Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File: o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier: yV0fHUek7+W/xKsxMC+1m0ceP9WaVjcWOUQcI62BuKw=
Subject key identifier: 30:3A:71:44:B6:86:70:D0:DE:55:CB:79:4E:1F:3D:E7:5F:E9:19:36
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 019CAA8FFA0FC860938147207787A15BBF5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number: 1596
Signing time: Sun 01 Mar 2026 18:01:28 +0000
Manifest this update: Sun 01 Mar 2026 18:01:28 +0000
Manifest next update: Mon 02 Mar 2026 18:01:28 +0000
Files and hashes: 1: CGNHFzHbF7-8UJqTLN4QMjGnXyU.roa (hash: rE1Gl4R/o9ubCNpESm4El4VIv8yy2mTFqLawhPoXG4E=)
2: PONcyMXXHXmic_X-1JQkIHiL7RQ.roa (hash: bNlWZk13v7v2Ir/cn7yeztAmiMq+0QF9OeWKUb72sIk=)
3: SzwS05A_9OqODKb5430fwurrmnQ.roa (hash: D3mNcritYDIYKOE6pGbT0Jy+94ZKnyNdGFix5X9/Iuk=)
4: V6LgfABtzULswIbwgWkk1QCYEfs.roa (hash: bkqwmyw/v3/xFtzX8+VyDP6uHq9Nb9Kq0ZMb1n78bks=)
5: ezqDXbFjE3E-cCtOYHb3xwk-fGA.roa (hash: wFU8xe1yp84Vz6mjRcrO0Cox0MbWJSGxZY2A1rKwBNE=)
6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: 08BBUjeOR7l6IqYsQ62WxROYpgXIcEuV/eppYFbMvs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:fa:0f:c8:60:93:81:47:20:77:87:a1:5b:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Mar 1 18:01:28 2026 GMT
Not After : Mar 2 18:01:28 2026 GMT
Subject: CN=303a7144b68670d0de55cb794e1f3de75fe91936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:73:25:5d:42:54:e1:df:2f:84:e3:11:31:
79:fd:8d:68:57:75:e4:ff:77:f2:32:84:40:26:72:
aa:fd:4d:a1:2c:64:8d:aa:d2:f4:4c:3b:c4:d4:0d:
3c:11:04:ea:2a:0c:b7:9b:6d:bc:47:4c:93:0b:59:
12:4a:ce:ae:ac:6f:8f:21:b9:c8:27:e7:66:85:1b:
79:ae:68:4b:b2:67:d7:9d:b7:ca:bd:0a:7c:be:a2:
df:c5:bb:ef:6d:a8:74:47:d8:80:f9:5d:bf:44:1d:
03:28:3b:0b:db:6d:50:c8:a6:46:45:86:d4:76:68:
92:61:39:e7:cb:74:cd:a9:1b:90:e8:fc:c4:a5:52:
fe:5d:4e:bb:b0:49:f7:80:8c:8e:59:6d:37:5b:d6:
99:af:68:62:da:3c:4c:e4:46:ef:53:49:0d:30:a3:
ef:6f:f2:ed:1d:d6:f9:3b:e7:5d:e4:4d:02:c0:48:
cc:1f:60:29:e6:97:d9:ae:38:df:63:cb:4d:70:60:
3a:9f:6f:d8:c7:a9:b1:c9:7d:b5:c3:11:9e:a6:c9:
22:1e:e6:e2:83:34:97:12:2d:52:67:f4:2a:11:6a:
60:ce:9a:4b:ef:7e:b4:99:56:45:7a:5b:b2:b3:69:
e2:53:a1:e4:67:cf:d9:e8:e0:65:4b:7c:49:63:bc:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3A:71:44:B6:86:70:D0:DE:55:CB:79:4E:1F:3D:E7:5F:E9:19:36
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3d:1f:45:54:ec:7d:97:45:53:91:b7:05:35:64:37:5e:e0:
42:6b:fb:50:b7:4c:55:1c:a2:96:14:bb:e0:70:e4:76:d5:97:
83:8e:95:d7:e8:6e:6c:02:75:e2:a0:3a:1e:33:da:3e:c6:30:
4b:4c:6b:19:6b:02:59:b4:e3:ab:ff:c2:e5:e5:f6:f0:31:4f:
4b:9e:ad:f2:f2:c9:45:79:d6:9a:3c:fe:80:f9:e2:b7:c3:1e:
cf:42:60:1b:8f:49:20:b0:46:cd:6c:bf:c5:1b:ea:60:3f:6d:
43:c8:35:70:d6:da:95:9b:64:90:a7:7e:47:f0:a4:0a:e2:05:
f0:a6:6a:cc:4f:1c:f5:5a:2e:1b:74:74:19:74:a0:a4:25:53:
3e:26:84:99:1d:84:64:a1:71:44:c4:98:eb:55:a8:52:cb:0d:
a4:fd:81:4a:01:9c:ba:8b:7a:3d:d7:24:d9:9e:2a:55:ae:4d:
a7:8d:ca:ea:04:bc:91:70:8d:6f:d6:cb:f3:40:dc:53:fa:f8:
46:d6:d6:96:51:ab:77:48:da:86:62:ab:72:64:15:f4:fa:00:
e2:ff:80:fa:e8:bc:7f:23:b4:56:94:6f:7b:76:60:bb:48:69:
14:48:e1:89:f0:be:0a:78:fa:78:e0:6c:e5:b0:ab:07:07:aa:
b5:6a:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:53 2026 by rpki-client