Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: 3c9xCoOsn7x11cnivMI5/46dVOIk1sUCTb50zfdzhjM=
Subject key identifier: D8:E7:A7:EC:54:61:60:BB:DE:65:6E:0E:22:A8:12:45:DD:30:94:62
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019CABA1B6CC1B6A5667C02204F5AC9485B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 1108
Signing time: Sun 01 Mar 2026 23:00:27 +0000
Manifest this update: Sun 01 Mar 2026 23:00:27 +0000
Manifest next update: Mon 02 Mar 2026 23:00:27 +0000
Files and hashes: 1: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
2: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
3: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: DVv7abzszyFsrTF8eVcjzIEy3PtocqbmbY9QTxFfcuY=)
4: ovUvt1pWliISM3HaoCAcadW0xKw.roa (hash: H639MxSrvwDoO2fDDqrmu0kQ4erJQr6FKFxoVbpwHPU=)
5: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:b6:cc:1b:6a:56:67:c0:22:04:f5:ac:94:85:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Mar 1 23:00:27 2026 GMT
Not After : Mar 2 23:00:27 2026 GMT
Subject: CN=d8e7a7ec546160bbde656e0e22a81245dd309462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:ae:7d:05:ae:bc:0c:a0:24:d8:f2:1c:ae:
53:ee:bf:0c:21:e6:a7:f4:15:5b:7d:87:c3:06:74:
a9:15:07:95:76:45:6e:ba:89:9a:33:25:5c:c2:54:
a1:c1:bc:3d:6c:7b:b9:5f:05:27:74:fb:ef:55:21:
62:d8:36:f7:4a:dc:50:b6:90:b7:0a:85:2c:b7:c3:
bd:ff:29:df:bd:e1:40:cd:ca:90:1b:c1:c4:9f:57:
62:56:aa:12:2f:ed:25:2c:66:6f:ee:63:f8:64:1b:
37:75:5c:2a:41:de:20:fc:4c:43:fe:1b:bc:c4:b5:
53:69:dc:e6:e9:a1:c6:c2:1e:71:d8:ee:0f:63:d3:
32:04:62:69:d9:e5:af:ac:e9:8f:89:2b:0f:ca:aa:
bd:61:3d:bf:f5:77:86:46:d4:1a:d8:fb:26:45:0c:
49:ef:e7:6b:38:fd:e3:2f:2c:04:6f:dd:7c:d2:f2:
cd:f5:b4:47:72:e1:2b:37:d4:55:79:21:2d:f6:e1:
fa:1d:b9:96:a9:1b:64:1f:bf:bd:2c:78:23:3e:33:
10:84:fe:11:5e:e6:4a:5f:10:dc:d2:2d:eb:f9:72:
45:e5:99:1a:23:74:bf:a4:db:dc:2f:79:0d:e6:34:
1a:68:88:88:42:d3:b6:5c:6d:68:94:bd:1b:cd:50:
71:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:A7:EC:54:61:60:BB:DE:65:6E:0E:22:A8:12:45:DD:30:94:62
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:78:59:06:6d:82:50:d4:47:4b:1a:82:b6:cb:9c:32:31:e7:
e4:9b:08:33:0b:06:66:fb:0c:52:63:b9:64:50:7f:5b:54:b0:
e7:47:60:61:5e:f1:f8:4f:3b:09:d0:20:81:ba:a2:e5:aa:ba:
81:a8:34:fb:89:0a:00:d0:5f:1d:e9:a8:e5:fa:c1:d5:5d:91:
80:2c:e0:e7:a7:1a:02:bc:81:3b:bf:c6:6b:d1:a3:69:ed:93:
89:99:87:23:84:8d:5d:8d:23:e0:7a:72:5c:15:12:65:31:d6:
f7:86:2e:00:14:cd:91:3f:89:ba:49:3c:78:af:3a:1f:b8:a2:
35:0d:aa:53:c9:69:84:2a:55:42:c6:b5:ce:07:37:ff:ce:88:
d2:49:64:5a:14:85:db:d6:b7:a1:ca:4a:9f:75:40:d9:26:02:
e0:ee:62:23:6e:95:55:15:80:9b:e5:bd:20:20:ad:39:c7:bd:
71:28:f5:03:cb:69:fb:f3:94:54:db:a5:06:43:a8:68:19:2c:
c2:c0:a8:85:16:6d:e0:8a:30:b4:1b:1f:75:d7:3b:57:9b:97:
1d:c0:d5:c5:d8:50:3d:12:29:ba:d4:bb:99:3f:32:3e:ae:f0:
bc:7b:a5:f2:0b:68:cb:56:13:79:8e:bb:ce:be:c8:98:69:8e:
06:6e:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:54 2026 by rpki-client