Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
File: oGBriq1VPwlIx6iU1oZxhw64LLA.mft (raw, json)
Hash identifier: TkRpnfcnrc3/C9Sv+witb2zEz7KfVy9NjSg79xTBpso=
Subject key identifier: B4:AD:78:44:2F:8B:64:2D:DA:78:41:06:BE:B9:CB:B6:16:F1:18:15
Authority key identifier: A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
Certificate issuer: /CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Certificate serial: 019CAAFD95DBF0421F91CFB76EF9C2B507E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
Manifest number: 164C
Signing time: Sun 01 Mar 2026 20:01:11 +0000
Manifest this update: Sun 01 Mar 2026 20:01:11 +0000
Manifest next update: Mon 02 Mar 2026 20:01:11 +0000
Files and hashes: 1: GJBycD0z-Vwt49rxYIkUFvJmg34.roa (hash: ntE/dfk2CI0GAxVSBHDhu+/dJpNEVggZuAuaXY3BXZQ=)
2: jVpJP6BkkS37GOi50LHsrQuqbCY.roa (hash: U3tlxtXg3FRS8xNHFRy4ADqG3hKBCU+Zah1l7VaUwVk=)
3: oGBriq1VPwlIx6iU1oZxhw64LLA.crl (hash: Kai7gCQ3lpKg5J8WMLSUwdZLu/Z+2ZidfOQMngmJPNw=)
4: ytyVm3S7Nek5fptdKjR4lszyxVE.roa (hash: fg0+8WvdZTPMhDV0ypT87n2uD/xPs/qDgjBlkh4kxkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:95:db:f0:42:1f:91:cf:b7:6e:f9:c2:b5:07:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0606b8aad553f0948c7a894d68671870eb82cb0
Validity
Not Before: Mar 1 20:01:11 2026 GMT
Not After : Mar 2 20:01:11 2026 GMT
Subject: CN=b4ad78442f8b642dda784106beb9cbb616f11815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0b:53:17:c3:20:8c:15:83:1f:36:a6:8a:bd:
54:e6:ec:44:5a:a4:2b:f5:5e:98:0a:84:5e:36:51:
e5:61:eb:ca:37:8e:06:d0:92:6e:aa:9f:3c:0b:d7:
58:0f:8d:ed:80:5c:d1:f3:61:6c:16:89:5d:2a:5f:
bc:c2:44:26:ea:3a:89:7d:cb:d4:fd:77:25:bf:a2:
2d:06:5c:bb:b9:aa:53:47:3f:e6:21:7c:a2:1f:66:
f0:7d:98:4e:2a:81:4f:de:9c:5f:62:e5:92:0a:04:
ab:69:d8:07:04:f0:e1:6c:e8:f3:98:bb:3c:99:ba:
13:1b:de:b1:bb:53:d2:a6:05:f1:59:a8:7c:eb:21:
e0:89:7c:db:3e:08:58:0d:c8:92:c6:97:ab:b3:72:
d3:a1:8f:02:50:38:05:bd:3a:7e:9b:71:4b:bc:9f:
b3:44:09:4b:94:49:1b:59:0a:9c:e1:7d:82:9e:b8:
e1:00:1a:c9:a1:73:98:95:7c:d6:04:87:de:86:e7:
f0:3b:4c:f5:78:67:0f:10:46:00:26:9a:6c:8e:01:
6b:aa:87:4d:28:0d:ec:21:90:80:81:1e:83:c9:3d:
ba:b8:17:78:ad:f3:2b:7c:3b:5a:4d:e1:53:5f:04:
f1:52:e7:a1:8c:a8:60:eb:27:3f:27:a2:f9:f0:47:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AD:78:44:2F:8B:64:2D:DA:78:41:06:BE:B9:CB:B6:16:F1:18:15
X509v3 Authority Key Identifier:
keyid:A0:60:6B:8A:AD:55:3F:09:48:C7:A8:94:D6:86:71:87:0E:B8:2C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGBriq1VPwlIx6iU1oZxhw64LLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9e2dfd-f2e9-416d-8f1f-bb3431fe0285/1/oGBriq1VPwlIx6iU1oZxhw64LLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2b:0a:7e:58:dd:4e:31:41:e5:51:e1:2a:c1:3c:a5:89:87:
5a:7a:f4:eb:b4:e4:d4:20:fb:a3:4c:33:94:0a:8f:72:70:11:
98:01:2b:06:d1:62:64:cf:a5:d2:cf:7b:76:50:61:34:0a:9a:
13:3b:9c:04:50:62:a7:f8:61:7b:7c:92:bf:c7:22:44:3f:03:
53:11:a2:ff:9c:40:8b:84:53:6d:9e:e4:a0:12:d7:39:5b:65:
fd:f1:19:3d:e5:4e:11:d0:1f:c8:77:a2:ac:71:a3:b9:5d:ef:
8d:72:eb:ba:02:b3:52:7d:8b:21:92:58:47:8c:de:7d:98:2c:
73:53:36:a1:72:41:d1:c7:bc:45:ed:d1:17:5b:6a:07:3c:db:
f6:5e:1f:45:a5:c0:d7:29:ea:99:72:29:a8:66:71:d8:11:d3:
a7:b4:6a:3b:ac:f5:21:9e:ae:20:02:a1:90:f6:fb:6f:88:a0:
2b:7a:37:7b:ae:c8:63:e6:04:d0:63:9a:b3:c4:5f:91:1a:0b:
19:30:3f:bb:b7:77:93:de:36:35:72:84:c3:16:e0:8a:5f:4f:
bf:ef:29:49:63:35:b8:28:73:a0:1e:8d:6a:a4:9f:d7:62:96:
0c:b3:ca:c6:6b:2e:25:17:a6:86:aa:7c:ea:02:fb:c5:6f:ca:
59:ea:04:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:53 2026 by rpki-client