Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: d1NH3dawHxRR7W4+amAQg6MvgO8AA/IryRoZtYR05SE=
Subject key identifier: 94:1E:AF:01:0D:EE:38:F9:B4:CA:8D:DD:BB:17:1F:C6:49:BF:75:CB
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 019CADC793F88712EA210A7C5AD074AC50FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 09:01:03 +0000
Manifest this update: Mon 02 Mar 2026 09:01:03 +0000
Manifest next update: Tue 03 Mar 2026 09:01:03 +0000
Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: uTpD+NwUhA8rrPZ9V+SGTzkwnkbJfgYZqC9cu3ao210=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:93:f8:87:12:ea:21:0a:7c:5a:d0:74:ac:50:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Mar 2 09:01:03 2026 GMT
Not After : Mar 3 09:01:03 2026 GMT
Subject: CN=941eaf010dee38f9b4ca8dddbb171fc649bf75cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:44:32:b1:a9:13:99:78:ac:08:0f:40:f8:17:
b0:e5:56:4e:be:02:83:26:86:4d:e3:cc:18:9c:21:
4e:66:22:e9:f0:24:9d:da:fe:6d:63:ff:48:35:7c:
16:5d:db:97:1c:79:a1:76:22:db:15:87:bb:a9:a9:
66:49:9f:a6:99:8f:7a:c9:e4:c6:0b:b7:cf:2c:33:
df:4e:38:6a:ba:c5:f3:d6:65:72:ee:85:30:81:dd:
f3:8e:e5:d2:82:d4:8a:19:d7:21:ed:05:d0:b0:21:
f2:dc:c3:44:04:e8:df:6e:97:e2:ab:10:15:6b:76:
f9:05:a9:f3:9d:11:8b:4b:71:31:48:62:a2:85:ed:
db:b4:36:67:f6:f7:41:e2:8a:b8:84:3f:ac:ff:f9:
19:d3:89:d2:88:2a:c4:e6:c4:29:e7:e6:2d:b9:3a:
05:73:2a:35:3c:de:a8:ef:f2:6a:02:36:c8:f7:da:
b9:d6:2b:cd:11:36:58:6d:fb:d3:11:68:c0:b4:cf:
6e:cf:05:44:f1:32:a0:85:6f:3c:48:3a:db:76:39:
ea:9d:6b:4a:64:83:d3:e5:67:ed:b4:97:99:6c:60:
a1:50:61:dd:d2:42:b3:46:bc:58:44:59:f0:ca:41:
39:29:43:a2:bc:92:f2:9b:c6:3c:eb:d3:47:2c:09:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:AF:01:0D:EE:38:F9:B4:CA:8D:DD:BB:17:1F:C6:49:BF:75:CB
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:18:f9:23:96:80:78:25:cb:8d:c2:e1:08:39:a2:ad:32:07:
b8:c1:7c:c5:f1:ee:17:b8:e2:84:87:a4:7c:99:18:84:9c:43:
68:80:23:3b:d3:8a:41:ae:f1:d4:3b:68:2d:51:3d:98:53:59:
63:4d:48:66:45:74:8e:19:d3:18:d5:b8:7c:48:19:f9:a6:32:
38:b2:64:94:a1:81:69:a0:ea:95:f6:5f:ca:a7:34:b2:bc:20:
f6:3b:40:f5:60:a8:43:e5:ee:ae:3e:60:ac:cd:ea:c1:5f:4a:
a7:87:7b:3e:38:54:29:91:38:30:be:dd:f5:8c:fa:51:55:5f:
4e:3d:93:c8:74:c3:5f:70:de:0f:8a:ca:36:3b:a6:4f:60:62:
7e:13:e9:45:8f:74:dd:71:d9:f2:1f:9b:27:2d:e2:48:3b:cd:
e1:1e:0b:30:23:b1:7e:22:93:01:3a:28:3b:52:41:86:f8:fb:
41:e2:eb:5f:f1:b1:76:4c:86:54:cf:2a:62:1e:e3:d2:9c:9b:
9f:bc:4e:30:f8:59:d6:96:b3:bd:dc:d5:bf:cf:d2:7e:a3:07:
9f:c4:f7:87:55:da:b2:51:80:13:f2:cd:5d:60:45:1c:f8:78:
88:f0:91:39:33:08:e4:1a:e9:ab:52:c9:ae:72:a2:91:dd:0e:
5a:b3:8d:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx5P4hxLqIQp8WtB0rFD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYTMyZWUwMTI2NmUwMThkMjM2NWMzYmJhMTc3MmY0MjQx
NzlhYzIwHhcNMjYwMzAyMDkwMTAzWhcNMjYwMzAzMDkwMTAzWjAzMTEwLwYDVQQD
Eyg5NDFlYWYwMTBkZWUzOGY5YjRjYThkZGRiYjE3MWZjNjQ5YmY3NWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukQysakTmXisCA9A+Bew5VZOvgKD
JoZN48wYnCFOZiLp8CSd2v5tY/9INXwWXduXHHmhdiLbFYe7qalmSZ+mmY96yeTG
C7fPLDPfTjhqusXz1mVy7oUwgd3zjuXSgtSKGdch7QXQsCHy3MNEBOjfbpfiqxAV
a3b5BanznRGLS3ExSGKihe3btDZn9vdB4oq4hD+s//kZ04nSiCrE5sQp5+YtuToF
cyo1PN6o7/JqAjbI99q51ivNETZYbfvTEWjAtM9uzwVE8TKghW88SDrbdjnqnWtK
ZIPT5WfttJeZbGChUGHd0kKzRrxYRFnwykE5KUOivJLym8Y869NHLAlH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQerwEN7jj5tMqN3bsXH8ZJv3XLMB8GA1UdIwQY
MBaAFDqjLuASZuAY0jZcO7oXcvQkF5rCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTIt
OTQ5ZGJlOWI1N2ZlLzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTItOTQ5ZGJlOWI1N2Zl
LzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAxj5I5aA
eCXLjcLhCDmirTIHuMF8xfHuF7jihIekfJkYhJxDaIAjO9OKQa7x1DtoLVE9mFNZ
Y01IZkV0jhnTGNW4fEgZ+aYyOLJklKGBaaDqlfZfyqc0srwg9jtA9WCoQ+Xurj5g
rM3qwV9Kp4d7PjhUKZE4ML7d9Yz6UVVfTj2TyHTDX3DeD4rKNjumT2BifhPpRY90
3XHZ8h+bJy3iSDvN4R4LMCOxfiKTATooO1JBhvj7QeLrX/GxdkyGVM8qYh7j0pyb
n7xOMPhZ1pazvdzVv8/SfqMHn8T3h1XaslGAE/LNXWBFHPh4iPCROTMI5Brpq1LJ
rnKikd0OWrONTQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:30 2026 by rpki-client