Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
File: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft (raw, json)
Hash identifier: 50u6PKkbadTAIbVvcUl0fxLHJcd0dUIdzgq8dGs/0t8=
Subject key identifier: E5:8F:69:2C:E4:00:69:5C:B0:D6:08:1C:76:8C:D2:E2:3B:5E:79:5F
Authority key identifier: A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
Certificate issuer: /CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Certificate serial: 019CAA589BFAED5790B9F784E859018D50C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
Manifest number: 1509
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: C9TPh5jHy5NiPhrqHMvzDIOA75Y.roa (hash: WvnZ264YFqsoSm9tNT+41GmxS1x9yw8kKH2sdyx8XQs=)
2: TUtT-E6R6aqfPD_ccshhdr0R_dA.roa (hash: Sfi3xHqP/8/oyPQM6jYBEGo2skhCpY+mvC/2b33k6wk=)
3: huX-aAp7poP1N4BK_O1qBgSqsAM.roa (hash: wBAGxYQuk3ytNxx6AIHeKpBoGp2YVEpBaLY1haK3c0Y=)
4: o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl (hash: npTBbJBDh+62D0FhKopZ0T46Yj6NZg+z5nEm7p2h2II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9b:fa:ed:57:90:b9:f7:84:e8:59:01:8d:50:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e2161d7f01fa6fd0842c211080633f3ed36ba5
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=e58f692ce400695cb0d6081c768cd2e23b5e795f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:15:75:fd:02:a1:4b:5f:18:ba:b9:ea:54:
e8:37:6f:b7:20:b9:fc:2f:f4:10:d4:9e:ea:2d:45:
97:25:f1:ab:cc:fa:a1:1b:7f:92:8e:71:f2:d0:24:
6a:fd:d6:41:6f:73:6e:50:3b:9a:ec:2e:93:24:4d:
a3:db:cf:55:e7:93:cf:b1:25:de:a8:88:d9:1e:c4:
54:71:f9:07:2e:37:17:49:bf:37:8b:06:65:e6:09:
10:4f:69:29:12:90:c6:e8:1b:bc:b3:fc:76:a7:aa:
de:ff:ed:5c:df:0f:01:21:47:05:29:80:77:49:ed:
a8:89:8d:dd:a9:58:d8:67:47:02:ce:f0:ef:85:d6:
e7:69:1b:8f:af:ab:71:67:88:86:01:a4:b9:a0:e6:
31:6d:a2:58:18:f0:53:6a:f3:58:83:f5:30:97:da:
15:b5:dd:ac:18:5d:92:86:71:6e:f3:93:1c:75:7f:
12:e9:28:e4:c8:6b:bd:29:f3:1c:0e:ce:bb:5f:81:
bd:31:9a:af:07:cd:81:72:1d:47:0c:44:51:32:c7:
0c:32:e7:ae:2c:09:83:10:01:35:56:67:e4:e3:88:
72:f6:65:42:e3:20:73:3f:51:0e:98:b8:b6:e4:e9:
ac:dc:3f:58:32:3c:5c:ca:1c:e4:cc:eb:59:0e:b2:
c0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8F:69:2C:E4:00:69:5C:B0:D6:08:1C:76:8C:D2:E2:3B:5E:79:5F
X509v3 Authority Key Identifier:
keyid:A3:E2:16:1D:7F:01:FA:6F:D0:84:2C:21:10:80:63:3F:3E:D3:6B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6a64ea-9f1e-4b43-bf2a-7e0340ec9667/1/o-IWHX8B-m_QhCwhEIBjPz7Ta6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:01:17:44:38:52:12:ec:ec:e5:97:1f:f2:0a:59:77:2a:e1:
0b:cd:49:76:50:83:60:06:96:cd:f8:c1:9a:bb:41:d4:7a:9e:
35:ce:fc:77:74:f9:e9:45:19:ba:49:65:a6:d2:38:d4:1a:9c:
6c:88:e9:96:27:2c:85:da:24:03:2f:91:21:b9:55:95:28:d7:
60:c8:d6:52:36:1e:da:40:29:51:ee:03:5d:57:24:14:6d:4f:
0d:17:c3:d7:a5:44:26:c7:90:99:fd:41:7a:71:f4:b3:5b:3d:
dc:25:c6:d6:88:d4:e6:fe:72:39:2c:03:83:55:f4:27:f9:59:
f9:fa:64:5f:a5:93:f3:86:d2:e9:40:10:af:0d:81:1f:75:1b:
96:c8:b1:d8:7c:70:15:b0:4d:4c:ce:04:58:f5:7f:5d:98:62:
a6:83:06:7f:74:ca:af:65:7a:b9:53:18:3f:72:96:a1:99:8e:
d1:38:fa:b8:21:bd:ce:e2:1d:f8:84:30:36:07:2a:ee:d2:87:
b5:fa:30:7f:7a:f7:1f:f3:92:1d:ec:34:11:7d:77:e7:f2:2d:
1f:9a:84:45:60:41:3d:45:aa:2c:99:10:f3:8e:0a:08:f0:57:
0f:8d:47:a3:fa:fe:24:ed:4c:63:e1:72:94:9f:82:7a:79:81:
bb:b0:a1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:34 2026 by rpki-client