Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json)
Hash identifier: jHRl64kRgcY4pEUeN6b7vV1nYh425dCvdJJZoHMG9xo=
Subject key identifier: B2:E4:FE:17:74:07:E8:B0:35:D9:63:00:65:13:55:56:0A:33:7B:00
Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Certificate serial: 019CABD9ED07F9EC1D151FFDC0028063FAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: dqDFD25-lBr1H4kU-f-eIMyH1ao.roa (hash: aZMJNfpwSLS2DvVJl8WR74MQgSeC0Vd4cP1ssZtEpxQ=)
2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: ZH9Gx4OshD7z5XhVqLUuy2DLI2CNFFocgui3spiBKUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ed:07:f9:ec:1d:15:1f:fd:c0:02:80:63:fa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=b2e4fe177407e8b035d96300651355560a337b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:21:40:8f:46:9e:59:5b:52:5e:cd:a8:e4:
35:9d:4d:0f:11:5d:1a:8d:ae:62:74:41:a4:e7:47:
20:db:ed:d3:67:dc:4f:ff:07:6e:65:ea:dd:df:85:
c2:1b:a5:b6:28:3b:79:8f:36:b7:20:18:46:df:56:
f6:f0:59:9c:05:ea:84:ed:7c:f5:04:d2:d9:9b:7b:
e2:68:17:bb:eb:8e:f4:7a:2f:43:92:da:02:dc:17:
d5:fe:a0:43:e6:3d:70:27:29:65:85:33:a1:9c:f3:
d9:00:3b:86:da:06:45:0e:2f:45:9e:77:c6:0f:ca:
4d:32:26:6e:f7:70:b6:ac:98:cf:fe:c4:ca:dd:63:
48:57:52:f8:a5:4f:bb:36:df:be:55:05:67:39:db:
f8:80:ac:22:d7:7c:0d:31:01:a4:d5:14:8a:83:14:
af:11:6d:26:7d:b5:0f:bf:d0:ca:fa:15:70:e0:1e:
9b:74:22:37:53:df:71:aa:d7:4c:21:a5:c0:15:84:
ac:d3:64:df:52:1d:8e:0f:94:46:12:c4:4b:c0:f3:
5a:f6:86:23:b5:cf:05:f3:61:3f:01:2e:b6:fb:65:
4e:a9:28:27:cc:7b:31:0a:f3:ed:40:99:b7:5d:03:
da:67:bd:b5:54:28:63:8b:52:f8:f2:17:f6:96:7c:
81:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E4:FE:17:74:07:E8:B0:35:D9:63:00:65:13:55:56:0A:33:7B:00
X509v3 Authority Key Identifier:
keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c7:f0:a1:2a:74:7a:f4:0e:af:ff:d1:a3:86:0b:80:ab:26:
25:ba:30:f6:42:21:54:d1:d7:a4:82:91:fa:37:d2:c4:84:79:
b0:77:2c:1d:6e:0f:9a:19:f8:20:bc:e2:1b:f8:92:99:77:e1:
22:26:54:92:8f:d2:9e:23:32:d5:90:65:69:65:e1:05:93:04:
20:e4:aa:88:6f:8d:0a:e0:0d:fb:ed:2a:d9:35:12:27:b1:04:
ab:54:e0:b6:13:fa:40:af:79:a7:43:a0:27:16:31:db:b9:e9:
2f:b6:e2:69:a2:55:4c:5f:90:bf:f8:62:c6:dd:5a:0e:30:8f:
08:cf:20:66:3d:e9:14:6f:df:9c:b6:b3:07:ba:b0:5a:85:bd:
3e:cd:a0:67:32:a6:13:28:00:9c:e6:34:89:67:28:cf:e3:b9:
00:a0:e8:e7:56:0a:ff:f8:37:76:a4:45:0d:e0:62:37:69:49:
07:5a:7d:31:e8:25:11:2e:3e:34:c6:34:98:5e:bf:0a:a1:7b:
3d:d7:ca:50:e4:08:56:10:43:80:01:a4:31:11:6a:e8:5c:ea:
82:c8:93:84:0b:52:18:fa:47:2d:82:b9:a4:ef:fa:09:92:7b:
f0:7d:e8:60:98:c9:77:af:a2:bc:15:0e:2d:99:b8:a0:f5:95:
eb:78:b7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:16 2026 by rpki-client