Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: d5paPAvai9p2yHjn0bN0Jp+CCQwt/dxbutQUi8v7zl4=
Subject key identifier: 6C:36:2E:74:B3:DE:DA:86:7A:2B:48:2B:E8:11:0A:9E:9B:51:02:38
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 019CAF48AD144E731906C6172DAACF169C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 1591
Signing time: Mon 02 Mar 2026 16:01:41 +0000
Manifest this update: Mon 02 Mar 2026 16:01:41 +0000
Manifest next update: Tue 03 Mar 2026 16:01:41 +0000
Files and hashes: 1: P8plIkyK6-WuYhWZxeWDqVB7a_c.roa (hash: gqqEmeyJKHVYzAhKUFpmuQoKv1vSqMH75dr97tljCyo=)
2: ZGIkPXUeJDgW1DW3v1-En-zjmVU.roa (hash: /95XUisimBxRniA8xsATdtoTuinBvyYV4aukwLkPKtI=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: whFGrVzoImM7cgE/oF9zzmKixfu7n+kGZ+q30np2y8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:ad:14:4e:73:19:06:c6:17:2d:aa:cf:16:9c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Mar 2 16:01:41 2026 GMT
Not After : Mar 3 16:01:41 2026 GMT
Subject: CN=6c362e74b3deda867a2b482be8110a9e9b510238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:14:32:89:33:ed:8b:4f:4c:08:56:18:bb:
f2:5a:46:c9:fd:bf:f0:68:ed:57:9a:e0:84:9d:8f:
b5:c0:2c:a4:3d:e9:d4:95:51:1d:12:11:68:8e:b5:
53:f8:f8:6b:88:d9:08:d9:6c:ab:09:80:69:71:49:
5b:1a:05:c9:03:94:c6:19:d7:4d:2f:b9:16:dc:56:
e0:69:56:8c:b0:4d:80:88:ef:5c:12:b5:88:20:ad:
b1:7e:67:15:c2:8d:f7:5e:d5:a9:e6:4b:8c:48:f3:
eb:2b:f4:6a:c9:17:d7:54:f7:b9:74:8a:c3:2c:8b:
78:ac:2b:be:a8:a8:f5:82:17:98:4e:22:ab:4b:cf:
ac:49:17:94:4f:ba:85:b6:55:ef:3c:89:65:01:96:
99:21:bc:b6:e1:f3:62:00:02:0e:0f:49:d1:85:e7:
15:a5:a0:54:58:5f:58:aa:d1:43:e0:8e:79:62:0b:
b2:33:95:c0:aa:ce:0e:cf:b7:b2:91:f2:01:cf:b0:
4f:4c:af:dc:5d:c9:36:ac:dc:e2:ca:6e:c3:bb:f2:
bb:e5:0e:f6:7d:45:4e:c8:92:dc:65:22:0b:f6:1a:
cf:b5:31:a7:67:58:22:e3:ff:2b:1a:aa:f5:4d:a2:
5f:38:05:72:f2:cb:98:c8:fb:40:42:8a:63:b2:72:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:36:2E:74:B3:DE:DA:86:7A:2B:48:2B:E8:11:0A:9E:9B:51:02:38
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ef:f3:29:e6:b4:18:3c:de:df:59:75:f4:12:b3:c1:b8:f1:
10:79:b6:a6:a6:25:01:a7:f5:b0:01:dd:58:c6:28:df:6f:c3:
6c:b3:6b:a9:ec:7b:83:38:7c:44:c4:54:de:f7:50:37:83:28:
b7:ae:b5:71:c7:70:b8:0e:e6:36:dd:18:a1:19:1f:11:39:3a:
54:d2:64:c5:87:ee:f4:47:de:74:3f:2a:73:4a:a5:62:08:b0:
9d:ec:a2:f6:55:e2:5b:4f:4a:2a:5b:50:f6:38:6e:11:8c:c5:
1f:84:ec:8e:39:2e:6d:31:bb:1a:58:21:86:8f:3e:f1:a8:06:
5b:39:f9:36:dd:96:3c:ca:d8:46:01:8f:ee:63:ec:17:af:da:
e1:5f:a3:4c:4d:6f:ae:d5:b7:38:26:bf:4b:3d:d1:37:bb:8d:
99:2e:38:16:ce:6b:de:a0:85:bd:80:51:c3:e3:9b:db:ce:81:
3b:9a:4b:fd:06:dd:82:7d:73:38:16:8e:38:9a:6d:6c:8c:46:
3a:1f:59:89:ff:26:f6:9e:53:b0:5c:18:9f:f7:8a:0e:a4:45:
f6:41:b7:22:88:6b:b4:7a:9b:9c:5f:ba:c0:bd:47:c7:84:b2:
8e:12:1f:89:9e:3f:1e:1d:4e:f4:33:42:41:a0:ee:82:61:79:
40:dd:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:56 2026 by rpki-client