Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json)
Hash identifier: dnOHnGUj/ntBrWVM0TDUwDZxLe4KDrkJUX4GjHN2HU8=
Subject key identifier: 07:F0:DD:85:9E:9B:A3:49:E1:00:30:0C:C2:65:40:C3:64:9D:D7:D5
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 019CABD94A86DD03A646EC0CF3F2EE0DA5A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
Manifest number: 13DA
Signing time: Mon 02 Mar 2026 00:01:10 +0000
Manifest this update: Mon 02 Mar 2026 00:01:10 +0000
Manifest next update: Tue 03 Mar 2026 00:01:10 +0000
Files and hashes: 1: EfrbbVNsRESDxPceTPw-5MN_E7s.roa (hash: 1V7YqzBGw+lW57pDGC7FJ9hb2upKEO6VdoiZzsqxDIs=)
2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: J/eAKTzX3CsHFN3fXGzRBYIJ7mXKkJeUGZFgWD64dmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:4a:86:dd:03:a6:46:ec:0c:f3:f2:ee:0d:a5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Mar 2 00:01:10 2026 GMT
Not After : Mar 3 00:01:10 2026 GMT
Subject: CN=07f0dd859e9ba349e100300cc26540c3649dd7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:44:e7:9e:de:f8:37:99:63:c9:60:11:ca:36:
aa:b1:08:a1:a7:56:34:f1:eb:d1:7f:cd:18:c5:6a:
5f:71:00:9c:1a:8c:c2:f3:cc:9f:a0:37:f2:eb:48:
b3:22:6a:97:77:3d:cf:cb:44:32:2a:1c:83:c0:9e:
ac:43:5f:92:57:2e:50:12:0f:e4:52:36:68:07:ad:
45:b0:7a:eb:90:27:42:72:5a:21:c5:d5:c1:c5:bc:
fe:4f:cc:d2:50:e0:d2:0d:fc:4d:ab:b6:4d:ea:42:
be:dc:69:e9:40:41:08:bc:c7:6e:b6:6c:52:8f:27:
5c:4d:a1:2b:45:eb:07:43:ea:40:7f:f9:5a:51:1d:
1f:47:6e:49:b9:a4:9f:6e:ba:53:0e:c1:ce:8a:8c:
4c:d8:52:6f:79:35:b3:db:4e:aa:2d:7e:72:e8:19:
81:84:c9:80:81:3e:84:a2:a5:62:64:31:ef:1b:36:
e2:10:b1:95:fe:c7:2a:81:cb:84:4a:67:17:07:bc:
12:96:1c:5e:79:b1:13:43:97:74:53:72:20:5c:93:
52:9c:42:40:b2:72:40:d7:38:6f:c9:da:10:b7:0f:
d1:a3:00:bd:60:99:45:2e:4b:0c:c6:21:62:48:ee:
49:2d:4e:4c:5a:21:1d:92:9b:8b:af:9a:19:6a:58:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F0:DD:85:9E:9B:A3:49:E1:00:30:0C:C2:65:40:C3:64:9D:D7:D5
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ac:d9:7c:fe:47:25:fd:01:0b:fb:7c:d6:07:c9:24:14:b0:
9b:c2:07:70:4f:9d:c9:82:41:dd:30:5a:ca:0e:45:6b:35:d1:
3e:b8:b6:f1:22:75:d0:4e:03:dc:3f:8a:16:d1:fb:df:a0:f8:
b2:f6:92:5d:e0:19:7f:40:46:df:ef:b4:06:f8:ee:5b:73:be:
d5:69:e6:5b:cd:c1:31:68:ac:dc:4e:0b:4d:9e:84:11:1c:ab:
82:e3:b6:32:31:35:8f:f0:1f:21:cd:60:56:35:ff:84:fe:f4:
2e:09:0f:f9:eb:cc:c8:dc:86:84:fe:a9:0c:96:ab:4d:6c:cd:
f6:92:a0:75:22:1c:7d:d7:0b:8c:87:cd:42:9e:a6:48:da:34:
47:25:b6:b1:18:2e:26:13:17:70:65:8a:e5:e4:79:7a:dd:60:
47:68:e6:a2:82:3a:52:a4:3b:88:9a:9f:4e:5c:5e:74:0e:12:
71:5f:39:9e:ed:8d:ee:59:3d:29:9a:ea:34:3d:49:a7:99:ba:
c0:54:0f:c0:69:9b:4f:01:b0:2a:5d:d7:70:4f:f7:ff:20:1b:
3f:e5:4e:fe:34:a0:79:0d:64:5d:fd:62:b6:8d:55:5e:90:af:
48:5f:b0:05:c5:53:6a:75:b4:8f:9c:2c:a7:9d:2b:64:5f:63:
a4:20:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:24 2026 by rpki-client