Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: 5Iyctc6MLm2sPfTAgufkmO9uqwsv2bn5AZwYxOdCQBo=
Subject key identifier: 21:10:B7:1F:06:21:8F:C6:C8:78:12:BD:87:EB:33:77:00:E3:7D:DA
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 019CAAFD19BD52DD5A0E1E62E48574503603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: HbGW1bIuKJtcKHzffUf-4COhdZM.roa (hash: XbWavlk3zf17or5OmaUS0jVlWZ00ZlHjNhNZCQ7iW5c=)
2: gbJe-QJELQjG77ZNjAeXTNXNFEw.roa (hash: 1fpv/Uz2JKbxfrghTnax/Tb7Em3yN34FPhCyAtrNWL8=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: /K3OP5jr641g/BPRWRTjQMrcm4WiB3y5TQaDuyw1lzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:19:bd:52:dd:5a:0e:1e:62:e4:85:74:50:36:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=2110b71f06218fc6c87812bd87eb337700e37dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:14:de:e8:fe:34:8a:1b:eb:d4:b1:b1:b0:
de:87:da:e4:cf:02:d7:85:dc:13:95:f4:ac:94:67:
06:8d:8f:40:a6:db:b4:ca:55:39:0e:81:63:b2:ec:
f8:b1:f5:58:37:de:81:fe:ce:00:17:3c:9f:e2:81:
b6:ff:e5:90:ea:51:b0:3d:bd:4c:30:c4:fe:00:01:
9d:93:d0:e4:83:12:7e:67:10:05:9c:38:e2:86:6b:
22:b5:23:64:6f:91:cc:02:68:90:c5:05:11:c7:49:
c1:02:5b:26:e7:41:26:9f:ee:18:3e:86:ec:2f:06:
d5:7f:4a:2e:45:9b:ce:3e:5d:28:20:65:7c:96:67:
56:7e:cf:5f:dc:00:e1:f7:a9:94:03:e2:cc:2e:60:
22:4b:8c:f9:73:38:f5:9c:d0:c5:52:bf:84:af:e1:
68:ea:18:6c:f4:4f:55:54:59:16:9d:9c:31:1c:8a:
1a:69:88:c9:05:c6:5b:f2:0a:94:9e:1d:af:60:8d:
4c:ad:cc:90:cf:dc:ad:f9:ba:75:6b:c8:3d:22:e1:
f5:81:90:a5:92:63:14:89:da:11:10:9d:5d:45:c4:
2b:70:60:e5:1a:1f:e1:89:bc:92:14:78:c6:cf:92:
49:b3:97:2e:44:63:c0:1b:9e:32:67:4e:10:94:f5:
de:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:10:B7:1F:06:21:8F:C6:C8:78:12:BD:87:EB:33:77:00:E3:7D:DA
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ec:7b:7e:8f:a5:e3:da:cb:41:37:0d:5c:37:25:b0:60:81:
84:d4:35:b5:31:fb:ad:43:ea:33:33:49:18:35:0e:42:3b:9c:
cc:14:e4:e8:02:f9:38:9b:eb:4e:b5:1f:c8:56:27:36:07:ba:
60:c6:67:24:a6:6d:9d:75:7e:6f:69:3c:9a:a3:c7:71:64:aa:
95:9a:ad:91:77:29:50:f3:98:1a:60:bd:41:f3:67:ef:9e:52:
20:b7:76:ab:24:ce:d2:8b:56:fb:75:81:e8:34:89:3e:37:e8:
33:af:00:e1:45:a0:4b:2b:68:cc:05:e3:ab:c3:c7:ea:44:53:
b5:11:8e:cf:df:70:7a:8f:14:1d:ea:0e:3a:47:d7:e3:80:61:
f6:10:bb:91:2e:9b:b6:18:e5:ce:39:96:30:c1:05:a5:38:fd:
75:97:b4:c9:82:49:9d:98:08:8c:47:b0:da:fa:ea:d0:c7:b5:
34:fe:c8:66:79:01:31:95:5d:3c:09:10:d3:26:cf:53:14:b6:
8d:be:e2:a6:90:6f:42:86:c2:a7:79:5e:c0:5d:4e:a4:52:1f:
29:4b:65:79:ae:83:89:54:cb:bc:c6:df:1f:13:13:8b:4a:77:
b5:cd:d5:a1:5a:a2:3b:be:c4:7c:a8:c1:4f:57:06:17:1d:13:
2f:56:46:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Rm9Ut1aDh5i5IV0UDYDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTZkNmIwODc0NjFmZGVjNmE1YjlkNTJkMjk4MzJkOGYy
OTljODcwHhcNMjYwMzAxMjAwMDM5WhcNMjYwMzAyMjAwMDM5WjAzMTEwLwYDVQQD
EygyMTEwYjcxZjA2MjE4ZmM2Yzg3ODEyYmQ4N2ViMzM3NzAwZTM3ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOEU3uj+NIob69SxsbDeh9rkzwLX
hdwTlfSslGcGjY9Aptu0ylU5DoFjsuz4sfVYN96B/s4AFzyf4oG2/+WQ6lGwPb1M
MMT+AAGdk9DkgxJ+ZxAFnDjihmsitSNkb5HMAmiQxQURx0nBAlsm50Emn+4YPobs
LwbVf0ouRZvOPl0oIGV8lmdWfs9f3ADh96mUA+LMLmAiS4z5czj1nNDFUr+Er+Fo
6hhs9E9VVFkWnZwxHIoaaYjJBcZb8gqUnh2vYI1MrcyQz9yt+bp1a8g9IuH1gZCl
kmMUidoREJ1dRcQrcGDlGh/hibySFHjGz5JJs5cuRGPAG54yZ04QlPXezwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEQtx8GIY/GyHgSvYfrM3cA433aMB8GA1UdIwQY
MBaAFKCm1rCHRh/exqW51S0pgy2PKZyHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUt
MTE0OGZkZTdhZWY3LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yZDc2MDktMjE0Mi00YTAzLWIxMWUtMTE0OGZkZTdhZWY3
LzEvb0tiV3NJZEdIOTdHcGJuVkxTbURMWThwbkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+x7fo+l
49rLQTcNXDclsGCBhNQ1tTH7rUPqMzNJGDUOQjuczBTk6AL5OJvrTrUfyFYnNge6
YMZnJKZtnXV+b2k8mqPHcWSqlZqtkXcpUPOYGmC9QfNn755SILd2qyTO0otW+3WB
6DSJPjfoM68A4UWgSytozAXjq8PH6kRTtRGOz99weo8UHeoOOkfX44Bh9hC7kS6b
thjlzjmWMMEFpTj9dZe0yYJJnZgIjEew2vrq0Me1NP7IZnkBMZVdPAkQ0ybPUxS2
jb7ippBvQobCp3lewF1OpFIfKUtlea6DiVTLvMbfHxMTi0p3tc3VoVqiO77EfKjB
T1cGFx0TL1ZGrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:51 2026 by rpki-client