Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: kx5OWERFGjYknY5zk69tHoZ3ljjr1HEvKd55IySD/os=
Subject key identifier: 48:8A:2B:B0:45:5C:76:77:D8:1F:CF:9F:8B:2D:1D:38:83:0C:F4:9C
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 019CAD22C0F56541AF6942628653D85FCAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 06:01:01 +0000
Manifest this update: Mon 02 Mar 2026 06:01:01 +0000
Manifest next update: Tue 03 Mar 2026 06:01:01 +0000
Files and hashes: 1: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: GachIqShXMCMF5LFtNdlYU3D0YNXX61qhGljvGWd698=)
2: X9Plsh78iLxMym05erYr23A5nAM.roa (hash: JnUoidyO7+02A7tvFvdT39dCgzkQhJHPQPcV1/E2iHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:c0:f5:65:41:af:69:42:62:86:53:d8:5f:ca:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Mar 2 06:01:01 2026 GMT
Not After : Mar 3 06:01:01 2026 GMT
Subject: CN=488a2bb0455c7677d81fcf9f8b2d1d38830cf49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:e6:05:b0:8c:5a:bf:f1:f5:45:99:36:4d:
b5:0d:e8:0f:47:41:74:d0:5d:3b:f1:8a:93:7e:7b:
46:e1:5a:04:38:69:d9:7d:e0:1b:c8:14:f0:4a:fa:
14:69:d3:83:32:1c:a4:62:54:02:cc:11:1a:c9:28:
8e:99:fe:97:8b:ed:19:6f:86:a3:12:5e:9c:ce:6e:
76:1e:ee:44:ab:75:21:3e:aa:1e:b1:8f:b2:85:39:
f4:10:0a:04:e7:d9:12:7a:6d:6a:a4:19:8d:77:c3:
70:86:4d:15:a2:ef:e8:3a:28:c6:c1:47:09:d4:18:
b6:f4:37:94:f8:e7:45:89:c2:f3:89:80:42:2f:91:
22:f5:af:d7:99:c6:51:f1:bc:cc:c9:b5:b8:9b:7b:
b4:59:ef:5f:0b:07:04:3f:6f:84:c8:5d:92:be:55:
69:33:39:ce:9a:96:c1:03:13:37:f0:88:2f:ab:78:
d9:61:94:68:17:c6:37:6c:ce:4a:4d:8f:c1:42:6b:
19:4e:5f:07:93:9f:54:13:d1:e7:37:a1:77:de:38:
23:de:b5:c9:c8:10:df:3e:47:6f:09:36:25:c5:ee:
be:4d:65:fd:db:e9:b5:8a:99:41:21:d7:8b:40:57:
cf:ca:bb:aa:bb:25:f6:e7:b7:bb:81:c7:93:f0:6e:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:2B:B0:45:5C:76:77:D8:1F:CF:9F:8B:2D:1D:38:83:0C:F4:9C
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:44:b3:92:f9:a4:c4:d0:ff:83:e5:bf:c9:2b:f1:6c:f4:dc:
4b:63:7b:06:15:84:32:83:80:70:42:ab:6d:38:09:1b:8b:3f:
83:36:cd:d1:b3:8b:c5:7a:8c:3f:36:a3:19:73:86:35:46:5f:
32:54:39:2b:4d:b1:f4:72:bf:67:c8:32:ba:5c:a3:4a:e1:19:
6b:61:af:3e:b4:f6:b2:d5:18:b3:e4:58:c7:c6:4c:7a:3e:22:
11:b3:1f:1c:a9:16:5d:c8:c8:43:85:9b:88:70:ab:80:c6:47:
d2:1e:a7:88:ce:59:bb:31:e2:2b:72:6b:b9:ce:3e:36:21:9c:
e8:e6:3f:53:0b:e1:a5:eb:0a:35:61:a7:52:f5:73:25:f6:bc:
da:fa:1d:0e:bc:b3:d8:ea:6b:f6:22:db:94:c8:e3:06:e9:0e:
b4:64:20:37:5f:0f:96:e9:a6:d9:1b:e7:82:46:ef:2b:db:1e:
4d:92:c4:c3:bb:66:37:70:b8:9f:e8:10:a0:0e:05:1f:6c:4f:
ec:ff:ac:35:89:8d:07:3a:dc:b4:01:09:c6:7c:e6:fc:42:1a:
d3:c8:ed:d0:fe:e9:cd:72:7a:dd:c5:9d:28:fa:69:15:a9:c2:
a1:76:35:e5:d7:b4:55:ed:32:df:7f:20:de:8d:52:b4:58:b9:
52:73:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:04 2026 by rpki-client