Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: EMliVNhgx00TSIRGkGNbQ3TRlqH3hjyNadhtRUjv+XY=
Subject key identifier: E8:1C:39:D8:6C:28:0B:A7:CC:C0:E7:12:D7:1D:59:54:9D:1B:66:3A
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 019CAD5A0F58DA52E79772FB51279DA565EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 090A
Signing time: Mon 02 Mar 2026 07:01:26 +0000
Manifest this update: Mon 02 Mar 2026 07:01:26 +0000
Manifest next update: Tue 03 Mar 2026 07:01:26 +0000
Files and hashes: 1: 4yP3WwU1ktq8_0e1Hi61Tn4PWPg.roa (hash: n+qnuFeSxpGyizkAO7C0ETLCpnUHGbgFWmdL3r1mtxY=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: snXJKsQJVK+iZ+bPEVAfmSIGKIljVKXLta4eeZraUG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:0f:58:da:52:e7:97:72:fb:51:27:9d:a5:65:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Mar 2 07:01:26 2026 GMT
Not After : Mar 3 07:01:26 2026 GMT
Subject: CN=e81c39d86c280ba7ccc0e712d71d59549d1b663a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:80:48:7e:8a:33:4d:06:e5:d9:a3:1c:90:e7:
cc:a1:bd:6f:0c:b8:c6:4e:32:29:73:ff:18:8a:e3:
06:7a:d7:ec:d4:5a:06:5a:cf:1f:94:62:ce:08:ae:
aa:00:23:b6:f2:e7:8b:5d:82:52:59:cd:b4:f4:1f:
38:2c:b5:1b:23:42:93:0e:be:6f:c4:a4:3d:e4:97:
a0:f1:11:06:65:b0:83:29:3d:de:4b:1d:93:0c:23:
1e:c6:aa:18:2a:8d:db:2a:0a:2a:6a:50:cd:61:10:
f6:7f:c0:36:d9:ca:47:65:6a:4a:e2:4a:86:f9:e5:
6a:7b:c1:eb:15:89:42:b8:7c:17:a9:c9:0a:b8:25:
c9:e7:5f:de:ed:e5:43:e1:c0:07:2b:98:21:93:7d:
80:68:9c:07:b4:29:83:f9:13:8e:22:f9:34:38:1a:
7c:07:0e:1b:93:3b:3b:00:15:c8:45:22:70:35:da:
88:89:a3:db:2d:ad:3c:90:0f:13:50:d2:93:09:97:
80:cc:8a:98:1e:9e:6d:cc:f3:1c:77:51:ed:6a:ee:
b2:18:35:15:7e:92:e9:7e:ef:5b:c0:aa:09:a5:4a:
a8:9e:4e:18:3e:ee:04:ad:a7:e0:90:47:93:48:99:
be:3b:5c:48:55:43:4a:bc:6a:20:02:f9:df:e5:f7:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:39:D8:6C:28:0B:A7:CC:C0:E7:12:D7:1D:59:54:9D:1B:66:3A
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e8:97:4a:c3:17:71:78:52:53:d3:3d:3f:8b:5e:6a:48:a0:
f7:22:89:c2:7a:13:f1:f5:68:1c:fb:27:f0:2b:26:a7:06:95:
d9:c0:0e:fb:f2:aa:67:94:ba:6c:17:2d:ca:e1:ea:68:49:d8:
0d:22:6f:09:34:67:47:4b:6b:34:57:b8:bc:29:58:ab:e8:ed:
a4:42:af:25:8f:d2:f7:3b:5e:cd:48:a3:22:b4:00:4d:a3:15:
6a:31:69:bb:a3:d2:8b:93:2e:7a:c6:9d:71:73:56:6d:16:e1:
e9:2f:86:70:0b:5d:ad:2b:58:6b:20:d9:8d:c2:30:96:f6:c2:
57:bb:67:96:5d:12:30:f7:b8:6c:94:ba:eb:5a:3d:4a:3e:d5:
ae:3a:0c:77:90:13:d7:62:bc:b9:96:df:e5:bf:18:b0:f7:c2:
3f:76:37:86:a5:5b:f3:a9:65:af:57:67:a5:42:dc:cb:1d:e4:
82:e5:af:13:1f:54:f1:32:d5:27:0a:96:91:96:13:6d:5e:9a:
a6:d2:8a:44:05:7e:66:b8:7d:d8:10:fa:bc:eb:0f:62:7b:d1:
aa:3d:d5:6f:ad:d6:55:96:b8:70:c2:7d:63:46:13:01:75:94:
56:ce:9a:49:85:61:c5:2c:19:21:f5:37:8f:a6:16:4d:3f:4f:
d2:6b:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:44 2026 by rpki-client