Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: ZZzlab5F3EkWAXDo+IBuYBVLnFVd+KOdi8kaNpj17Qg=
Subject key identifier: 77:14:48:E8:DC:38:18:C6:92:42:51:54:BE:6D:77:A1:9E:39:38:AF
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 019CABD93A3BE86DC68A3800AD58BE8C27CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:05 +0000
Manifest this update: Mon 02 Mar 2026 00:01:05 +0000
Manifest next update: Tue 03 Mar 2026 00:01:05 +0000
Files and hashes: 1: FTsdE4w9A76bc9C2_7wNecbSPNY.roa (hash: rHj2MTYxRe64SZo8LvwXUUXTxEmUO5sPExmz8iIy3Rs=)
2: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: CRvPE4wVwfjGB4BIqiFNvch0itf8ai+40lv9uGcLeVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:3a:3b:e8:6d:c6:8a:38:00:ad:58:be:8c:27:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Mar 2 00:01:05 2026 GMT
Not After : Mar 3 00:01:05 2026 GMT
Subject: CN=771448e8dc3818c692425154be6d77a19e3938af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:7d:c8:dd:cb:55:91:88:ae:08:1b:5a:32:
fa:40:99:e9:a7:1e:b4:4a:93:d7:26:52:ff:78:c1:
4e:c6:08:f4:7a:25:28:75:5b:5e:4d:a4:ee:ac:a2:
00:22:44:5d:1b:39:e9:a2:9e:61:37:f4:f0:a0:95:
03:f2:34:bc:c1:bc:3d:af:24:52:8c:74:97:d1:5d:
8d:2b:cb:de:ee:26:f2:46:0c:e7:f5:cc:43:aa:e2:
41:c6:7f:03:17:59:eb:21:52:5e:57:46:33:f8:c6:
09:c3:53:1b:f8:2b:b1:0a:95:9a:e0:f7:87:c5:54:
4b:04:51:1a:dc:62:91:e2:7d:40:32:b9:7c:57:78:
61:1e:19:44:b6:ba:54:19:a5:c7:6f:eb:26:08:87:
c6:9f:c5:29:8e:b6:29:47:8e:24:c7:fc:77:96:1d:
cc:6d:dc:82:6a:f0:27:f1:84:28:92:bc:af:77:0b:
fb:8a:0f:97:3b:af:a4:ed:01:06:e9:b8:fa:29:f0:
71:03:21:79:b8:20:15:94:ef:e7:35:75:ca:0c:a3:
4c:ad:64:74:0f:af:43:0a:71:ee:47:5a:8e:24:bb:
ab:1e:38:b8:e4:9e:cb:64:d8:c0:d8:65:bc:d4:5c:
71:cc:ec:7b:cb:29:a3:61:d6:ce:4e:bb:69:34:55:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:14:48:E8:DC:38:18:C6:92:42:51:54:BE:6D:77:A1:9E:39:38:AF
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:45:c3:4f:aa:b7:60:0c:0f:1b:92:4f:59:01:0b:c7:86:76:
e9:9b:0a:15:4b:f2:46:bb:8d:9d:47:70:1e:ae:2d:fd:a2:e8:
75:c1:c9:2e:54:b0:c7:b0:d3:cc:7a:83:32:e1:dd:eb:4f:6b:
a4:59:4d:3b:22:1f:3f:e4:1f:5e:c3:4b:89:c1:bc:e2:4f:88:
38:74:01:19:91:1d:92:39:cb:da:17:f5:1d:c2:55:bc:c1:bc:
d7:11:c7:21:0c:d9:fe:8b:0e:88:01:51:a1:e1:36:1c:c4:c0:
69:08:30:a8:ba:67:4f:8e:3c:f7:91:bf:b6:2a:4e:b9:35:04:
02:aa:99:e6:33:52:f0:0f:3d:0e:05:8b:b1:f2:e8:b9:1a:1b:
b6:eb:0f:23:6b:41:eb:ef:54:a0:79:57:f6:aa:5c:c0:68:49:
82:81:72:bf:db:df:4c:c3:c1:18:f0:64:7f:4e:d8:34:86:bd:
44:12:80:5b:8f:f8:48:d4:3f:f3:48:ef:4f:61:ef:cb:6a:6a:
e0:79:f0:ad:6e:02:61:cd:cd:da:e1:81:de:d5:8a:18:30:8d:
71:82:43:36:e8:b1:76:40:6e:a8:40:2c:43:58:af:21:fe:70:
71:4f:ba:04:15:3c:d1:35:71:48:81:0c:63:de:e5:1b:44:8a:
7f:c2:2c:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2To76G3GijgArVi+jCfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYTMyZWUwMTI2NmUwMThkMjM2NWMzYmJhMTc3MmY0MjQx
NzlhYzIwHhcNMjYwMzAyMDAwMTA1WhcNMjYwMzAzMDAwMTA1WjAzMTEwLwYDVQQD
Eyg3NzE0NDhlOGRjMzgxOGM2OTI0MjUxNTRiZTZkNzdhMTllMzkzOGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wR9yN3LVZGIrggbWjL6QJnppx60
SpPXJlL/eMFOxgj0eiUodVteTaTurKIAIkRdGznpop5hN/TwoJUD8jS8wbw9ryRS
jHSX0V2NK8ve7ibyRgzn9cxDquJBxn8DF1nrIVJeV0Yz+MYJw1Mb+CuxCpWa4PeH
xVRLBFEa3GKR4n1AMrl8V3hhHhlEtrpUGaXHb+smCIfGn8UpjrYpR44kx/x3lh3M
bdyCavAn8YQokryvdwv7ig+XO6+k7QEG6bj6KfBxAyF5uCAVlO/nNXXKDKNMrWR0
D69DCnHuR1qOJLurHji45J7LZNjA2GW81FxxzOx7yymjYdbOTrtpNFVUaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcUSOjcOBjGkkJRVL5td6GeOTivMB8GA1UdIwQY
MBaAFDqjLuASZuAY0jZcO7oXcvQkF5rCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTIt
OTQ5ZGJlOWI1N2ZlLzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTItOTQ5ZGJlOWI1N2Zl
LzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlUXDT6q3
YAwPG5JPWQELx4Z26ZsKFUvyRruNnUdwHq4t/aLodcHJLlSwx7DTzHqDMuHd609r
pFlNOyIfP+QfXsNLicG84k+IOHQBGZEdkjnL2hf1HcJVvMG81xHHIQzZ/osOiAFR
oeE2HMTAaQgwqLpnT44895G/tipOuTUEAqqZ5jNS8A89DgWLsfLouRobtusPI2tB
6+9UoHlX9qpcwGhJgoFyv9vfTMPBGPBkf07YNIa9RBKAW4/4SNQ/80jvT2Hvy2pq
4HnwrW4CYc3N2uGB3tWKGDCNcYJDNuixdkBuqEAsQ1ivIf5wcU+6BBU80TVxSIEM
Y97lG0SKf8IseA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:21 2026 by rpki-client