Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: gtHuZ9yEfHoddWfBJ+qMy/wyuoLiyMHDGqxl6vTNSeY=
Subject key identifier: D3:FE:7A:3E:7D:B7:CA:EA:29:95:38:7D:39:0D:E6:50:74:54:57:71
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 019CAEA35A648BB8E234BC2774BA37D71C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 184F
Signing time: Mon 02 Mar 2026 13:01:06 +0000
Manifest this update: Mon 02 Mar 2026 13:01:06 +0000
Manifest next update: Tue 03 Mar 2026 13:01:06 +0000
Files and hashes: 1: D6zgSHbiztj7O2I1DW60de0ptBk.roa (hash: B8D0W1X4lmeoQhtBDBRUB/VyUa2Mld6fBfnDVCoTkMo=)
2: Ed9sbxyb8jvrhvxZjbOv3NsPiaQ.roa (hash: qKAq59OeZGLNvwwrou6DkFU90K39DNnEvwuBkqrbCks=)
3: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: 2WVuSy0YQq7/RUr4FkHang13H1m+sUPrJwXk3Zhnsew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:5a:64:8b:b8:e2:34:bc:27:74:ba:37:d7:1c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Mar 2 13:01:06 2026 GMT
Not After : Mar 3 13:01:06 2026 GMT
Subject: CN=d3fe7a3e7db7caea2995387d390de65074545771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8b:a7:4a:64:6d:77:0d:31:e2:f1:2b:c6:0a:
5a:6e:d7:b1:c3:da:f7:67:67:1d:8b:d7:e6:28:4e:
6b:0a:f0:cf:12:12:40:63:06:0f:43:91:92:15:ea:
e7:db:cd:49:12:7e:2c:33:f2:6a:5b:5f:9f:53:1e:
cf:f0:69:88:d0:30:32:87:76:41:81:6a:ac:6e:d7:
bd:57:5e:67:58:c0:0c:6c:66:04:87:a5:b7:43:2b:
aa:19:a6:57:79:b1:48:1d:6d:e1:cc:cc:d9:ea:76:
d2:e4:b0:ff:0b:33:01:76:8d:48:67:30:c7:15:09:
62:ea:62:23:8c:1a:90:c7:6f:60:f7:02:65:7d:a6:
fc:d2:d6:4b:c3:67:59:93:0d:1d:0b:db:36:0f:2d:
87:60:eb:6f:ad:76:45:2c:33:18:94:c3:ae:8b:57:
4e:86:77:a8:f7:4e:3a:11:62:a7:6f:26:1a:4d:b3:
e7:b8:8e:d6:76:45:5d:ea:1a:9e:29:a7:fd:7d:3a:
68:62:5c:73:44:90:ba:cd:d7:8e:5a:0e:5a:f7:22:
2b:a9:81:4f:8b:fd:2d:68:56:86:c3:4c:3c:6c:be:
98:65:6a:78:a5:d1:1a:4f:5a:e1:99:ad:18:83:ec:
59:ef:2d:3a:29:fb:4a:e6:a3:4e:c9:b8:49:8c:d3:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:7A:3E:7D:B7:CA:EA:29:95:38:7D:39:0D:E6:50:74:54:57:71
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:18:49:94:d2:f0:ac:72:30:10:05:a1:50:85:b4:ee:3d:df:
76:d8:2d:57:c0:20:a9:19:b9:4c:46:76:cf:dd:42:e7:01:07:
97:d7:e4:60:7b:e7:d3:6f:74:30:fd:45:da:39:3c:2a:8a:a9:
41:1c:75:29:27:3e:13:e2:cd:bb:75:68:73:15:3c:55:77:6f:
47:3b:3f:3f:e6:4b:b2:16:66:28:90:50:07:1f:69:36:42:f3:
84:7a:f7:70:54:ba:59:99:50:aa:a7:ca:43:f0:13:fc:35:f2:
43:6e:43:ad:5e:f2:6a:eb:b8:51:e1:91:64:79:b7:42:c7:b0:
3b:79:c1:b0:20:2a:ea:28:c5:a5:bb:61:ca:0c:7d:3b:84:84:
1f:01:7f:80:bc:a1:3c:f5:3a:c4:f6:87:1f:00:f1:3d:bc:2f:
ce:f6:74:08:d2:48:b2:a1:bf:75:04:86:6e:bd:d2:cd:97:7f:
7b:b7:89:81:97:e2:c0:f8:32:59:26:d8:04:e3:36:d1:44:91:
8d:0f:c9:3c:2e:71:25:3f:6c:d0:f9:d8:42:6e:53:32:1d:40:
c9:9c:73:53:f6:19:87:2c:17:06:c2:25:e7:6f:2c:69:ba:1a:
8e:5c:ce:cd:b9:63:3f:b0:0e:d8:d2:7f:8b:04:e6:e1:5f:6d:
13:b2:5a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:45:30 2026 by rpki-client