Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: 5wpbZEnNwwjm41+MoAUVEIJyrQkWpeYXpEUBwV5SpVo=
Subject key identifier: F9:37:5E:AA:9A:85:90:A9:BE:40:B1:AA:5B:2C:33:AC:9C:38:08:B4
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 019CA97D8D916A8499FBB578A739AB011167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 12EE
Signing time: Sun 01 Mar 2026 13:01:43 +0000
Manifest this update: Sun 01 Mar 2026 13:01:43 +0000
Manifest next update: Mon 02 Mar 2026 13:01:43 +0000
Files and hashes: 1: JwJbBnAQRnm7Yr9wnBpWo0sg6l8.roa (hash: j/L9is0WBI5ilRI5gTL02OZdlEqkkNv6fyzs7XSwNkE=)
2: PehZxy4eJXOqEW1bQGdH49g9TKk.roa (hash: XVIm5rSukWk090sAzA2TmOJgfDZPjtVxQtvoQb7iTLE=)
3: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: iA6odgkC0qE/jP+HJhE3dhimSpO6H5MzCumd/xGM4AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:8d:91:6a:84:99:fb:b5:78:a7:39:ab:01:11:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Mar 1 13:01:43 2026 GMT
Not After : Mar 2 13:01:43 2026 GMT
Subject: CN=f9375eaa9a8590a9be40b1aa5b2c33ac9c3808b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:3d:70:9a:21:65:62:5f:39:0e:72:51:7f:
a3:41:a4:fb:22:c0:3e:79:da:be:96:e7:fd:0b:fd:
65:39:6b:99:21:60:5b:a2:48:e9:be:7e:8e:08:0e:
b5:c5:73:e5:c6:3d:f7:45:af:83:65:91:30:0f:18:
0e:83:5d:6a:ca:ba:94:2f:b0:af:9e:0b:9f:e0:7b:
3e:26:b9:ad:93:4c:2e:e7:17:6e:c8:d3:2e:d6:34:
c2:b1:c5:d2:e2:1e:d9:8d:5d:89:38:54:06:ac:e9:
19:83:56:fd:34:c2:d0:35:08:a4:85:b1:42:d6:8f:
af:06:ab:2e:99:84:ed:2f:89:47:a6:61:1c:d0:6e:
e3:30:0b:cc:91:0b:82:e5:d2:a7:30:46:5e:bf:1a:
0e:cd:d6:bc:08:e2:a0:59:5c:94:b7:7d:db:2a:d8:
63:00:3a:cf:61:7d:ea:c3:07:f1:f1:34:05:ac:01:
3e:31:79:ff:64:39:45:4a:1a:a8:cc:21:28:a2:b0:
60:f7:4e:10:b1:be:fe:74:7e:ce:a2:39:e0:35:37:
a6:41:ca:ea:76:a2:9e:5c:38:0f:e4:e8:79:f0:d3:
e4:ff:35:67:83:b7:f6:4c:ad:b8:d9:b9:9d:5c:12:
61:cb:7e:5a:94:22:cd:83:0c:a6:c4:98:0c:db:22:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:37:5E:AA:9A:85:90:A9:BE:40:B1:AA:5B:2C:33:AC:9C:38:08:B4
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f0:66:30:f9:f2:e2:d3:a7:ab:36:e5:3c:f0:cc:71:18:61:
c1:35:7c:5b:2a:0c:a3:51:df:b7:b5:db:e6:98:f9:21:de:ce:
1d:1e:94:ec:82:ff:ea:b4:22:9c:56:64:ef:7f:59:95:67:35:
6b:2c:50:7f:4a:f4:06:00:5c:2a:32:db:5d:09:7f:17:0c:70:
e2:f4:ea:03:31:ea:ad:c6:cc:58:c2:48:95:1e:44:8a:97:5f:
ce:50:67:ef:09:e2:52:b9:83:ed:20:b5:c9:a1:ca:5b:76:77:
0c:ea:40:90:94:94:ac:5a:4d:27:bf:36:25:a9:c2:5d:6b:93:
f4:3d:20:a1:69:aa:59:08:f5:9d:b6:e2:74:30:2b:19:11:da:
94:0d:12:b5:45:0f:c8:e8:8f:8a:ae:7f:7f:bf:2b:3f:4c:44:
cf:65:e0:98:79:dd:26:c1:ed:df:f3:df:80:ce:9d:0a:fe:26:
04:00:7b:86:74:6a:f5:26:1c:ed:4a:a0:05:95:e8:9c:46:12:
ec:a1:ae:fd:52:f7:a7:c9:03:ad:1f:54:61:8e:fd:45:09:25:
8a:27:29:47:87:a3:c8:8c:d2:60:0d:4a:48:79:e8:de:47:fb:
a5:d6:85:2d:c1:03:33:4c:29:de:d7:88:d6:e4:d7:85:50:a0:
66:7b:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:38 2026 by rpki-client