Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: 6zvfxZ+P7N/r1yzFXFvJGi/hzfqYl4fTZA1jYpXgTVk=
Subject key identifier: 70:1A:A8:F9:3C:8C:81:8F:C4:DF:B3:18:8C:A5:FB:8F:8D:8A:B2:A4
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 019CABD95457AB45C0424E550BF0D27BE660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 1024
Signing time: Mon 02 Mar 2026 00:01:12 +0000
Manifest this update: Mon 02 Mar 2026 00:01:12 +0000
Manifest next update: Tue 03 Mar 2026 00:01:12 +0000
Files and hashes: 1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: 2pVMd7qI2W+iVTqGaqTgW0t3Q9S8WHN83ytIcMS4tBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:54:57:ab:45:c0:42:4e:55:0b:f0:d2:7b:e6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Mar 2 00:01:12 2026 GMT
Not After : Mar 3 00:01:12 2026 GMT
Subject: CN=701aa8f93c8c818fc4dfb3188ca5fb8f8d8ab2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:4c:29:2a:8d:96:3e:87:07:48:fe:1e:e8:
5b:92:15:37:19:29:78:16:a2:fb:24:de:cd:e7:b8:
9c:30:36:ef:4f:8a:80:2e:76:ac:ee:b7:16:75:e3:
69:e2:a9:79:9b:3d:17:ed:01:34:96:ee:d4:aa:94:
95:8d:71:b2:f6:ac:b8:a2:12:b6:55:e5:4a:b8:62:
9e:1a:8e:98:2e:a2:6d:10:1e:b2:81:79:94:cb:4e:
d3:a5:dd:df:cd:c4:e1:9f:38:f1:0a:94:f1:61:1d:
18:9e:af:d2:c4:e4:ae:43:1b:4d:f3:3e:99:64:fa:
fc:ef:23:c0:5f:9c:17:11:1e:93:e1:1f:24:ab:d9:
ee:5f:cf:55:75:08:9e:58:28:95:cb:4d:f5:be:92:
26:eb:41:0b:b1:9a:ac:ae:e8:80:ef:a6:62:0e:b2:
96:17:26:b2:24:7a:b4:c9:a1:83:b8:34:cc:89:a0:
b0:2d:f1:84:0c:58:a4:ee:e2:a8:27:6f:70:38:81:
f9:3f:dd:3a:52:63:46:09:33:a4:63:2a:c7:38:02:
e7:ae:ac:af:34:b7:06:35:95:47:f8:a2:84:b3:ba:
11:0d:8c:2a:bf:41:21:88:75:b9:ab:b6:6c:14:8f:
55:85:32:46:10:bb:ea:d1:65:06:e7:f2:46:66:63:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1A:A8:F9:3C:8C:81:8F:C4:DF:B3:18:8C:A5:FB:8F:8D:8A:B2:A4
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:78:db:41:94:01:e4:19:a8:a2:f0:0b:50:47:ba:f3:8f:7b:
56:e4:29:c8:1d:59:62:24:b8:69:c9:91:4e:7f:aa:78:94:d0:
fa:0c:72:42:b3:f9:71:c1:8b:e9:c4:51:d8:6f:d3:55:28:0b:
cb:47:58:77:a9:06:b3:9e:b6:38:03:31:0f:1b:28:77:50:85:
36:3e:ea:ed:70:06:cf:2a:15:3c:d1:d5:2e:1c:fe:58:76:96:
e0:bc:ba:93:4c:8d:dc:dc:26:1a:15:a8:da:d1:f9:0e:2a:44:
b0:d0:a4:ed:ba:2e:4c:3d:e1:31:1c:7b:ea:4d:03:32:36:57:
81:7d:ea:e6:a3:75:91:08:3b:77:c9:1e:9f:4d:0d:fc:85:82:
b9:d2:49:ac:36:85:24:21:ad:14:94:5e:96:9c:52:97:30:65:
9b:10:28:5a:33:09:9a:8d:b1:be:f3:33:7c:8c:44:69:3f:dd:
fc:75:45:fd:32:90:cc:9c:28:45:cd:1a:ac:73:2b:d0:80:52:
0f:69:3a:a9:80:6d:06:8f:70:7c:3b:23:aa:57:d3:e2:a8:0c:
e1:5d:a6:aa:ce:8b:2c:a1:31:7e:80:fe:f3:72:19:4a:b5:37:
dd:40:ed:e2:ce:15:5d:d6:a7:01:27:f6:0e:9d:6a:08:14:fa:
6c:7b:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:23 2026 by rpki-client