Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: ieCR+fjJQSfcWguttJo6nSfYcPovkHXhZUG1A+eXkfI=
Subject key identifier: 66:2B:25:4C:0B:A6:AF:A1:C6:26:E0:D6:2D:63:07:29:82:22:C6:6E
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 019CABD9F82F66C552B38E9D8A851F5E55D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 11C5
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: Mkuy3VBq4aQu3OGCjxmBdpdLVoeFjKEYCxsDyvYqlog=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f8:2f:66:c5:52:b3:8e:9d:8a:85:1f:5e:55:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=662b254c0ba6afa1c626e0d62d6307298222c66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:35:13:c8:ed:6e:95:5a:67:75:ca:37:47:
08:23:40:06:a3:50:58:bd:d1:a0:38:80:52:ce:76:
93:00:c2:47:56:46:a2:87:31:18:74:a0:c9:a0:9a:
8a:22:d2:21:8f:d0:1a:34:c0:ff:cc:46:df:b1:35:
c2:98:bf:52:84:a7:f0:c6:12:e5:41:cb:7d:f5:80:
bc:f6:83:79:4f:97:83:fe:d1:a1:39:e2:19:b7:0a:
7d:99:03:3a:49:82:9f:df:c3:d7:fa:72:ad:b6:7a:
07:ed:b2:18:b5:f6:4f:f1:39:39:91:6c:c3:71:f3:
0a:e9:20:44:91:fa:f2:23:ff:72:05:13:3c:00:a3:
d6:0c:0a:2b:cb:09:ae:0a:7d:bf:49:72:23:c0:0c:
6a:d3:ac:53:66:1b:77:c4:aa:c0:e9:2f:ab:c4:0a:
c9:f8:8c:58:7f:92:17:a2:a7:40:45:f1:47:d4:c0:
30:f5:e4:57:dc:86:39:09:29:bb:81:d9:1f:8d:b0:
c2:59:83:fd:e5:5f:32:b0:bd:53:b8:eb:cc:c6:41:
0f:f5:57:a4:b6:07:43:7a:58:f3:c3:c7:7f:5d:e7:
9e:59:56:4a:4f:78:0b:7e:88:d8:74:c8:0b:61:e5:
6e:5f:68:17:b7:4e:8e:f1:e4:bf:a1:86:c2:e2:06:
7b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2B:25:4C:0B:A6:AF:A1:C6:26:E0:D6:2D:63:07:29:82:22:C6:6E
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7a:a7:ee:ad:20:85:ee:12:d0:4c:3b:c1:2c:e4:61:cb:91:
7a:59:f5:5b:76:2a:6c:f4:f7:55:8b:08:76:a9:7b:01:f0:98:
4e:64:62:15:c4:2d:f2:23:9c:c4:d8:b9:f2:d9:f7:d0:66:2c:
dc:05:c6:76:eb:ab:21:ce:86:4f:3e:25:d8:40:78:38:23:7f:
a3:d3:be:9d:8e:ef:e0:ec:f2:bc:95:a9:15:ab:f0:a8:ea:bd:
b3:1d:cd:97:8d:2b:08:27:35:60:8c:54:0b:9c:ee:06:80:5b:
55:d6:b0:e4:05:41:d9:fd:3a:45:90:e5:b9:22:7f:81:87:ec:
7a:6e:bb:9d:4c:af:61:48:81:70:88:ca:eb:9e:66:2c:08:ea:
ba:e0:da:46:2c:95:40:94:b3:fb:85:ad:a8:fe:29:ff:65:a1:
b5:98:a5:f8:a0:50:4c:e2:de:e9:01:6a:e6:12:38:eb:57:f7:
c6:b9:ae:18:df:bb:00:1d:56:18:f2:59:c6:3a:f7:22:c1:e2:
ce:1a:58:89:c3:37:db:3c:5a:d5:b9:42:5f:47:c8:c3:43:f5:
b6:41:09:bf:d7:64:c4:4c:d6:e8:2a:2e:78:4c:e1:53:c6:cf:
3d:22:31:3c:ca:a5:40:f2:32:ab:4c:b6:41:b2:f2:86:93:e2:
c5:79:90:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:49:48 2026 by rpki-client