f:9d:2b:96:aa:07:55:d5:
37:81:64:b4:9a:9a:b1:9a:f0:2d:68:48:1f:b0:08:8b:71:21:
bb:cb:ed:ce:ec:c3:76:3b:8d:35:f8:c6:63:22:22:00:62:ef:
d7:8c:d9:d8:18:9d:7c:65:cb:84:2d:7b:8e:9d:b1:19:43:30:
a3:87:16:4f:42:8b:34:10:4e:ad:8c:20:33:cd:6d:4e:73:ef:
c1:c8:d6:d5:6e:c0:72:f1:0b:bc:9f:40:38:aa:4a:c2:88:df:
90:5b:9a:54:3e:d9:f6:b0:17:e8:71:8d:c3:ac:8b:55:1e:ec:
cd:81:11:f8:05:fc:f8:5c:bb:ff:9f:3e:6a:c7:f4:07:b7:05:
18:3d:0e:df:a1:69:c8:f2:8b:eb:3c:2c:b6:10:e4:ff:2f:ad:
ac:ae:cf:46:b6:3e:06:a9:cc:b7:4b:e1:43:a0:e9:17:f9:9f:
78:18:aa:d0:ea:9c:c2:4f:9b:29:ed:84:bf:fd:22:d0:6a:64:
e9:b7:22:be:54:43:4b:da:52:9c:c9:fc:ca:26:d1:65:54:ef:
c9:b9:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:08 2026 by rpki-client