Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
File: oCcpAmWOFcs0vVCcOVC63iGnltI.mft (raw, json)
Hash identifier: ftaTEg2K188wM/aSnxC+ILHY65PVvhKBnU19mRW+fPg=
Subject key identifier: F5:36:1B:90:ED:C4:8A:37:E0:EE:0E:B1:68:D0:59:E7:BB:4B:53:76
Authority key identifier: A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
Certificate issuer: /CN=a0272902658e15cb34bd509c3950bade21a796d2
Certificate serial: 019CAC46AE6CFE9147202B2EBC6251B7EF7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:00:39 +0000
Manifest this update: Mon 02 Mar 2026 02:00:39 +0000
Manifest next update: Tue 03 Mar 2026 02:00:39 +0000
Files and hashes: 1: Wv-19NnCsrhZrwnSI2oU6lLrFv4.roa (hash: QUllUIUWzb1bn3tS38z/e3aKNKTT0J3rQMusPQtlNMo=)
2: oCcpAmWOFcs0vVCcOVC63iGnltI.crl (hash: HffwgSnSUZH8L0cgjXxHLa7a8Irz5VEHWXkZBHsSlfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ae:6c:fe:91:47:20:2b:2e:bc:62:51:b7:ef:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0272902658e15cb34bd509c3950bade21a796d2
Validity
Not Before: Mar 2 02:00:39 2026 GMT
Not After : Mar 3 02:00:39 2026 GMT
Subject: CN=f5361b90edc48a37e0ee0eb168d059e7bb4b5376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:e0:51:f0:1e:3a:0a:4e:ea:8b:e2:33:b2:
f6:67:64:cc:78:5d:79:aa:d6:7f:7e:18:af:92:3d:
6a:57:1c:f3:4b:37:48:dd:c8:c4:ee:10:2c:21:16:
d6:f4:7a:d9:7a:48:fa:af:11:8b:5e:c5:5b:83:60:
12:dc:c0:fd:53:d8:42:1e:af:7b:4e:b6:0f:e5:52:
8e:40:37:ad:cc:44:74:69:4f:3e:8d:22:67:81:bc:
5c:89:b7:ad:67:f3:96:bc:d6:52:0a:7d:ca:c0:2f:
51:43:a9:a6:49:71:03:78:a3:08:e6:3e:a8:f5:13:
a3:b4:71:49:09:f5:a5:41:36:ac:a5:c1:9e:22:44:
24:7b:aa:27:e3:05:eb:ad:81:cb:44:89:31:d9:00:
ae:5e:78:3f:f6:43:8a:2b:4d:ac:60:76:4d:bf:65:
a0:10:db:0e:4b:e7:35:42:14:f2:35:ff:8b:55:8e:
a3:b1:4f:b0:24:98:1b:d6:99:74:c8:5c:01:7d:43:
bc:0a:6f:7e:e0:17:48:58:5f:ea:8a:5c:55:c5:ee:
fb:27:42:1b:f9:55:b7:13:6c:95:21:11:33:77:55:
aa:1e:4b:9e:c9:5c:f3:42:c1:24:4d:dd:63:a6:7a:
31:07:b4:18:da:5e:c9:3e:5f:43:e8:6e:f1:7f:5b:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:36:1B:90:ED:C4:8A:37:E0:EE:0E:B1:68:D0:59:E7:BB:4B:53:76
X509v3 Authority Key Identifier:
keyid:A0:27:29:02:65:8E:15:CB:34:BD:50:9C:39:50:BA:DE:21:A7:96:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCcpAmWOFcs0vVCcOVC63iGnltI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3e9d1c-4b08-45c7-a9e8-927526e6f2d9/1/oCcpAmWOFcs0vVCcOVC63iGnltI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9f:05:0c:e1:d4:c3:eb:bd:f6:09:96:d8:a0:e2:2c:b6:b0:
37:a5:d1:7f:90:2a:e9:b3:84:9c:36:b0:b1:cd:93:84:46:2b:
b0:70:7f:05:8b:9e:07:a9:02:e8:0b:a9:33:c5:1d:b4:22:a9:
38:b3:d9:ff:8e:66:4c:64:fe:5c:d2:30:0b:1e:0c:7a:f5:f2:
a1:37:7a:86:80:12:26:10:6d:57:aa:45:0c:e7:16:23:8a:e7:
bc:8a:80:4b:a7:d3:91:38:bb:49:76:0e:f8:47:3b:f8:23:d1:
8e:03:91:55:7e:68:7d:83:ca:64:18:21:6f:02:26:f8:92:25:
51:25:49:25:77:5e:e6:35:56:de:52:14:2c:87:48:9c:ef:c7:
6b:48:70:02:b2:c4:08:38:06:1a:2f:e0:3c:10:2c:c2:6e:7d:
d5:75:17:d1:80:d3:65:ef:d2:04:b1:82:92:ef:05:7f:48:a9:
ea:51:67:9b:ae:c3:62:e6:7e:7a:ee:99:ea:86:3c:5d:1c:26:
e7:fe:a9:e0:59:e1:4e:8f:ce:d3:67:55:9e:d5:f9:18:41:1f:
ae:ee:ae:98:56:ff:31:48:08:60:76:36:66:6b:79:69:ad:77:
e8:a0:ea:67:d1:fe:6b:b3:79:52:88:c1:c7:de:42:3f:1d:e5:
14:02:a4:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRq5s/pFHICsuvGJRt+96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMjcyOTAyNjU4ZTE1Y2IzNGJkNTA5YzM5NTBiYWRlMjFh
Nzk2ZDIwHhcNMjYwMzAyMDIwMDM5WhcNMjYwMzAzMDIwMDM5WjAzMTEwLwYDVQQD
EyhmNTM2MWI5MGVkYzQ4YTM3ZTBlZTBlYjE2OGQwNTllN2JiNGI1Mzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmivgUfAeOgpO6oviM7L2Z2TMeF15
qtZ/fhivkj1qVxzzSzdI3cjE7hAsIRbW9HrZekj6rxGLXsVbg2AS3MD9U9hCHq97
TrYP5VKOQDetzER0aU8+jSJngbxcibetZ/OWvNZSCn3KwC9RQ6mmSXEDeKMI5j6o
9ROjtHFJCfWlQTaspcGeIkQke6on4wXrrYHLRIkx2QCuXng/9kOKK02sYHZNv2Wg
ENsOS+c1QhTyNf+LVY6jsU+wJJgb1pl0yFwBfUO8Cm9+4BdIWF/qilxVxe77J0Ib
+VW3E2yVIREzd1WqHkueyVzzQsEkTd1jpnoxB7QY2l7JPl9D6G7xf1s2kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPU2G5DtxIo34O4OsWjQWee7S1N2MB8GA1UdIwQY
MBaAFKAnKQJljhXLNL1QnDlQut4hp5bSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgt
OTI3NTI2ZTZmMmQ5LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZTlkMWMtNGIwOC00NWM3LWE5ZTgtOTI3NTI2ZTZmMmQ5
LzEvb0NjcEFtV09GY3MwdlZDY09WQzYzaUdubHRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh58FDOHU
w+u99gmW2KDiLLawN6XRf5Aq6bOEnDawsc2ThEYrsHB/BYueB6kC6AupM8UdtCKp
OLPZ/45mTGT+XNIwCx4MevXyoTd6hoASJhBtV6pFDOcWI4rnvIqAS6fTkTi7SXYO
+Ec7+CPRjgORVX5ofYPKZBghbwIm+JIlUSVJJXde5jVW3lIULIdInO/Ha0hwArLE
CDgGGi/gPBAswm591XUX0YDTZe/SBLGCku8Ff0ip6lFnm67DYuZ+eu6Z6oY8XRwm
5/6p4FnhTo/O02dVntX5GEEfru6umFb/MUgIYHY2Zmt5aa136KDqZ9H+a7N5UojB
x95CPx3lFAKkMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:09:44 2026 by rpki-client