Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier: /BNhRUQ2W5XSnZEzDRdotcKTLEZcImVhFBo2BBGpa/w=
Subject key identifier: 2F:80:CE:22:C1:4B:07:9B:3A:A0:41:87:30:3A:0F:81:FE:E5:C9:BB
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer: /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial: 019CAAC678099AAE246595AC36422DAE4381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number: 07A5
Signing time: Sun 01 Mar 2026 19:00:59 +0000
Manifest this update: Sun 01 Mar 2026 19:00:59 +0000
Manifest next update: Mon 02 Mar 2026 19:00:59 +0000
Files and hashes: 1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: vcx5QaqeDgKrOztAVgHaN6e0Rkc9zqfSTN4/aOCwTbI=)
2: sFLHZGEgR5B6z0uHo1Ay7Q5_vWs.roa (hash: tswRhyFVxtP5UBE+zxkH0gqlOKm86RXi8OEmfEEgHVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:78:09:9a:ae:24:65:95:ac:36:42:2d:ae:43:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Validity
Not Before: Mar 1 19:00:59 2026 GMT
Not After : Mar 2 19:00:59 2026 GMT
Subject: CN=2f80ce22c14b079b3aa04187303a0f81fee5c9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:e8:09:c8:c1:72:02:38:4a:95:eb:84:41:
04:bd:9c:d8:9c:49:1f:75:52:71:90:5e:41:5d:83:
62:5c:62:7f:78:d2:58:1a:15:53:f4:b8:ff:fd:bf:
7e:08:d5:ab:08:12:dc:b5:28:41:80:f5:0d:67:17:
78:d3:be:93:e9:bd:a7:47:d2:a8:e9:98:5e:32:6f:
fc:d6:66:09:d8:f9:bb:28:7d:46:60:3e:a6:72:7e:
e2:4b:11:2b:a0:a5:bb:6a:e0:1a:0e:7f:52:93:fb:
56:29:f8:55:1d:dd:c4:5e:3c:59:4f:ba:01:59:f5:
cd:40:3c:51:e2:cb:02:81:1a:37:45:8a:d0:cc:31:
71:41:c5:0b:a2:53:e7:27:69:8e:ca:e9:e6:3f:79:
97:38:47:47:bc:38:a1:3f:61:57:d7:e4:44:a6:70:
30:ea:87:d6:d0:14:9e:a5:04:c4:5d:1a:44:bf:3c:
d5:20:0e:0a:42:c9:6a:23:fe:2e:d3:d6:3c:76:a6:
3f:0b:f0:8b:fd:6b:ef:3b:02:0d:31:6f:5e:a8:a9:
e5:6c:84:df:2f:93:79:64:5e:64:ff:c0:57:89:fc:
23:29:db:1c:f9:c6:0b:d1:31:e9:7e:ab:ab:da:2d:
cb:9b:16:e0:04:8f:7c:6a:59:e2:7a:52:17:ba:a3:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:80:CE:22:C1:4B:07:9B:3A:A0:41:87:30:3A:0F:81:FE:E5:C9:BB
X509v3 Authority Key Identifier:
keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:47:85:83:da:94:86:d8:ee:ae:dc:24:8c:1e:a3:1a:9f:14:
c1:39:26:c4:dc:8d:e3:42:ca:45:2f:9a:dd:76:4f:3a:ff:e5:
d9:65:de:90:36:07:23:87:63:ae:5e:4c:2e:c8:43:ca:59:dc:
22:13:f0:27:52:3a:18:89:ed:e5:61:97:b9:bb:c7:2e:6b:6d:
41:3f:fc:2e:33:19:32:11:20:29:ac:74:6e:ca:a2:48:c2:47:
ba:50:03:db:79:42:ff:8c:39:d8:d0:e1:13:fc:74:6a:0b:c4:
dc:ad:e7:a7:6e:c8:81:00:fd:9f:77:8c:fe:bf:68:97:e9:7f:
1c:1a:dd:77:ad:0a:1c:19:45:77:07:cc:92:5a:0e:c2:07:d0:
90:ee:8f:af:a3:6f:95:e0:2c:31:c8:df:f7:cd:38:8c:e6:87:
c3:9e:d5:a6:6f:70:41:83:aa:17:9b:8b:e0:d4:12:76:b2:ec:
9f:c6:46:66:67:6e:b6:2d:96:f7:a4:bc:2d:c1:ee:03:0a:a2:
ff:de:e1:4a:1e:c3:0e:37:0c:ba:bb:79:b6:5c:37:f2:ca:7d:
16:43:47:f5:42:32:42:28:d9:4c:8c:67:cf:12:2e:c1:1c:60:
a1:db:32:c6:9b:16:10:9f:68:d6:5d:ba:6e:bf:aa:1f:58:23:
5e:dc:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:40 2026 by rpki-client