Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: 3wbeWSeXoNBf4tr+lHZKoPuq7PtHFIlpusLYKLphsWA=
Subject key identifier: 9F:BE:60:A7:E2:C3:DD:AE:24:51:61:91:FE:FE:59:F1:9C:00:69:77
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 019CAB33F7027E1C7448527170F9325F0973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 21:00:35 +0000
Manifest this update: Sun 01 Mar 2026 21:00:35 +0000
Manifest next update: Mon 02 Mar 2026 21:00:35 +0000
Files and hashes: 1: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: 2xutSrikFLmQCCGVQ1WUnj5r9/QqQrellnvjyS5Us3I=)
2: X9Plsh78iLxMym05erYr23A5nAM.roa (hash: JnUoidyO7+02A7tvFvdT39dCgzkQhJHPQPcV1/E2iHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f7:02:7e:1c:74:48:52:71:70:f9:32:5f:09:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Mar 1 21:00:35 2026 GMT
Not After : Mar 2 21:00:35 2026 GMT
Subject: CN=9fbe60a7e2c3ddae24516191fefe59f19c006977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:1a:1b:3f:a9:f1:77:92:4a:28:c2:60:e6:
08:58:67:de:0b:5a:dc:95:44:f4:f9:3c:51:6f:a2:
d6:df:9c:90:a4:40:25:48:e0:99:4b:98:15:f1:ef:
18:a3:ad:a1:2f:48:24:bb:c4:64:f6:b3:ed:eb:ed:
68:e9:48:d1:47:dc:ac:c1:e9:05:a6:0f:9e:ce:ac:
92:b8:a8:92:00:53:99:16:2a:86:a3:fb:9f:64:49:
db:a0:34:98:9c:e6:76:77:6a:dc:b6:f1:6a:a3:4b:
f9:75:50:54:ca:a4:15:3d:d2:a8:60:7b:b8:25:9c:
8a:f3:5a:fb:be:31:0a:85:7d:fa:a7:ee:d1:c3:36:
aa:a3:a9:d1:03:8a:40:28:ef:f9:db:55:3a:4b:64:
ee:1b:4e:e4:24:01:07:7d:e0:de:32:db:51:3a:83:
53:a6:d4:91:bb:f9:e9:18:c5:92:8e:64:47:90:b1:
be:e4:65:4f:d2:7e:73:fa:ae:5e:b0:88:e3:88:61:
8f:6e:55:ca:1e:8f:03:3e:c1:f5:6f:4c:96:b9:11:
27:42:e5:55:ef:83:c8:39:b0:1a:d8:7b:7c:ff:c9:
f8:9c:a3:b0:c6:10:f8:74:a4:46:53:a4:27:f3:b8:
10:c8:68:fa:c4:7c:9a:d0:14:12:45:09:b3:04:db:
ca:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BE:60:A7:E2:C3:DD:AE:24:51:61:91:FE:FE:59:F1:9C:00:69:77
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9d:f2:5d:c9:fe:c1:de:38:ff:ff:7c:5f:c7:9b:60:b6:77:
0e:01:2b:05:03:6a:2b:6c:c4:71:74:0a:aa:f3:d4:ca:4f:5f:
eb:55:57:40:f0:1b:a7:b7:e1:2c:14:51:d7:88:30:52:de:ed:
7a:a4:de:b5:df:c1:d1:5c:fb:1d:57:f2:aa:01:be:40:75:24:
1f:bb:49:f8:33:e8:d3:4d:cf:50:db:d4:a3:ae:98:21:46:91:
69:7a:46:00:0c:ed:5e:2b:3d:61:71:f1:2c:c3:17:e5:57:75:
e5:23:52:1e:cd:3b:31:60:1e:f0:06:4d:71:4e:1a:93:d1:99:
93:53:17:a6:72:20:32:93:9a:85:3d:9c:40:77:2b:4f:eb:fa:
34:ae:85:9a:0c:b5:fa:0a:77:f0:f7:66:15:a8:49:92:e5:01:
7b:ab:00:03:af:01:51:82:6d:f4:5c:18:a8:f0:34:1b:5c:64:
8a:19:e0:2b:17:36:01:20:7b:21:88:ef:39:98:99:e5:3d:0d:
86:ea:4e:23:0f:e2:db:97:71:2f:75:8e:08:0f:cf:b3:65:a4:
74:3f:5a:a6:a3:24:98:03:d9:de:fe:19:a7:c2:39:0e:2e:be:
ec:88:28:46:ab:9e:cb:56:40:3a:98:8b:9d:f3:11:d7:fa:df:
07:19:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:14 2026 by rpki-client