Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier: Oo6nrWajei/VhYoKJ1G+51b5e3vYfszL4qilq+mvD/M=
Subject key identifier: FF:EE:CD:40:16:8E:2F:FB:A2:AC:1D:C1:92:11:F2:C0:76:2A:85:7D
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 019CAC0F9F67FAD90134C7D76EA763C566FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number: 1419
Signing time: Mon 02 Mar 2026 01:00:30 +0000
Manifest this update: Mon 02 Mar 2026 01:00:30 +0000
Manifest next update: Tue 03 Mar 2026 01:00:30 +0000
Files and hashes: 1: 5ATSOSiA10EtAdDvyzpiFcAS2U0.roa (hash: FEzcVGC/mYd4L2CAAAA7gfNC+WWkBe4b/x0RPbYqcaw=)
2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: xhWOffaC8iaswA7k2CE5ZulhaDSk+p0PSXFcMhzJW/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:9f:67:fa:d9:01:34:c7:d7:6e:a7:63:c5:66:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Mar 2 01:00:30 2026 GMT
Not After : Mar 3 01:00:30 2026 GMT
Subject: CN=ffeecd40168e2ffba2ac1dc19211f2c0762a857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:40:50:85:1b:ca:71:a5:c7:be:b0:04:e9:
69:02:eb:71:92:b1:f3:0e:6b:c7:6d:0a:ba:a7:c9:
a8:76:a0:a2:ab:25:c3:f1:70:8d:62:90:2a:f8:6b:
12:89:b5:f0:7f:3c:46:36:29:27:e5:2b:8c:2e:9e:
e0:10:13:9d:d5:3e:92:a6:f7:e6:39:89:19:ef:29:
02:47:c3:f3:43:2c:5a:f4:1c:03:f0:5c:24:9f:3a:
04:69:84:9d:dc:96:2d:49:fc:28:f0:96:11:73:40:
83:45:57:81:ed:50:07:8b:03:59:5b:01:ae:77:2c:
c8:11:62:18:38:62:cc:5d:8e:8b:d9:5c:d9:30:ed:
39:73:44:81:bb:f2:4f:4e:fe:d7:a2:14:7a:e6:ba:
28:19:32:30:f7:b5:59:35:23:7d:d4:4c:f6:0c:93:
8b:6f:68:17:6e:cf:43:ea:55:e7:05:93:66:63:e7:
d9:18:d4:d0:36:74:40:50:b5:3d:29:23:83:93:6b:
b0:d0:bc:22:52:40:56:2c:ab:eb:43:d9:88:55:06:
37:9f:b4:94:6c:8a:36:74:c5:cf:21:27:94:c3:b9:
6f:3b:04:37:74:b5:f4:56:6e:aa:cb:df:ea:f7:b8:
30:46:9c:0d:0c:c6:d4:ff:52:04:e5:7f:3f:50:6f:
de:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EE:CD:40:16:8E:2F:FB:A2:AC:1D:C1:92:11:F2:C0:76:2A:85:7D
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b5:c3:8d:a5:0a:4f:46:64:dd:16:d8:c6:b7:5f:4e:3e:da:
3c:ec:81:7a:ef:76:5a:33:b4:1b:99:b3:cc:01:b3:7f:c6:c1:
00:2f:25:82:a6:37:40:68:58:24:41:65:a8:99:5f:78:9d:39:
2e:45:6e:04:e3:99:d6:bd:f5:53:f3:9b:a0:47:e6:16:51:49:
8d:1e:3d:3d:95:a0:6b:0c:2b:89:6a:d7:2f:23:f6:3d:36:66:
f6:5c:a7:6c:b9:d7:3c:24:c3:48:8d:96:f8:e6:97:e7:e3:47:
63:af:7a:6c:76:5f:9f:57:3b:5f:6b:3e:22:7e:8e:26:f4:f9:
85:35:17:e1:9f:ac:e7:f1:b1:da:8b:96:b0:64:2a:94:c3:46:
4e:4d:d8:a9:ed:04:2a:f4:78:b0:e5:2d:51:71:8d:97:4c:cd:
8b:6e:5c:a4:33:fb:59:50:74:2d:29:9e:89:12:92:cd:ed:68:
11:e5:96:0b:f4:f9:d3:17:0d:2f:2b:78:7d:ac:20:23:30:d9:
87:19:f4:c3:91:6e:b8:0c:a5:8a:c3:98:30:76:cc:21:38:e0:
6e:43:f8:a4:33:91:f3:11:47:02:e1:d8:1d:72:39:74:f3:69:
22:6c:3c:53:6d:f5:48:36:7c:91:1b:4d:a6:b0:6d:b4:d5:aa:
4c:ea:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:00 2026 by rpki-client