Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: q2cOmwmlFT5A2YTcXUKTh4YequbJYvUFgi1NGveVF9g=
Subject key identifier: DE:26:4E:4D:48:46:F0:85:B4:3C:22:AC:66:0A:CF:74:4F:4B:6D:7E
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 019CAD231B2E41DA97862031C1B38042ABFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0A1A
Signing time: Mon 02 Mar 2026 06:01:24 +0000
Manifest this update: Mon 02 Mar 2026 06:01:24 +0000
Manifest next update: Tue 03 Mar 2026 06:01:24 +0000
Files and hashes: 1: G_JW6F6wHuk8xHOWEfihSql-qpI.roa (hash: DioqiN9gi012cANZP03n6UlA0P8l0ilW5rpF7qQDEm8=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: Q+SLuDLwNB3jDXBRc+SAwTJfKC66ya6AJZYgntoK+Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:1b:2e:41:da:97:86:20:31:c1:b3:80:42:ab:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Mar 2 06:01:24 2026 GMT
Not After : Mar 3 06:01:24 2026 GMT
Subject: CN=de264e4d4846f085b43c22ac660acf744f4b6d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:32:66:dc:37:18:b6:4d:15:c7:06:cb:97:b9:
51:b8:4b:74:dc:9e:ad:2d:06:b1:d9:e5:c9:8a:ad:
26:ee:0d:e2:49:0c:47:05:a8:e8:50:1e:88:50:ce:
13:ac:9b:e7:94:f8:40:88:dc:60:dc:9f:48:02:2e:
6b:b0:4f:77:2a:30:03:b4:10:ab:17:a6:09:1b:35:
48:dd:17:7d:54:fc:78:2e:55:d5:58:40:a8:dd:3b:
0f:26:e0:fc:13:47:07:4c:45:cb:02:0d:84:fc:d8:
94:78:70:70:4e:fb:e8:c2:f1:90:30:ef:2a:af:6e:
10:08:83:79:2c:0d:20:ec:79:74:b6:85:00:f7:83:
af:f1:e8:92:da:46:6c:b0:2b:b9:4a:f3:38:57:b1:
3a:60:db:94:17:fe:51:62:78:c5:a5:af:0a:d0:08:
26:a9:da:57:3d:90:bb:aa:78:36:55:bc:c3:74:9a:
3f:c0:1d:b5:33:d8:1b:55:eb:af:72:cc:92:c8:be:
2d:3d:92:0e:f5:0c:29:cf:1f:47:34:ca:d2:36:2a:
d6:de:ef:7e:7e:ad:42:52:62:07:eb:e0:fe:ff:78:
ee:20:c4:7f:01:38:82:ba:19:cb:c0:d7:15:67:1d:
12:c7:6a:6c:b1:8f:5b:03:e2:da:bb:0a:1e:bd:a7:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:4E:4D:48:46:F0:85:B4:3C:22:AC:66:0A:CF:74:4F:4B:6D:7E
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:91:98:0d:ab:e0:f1:10:34:5e:7e:6b:cd:5d:5f:b6:5e:d0:
97:98:ac:8f:48:6d:fe:33:49:f0:68:13:66:06:ac:6d:eb:d8:
d0:55:e9:dd:73:24:48:ed:8e:aa:f0:29:80:6e:9b:d9:b5:aa:
76:01:67:18:03:bb:ce:38:b7:fc:c6:51:32:55:03:ac:ac:50:
fe:60:b2:5b:0b:27:8f:40:5c:f4:10:51:9d:b5:2d:e0:e0:a6:
7c:a7:ae:54:b0:87:cb:bf:d1:10:a0:a5:a0:19:90:d6:cf:02:
54:93:bd:a2:0e:26:6f:7f:36:d6:b0:7b:9d:fb:e3:f2:ff:34:
d9:d0:03:7a:45:eb:af:51:3d:ae:43:14:89:88:b2:6c:26:03:
71:ed:61:43:9f:73:de:ea:43:eb:ce:65:3c:83:99:c9:0b:de:
c4:25:d4:b7:35:4d:22:8b:23:fc:3f:c8:2e:50:61:3a:e4:58:
0c:4c:e8:8b:29:34:bf:9f:83:79:7d:50:58:57:f1:f3:8e:c6:
fe:a5:83:de:34:bd:52:b5:c9:78:24:50:ff:92:be:47:0f:c2:
c0:e2:25:a3:a1:57:b8:a2:bc:86:7d:cc:c0:8d:9d:ee:2e:ec:
36:21:5f:4d:85:c4:f1:1e:58:0a:87:02:fc:28:e7:15:23:e8:
99:07:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:02 2026 by rpki-client