Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File: o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier: 6xOR7AHQqyJglwxRM7bnC8tAvu0Dfb0ypIyM62x5qb4=
Subject key identifier: 84:59:CD:DD:2A:D3:F6:A4:27:B5:1E:BB:89:3A:56:7E:DF:AD:3D:91
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer: /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial: 019CADC7EF927F1BEE265AA5C076E07330FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 09:01:27 +0000
Manifest this update: Mon 02 Mar 2026 09:01:27 +0000
Manifest next update: Tue 03 Mar 2026 09:01:27 +0000
Files and hashes: 1: 6LQC_WZqbsxqpCNxITLwNmSvDPk.roa (hash: 2jpqjh4IYhaGl+W39lws2/CQFWFrqFjpyZKUsxZ8H+0=)
2: CO_VzBu4gFZGQo6TZVLREcCwUwY.roa (hash: LG1jfCe3GnKEfOBNBBGC9FiXFKQ/e+HVoB0Wq69YJpQ=)
3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: DMYsFPghr8e+DDgB+ZcyvFaeSTCxa26ztC61RoIfCN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ef:92:7f:1b:ee:26:5a:a5:c0:76:e0:73:30:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Validity
Not Before: Mar 2 09:01:27 2026 GMT
Not After : Mar 3 09:01:27 2026 GMT
Subject: CN=8459cddd2ad3f6a427b51ebb893a567edfad3d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:61:62:ec:69:c6:9a:c0:10:b0:26:3b:66:
77:d3:dd:01:ee:72:b7:85:79:7a:f4:61:13:68:27:
05:1d:4f:bc:bf:57:ae:a4:27:f1:51:4d:ba:aa:c1:
f2:6d:d8:cc:90:84:07:b3:ff:28:e6:08:05:a6:c4:
42:53:c6:a5:88:db:b0:e3:8b:63:ba:b6:cd:3b:51:
6e:92:0b:4a:4f:4a:b6:6f:56:36:15:23:56:a5:a7:
a9:6e:98:04:6a:94:40:8d:55:fb:df:22:70:a7:7a:
05:47:46:c7:ad:39:19:98:05:00:14:87:90:3b:5b:
c5:86:05:b1:29:d8:d0:ac:e2:02:43:ac:1a:cd:13:
3e:69:a5:35:9c:8b:69:05:f2:c2:f8:01:b5:07:a9:
f2:2a:04:e5:c4:fa:cc:26:31:a2:a4:85:44:11:e7:
10:d4:c1:39:04:a6:8a:c0:7e:ed:9f:d7:a7:0a:5b:
7f:e5:1c:31:ea:63:b7:85:9f:1f:9b:97:d1:ca:70:
85:93:91:00:98:07:56:8d:65:52:fc:9d:73:b8:89:
97:a4:6c:c1:28:db:c7:7e:e8:65:af:bd:44:95:27:
9f:1e:b2:12:5f:33:7a:da:ed:c0:04:bb:e2:6f:de:
19:79:3b:7d:65:3f:1c:02:0f:50:6c:7f:97:0a:db:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:59:CD:DD:2A:D3:F6:A4:27:B5:1E:BB:89:3A:56:7E:DF:AD:3D:91
X509v3 Authority Key Identifier:
keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:17:27:c2:2a:4e:c5:4c:68:53:a6:ad:c0:fc:6e:30:a3:3d:
29:ff:40:83:16:1a:15:10:1c:c1:2e:f9:c5:39:2f:23:ca:66:
66:c7:e6:1d:84:62:58:7b:23:b8:ae:af:96:f6:b4:6d:a0:d3:
b7:ab:3b:39:94:f4:fd:fb:ec:57:2d:57:ed:4e:eb:a5:f9:19:
67:fd:e5:ad:3c:b7:ff:5e:81:99:74:72:e9:9b:1a:77:99:2a:
56:9f:d0:b6:c6:01:ba:ae:79:a9:86:a7:f0:8e:25:55:77:dd:
d4:43:e8:fa:d6:ad:b0:6b:4d:a1:6e:c2:21:5f:8c:39:70:bb:
09:77:cf:6a:1c:ba:e6:4d:9f:a5:d0:c0:ac:5a:6a:ea:7f:8a:
d3:75:29:48:d3:8e:23:2b:0e:0a:5e:ff:b4:aa:e4:24:76:75:
4c:93:23:2e:c2:b8:c5:69:c3:ef:3e:d6:ae:d2:cb:d2:56:7c:
65:4d:02:43:29:dd:50:58:89:e8:90:ba:d1:74:ba:17:e0:95:
27:a2:83:0e:80:92:e2:29:38:c9:be:8d:ae:94:03:33:e0:05:
4d:95:69:a5:d8:47:65:33:1d:6a:cb:38:f2:99:11:e1:14:5b:
d4:a0:5a:1b:b2:17:eb:0d:ac:5e:63:13:8f:16:63:d5:24:72:
44:55:1a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:25:34 2026 by rpki-client