Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File: oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier: jckpfz6Y6+ag+N03YvlnK1Xp6v5ZINvLQo3Y5biC+GI=
Subject key identifier: 94:10:A3:22:69:18:C2:ED:B7:82:99:9E:29:82:F6:17:43:BB:10:B4
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial: 019CADC8354BFF4680579309A66D9A6804EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number: 01C2
Signing time: Mon 02 Mar 2026 09:01:45 +0000
Manifest this update: Mon 02 Mar 2026 09:01:45 +0000
Manifest next update: Tue 03 Mar 2026 09:01:45 +0000
Files and hashes: 1: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
2: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: uVKmOoqN7574LNxQP5gsx+9gR76XJ/Fm5vLlqGD46DA=)
3: y9yOPOReUhOjAR9wH_1MAAdpsh8.roa (hash: Sh2Cfrg3yKSuc0oxH44NL73rniu+Z8OoDzgM+3sdMXg=)
4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:35:4b:ff:46:80:57:93:09:a6:6d:9a:68:04:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Validity
Not Before: Mar 2 09:01:45 2026 GMT
Not After : Mar 3 09:01:45 2026 GMT
Subject: CN=9410a3226918c2edb782999e2982f61743bb10b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:38:30:15:3c:d3:e3:75:b3:ed:42:4b:fd:
dd:db:9a:32:fb:fd:31:21:b4:91:7f:c5:90:14:e1:
50:35:27:53:80:07:f2:e0:86:60:86:61:e1:43:1d:
5b:8d:3b:92:c3:6a:ae:f5:37:23:ea:64:65:00:04:
b2:b6:60:ed:cd:19:c4:05:18:da:ff:86:ec:a1:5c:
ac:4f:9e:db:97:e7:a5:64:5e:5d:68:80:52:3c:8f:
ff:ca:f3:1d:01:db:d9:59:ab:f4:d0:04:3e:44:58:
15:de:59:5a:d8:fc:47:4d:93:34:cd:9b:ab:3b:57:
3a:2a:cc:b8:bd:29:f0:3b:d4:c3:57:bc:fb:54:7f:
e9:6a:f2:a3:82:f7:f8:e2:5e:3f:58:bf:52:50:2b:
4f:7a:ce:25:02:21:a1:f5:cb:46:21:ad:32:13:80:
0f:5c:35:b4:6f:07:7a:09:6a:90:95:d9:c8:34:e0:
e6:6c:07:3e:80:d8:2e:2c:b8:c6:3a:ce:c4:05:2b:
c6:f0:3e:bf:8f:22:3c:0c:2b:81:a1:37:b2:cc:a3:
27:02:9f:05:7f:7c:c3:2e:54:2d:90:7e:97:e1:ee:
12:38:38:ef:2f:a0:fe:0b:6a:f3:bb:1d:62:de:0e:
15:df:8c:cb:44:3f:40:f7:75:07:6b:8a:43:0c:f6:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:10:A3:22:69:18:C2:ED:B7:82:99:9E:29:82:F6:17:43:BB:10:B4
X509v3 Authority Key Identifier:
keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1d:d5:e8:dd:de:8b:39:12:3c:27:36:d6:56:ec:6d:cf:d8:
8e:77:6c:0c:00:e9:71:3d:7c:8b:8f:f7:64:43:fe:2b:11:9d:
9b:d4:9d:23:5e:fe:16:0a:1d:93:56:e5:05:fd:55:2b:ea:1e:
57:31:50:f3:fc:cf:66:be:6e:8f:62:6f:73:79:ad:58:79:42:
6a:a6:92:b0:73:2f:61:ee:8f:f4:ff:61:a7:24:bd:9b:d9:84:
23:89:75:bc:e4:50:a8:25:56:f6:ef:64:d2:85:4a:19:a8:65:
23:ff:10:79:a5:a5:9e:7d:73:52:f2:ee:5d:8e:da:69:94:36:
42:6d:e2:07:5e:f6:38:18:d8:bc:7c:85:a6:56:52:8b:43:b5:
3f:5b:f8:66:96:a8:7f:38:54:3a:cd:62:cb:77:b4:40:67:db:
2f:04:36:b8:a9:78:0c:dc:85:80:de:97:13:81:ea:ee:31:f8:
6a:c4:98:65:8b:12:d0:b2:13:c7:c2:10:e4:9f:9c:a6:92:c8:
48:45:69:f3:ac:2b:71:ca:55:12:49:ff:6d:6a:ca:dc:b7:e3:
81:64:f8:b4:34:0a:29:49:46:99:f1:32:20:4d:f1:6f:13:d7:
e0:b8:6e:6f:7c:10:1f:cd:2d:15:f7:e0:fc:5a:0d:f6:ae:24:
1d:78:46:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:22:27 2026 by rpki-client