Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: R8CIk/2GzzWbz/pzj9dL6R9LvuxBuEwm/FNhwhfxbIE=
Subject key identifier: 6C:B0:C7:69:2B:C5:6D:7A:09:9A:1E:48:84:7A:40:D5:3E:EB:23:24
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 019CAB33DDA2BB13AC401B169B2D30BC1FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 184D
Signing time: Sun 01 Mar 2026 21:00:28 +0000
Manifest this update: Sun 01 Mar 2026 21:00:28 +0000
Manifest next update: Mon 02 Mar 2026 21:00:28 +0000
Files and hashes: 1: 1qCi6Sq-_dCneR6GoHYrYL634Nc.roa (hash: si5wfQgczxPexpvI3zOZcdBSWeRL01fGRYVbjNQoh5k=)
2: Ey6_U3MNqlk5sSbuI2Okie2De-M.roa (hash: EHs4rxI+XpWq2Dq6A1mosS3qkiasZu2Py2spZNfHGZc=)
3: ZVmzCRGm6Ac5itIuDxSJvmt1oKM.roa (hash: vz5MSkdppxEecAJ47gQzG2qHkIp9VneH0S1nTYp4M1Y=)
4: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: YEPl2y2ag3e3728qxL8B2fM+QC+kkEV6oxywhtUjiGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:dd:a2:bb:13:ac:40:1b:16:9b:2d:30:bc:1f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Mar 1 21:00:28 2026 GMT
Not After : Mar 2 21:00:28 2026 GMT
Subject: CN=6cb0c7692bc56d7a099a1e48847a40d53eeb2324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:24:f4:8a:a3:0f:49:fe:f0:2f:19:cf:ca:
de:b1:a6:86:ce:14:ed:54:c0:ac:62:4a:1a:97:c8:
fc:40:73:3d:37:2b:0b:1e:8d:19:71:65:75:18:30:
bd:da:78:77:95:a1:05:ba:a3:c1:c1:b7:c8:df:dc:
a7:ef:56:8b:39:93:c3:52:19:34:72:1b:df:12:56:
69:15:49:6b:96:e1:4a:a2:14:e4:14:bf:d2:3d:4f:
aa:76:d5:b0:8a:b1:f6:b9:a2:89:7a:e2:a1:1d:14:
45:8d:82:88:4e:86:5d:02:af:e8:dd:54:c7:00:c8:
11:a4:ca:45:03:50:2a:f5:7e:1c:a1:53:1e:38:d0:
81:8b:d8:0d:87:b2:e4:e7:28:e2:7d:56:b1:5a:73:
57:b9:db:c2:37:01:3d:4f:9b:f3:f0:73:2c:8e:41:
5f:77:64:bf:c1:76:73:24:06:4f:29:6c:ce:ef:93:
4c:e9:a5:8c:f8:3a:25:6f:4f:20:e7:c6:d2:6b:12:
93:91:4f:60:4b:15:6c:e2:d5:9f:70:87:b2:18:67:
92:84:a0:59:87:36:22:02:5a:82:c2:37:f7:92:1b:
8d:fb:39:2a:1b:ab:93:bd:f0:13:3d:e1:3c:c2:ca:
e8:00:33:4a:e1:0a:66:b8:82:b0:c9:77:3c:7a:17:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B0:C7:69:2B:C5:6D:7A:09:9A:1E:48:84:7A:40:D5:3E:EB:23:24
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:78:31:8c:e6:0b:b5:1f:30:7f:aa:d0:b2:31:fa:fe:a4:1c:
9f:98:49:23:30:55:67:fe:3c:ed:c8:a6:76:46:d3:65:0e:88:
02:8c:6b:fd:20:08:04:5e:77:d0:39:a7:16:6c:ce:85:7f:57:
8e:88:c9:3a:09:9c:be:5d:f1:b5:f9:a2:40:83:2c:60:bf:ef:
64:ce:8d:6e:26:97:71:14:09:04:ba:d0:95:45:90:a4:7e:32:
00:d5:e3:8e:9d:c4:3d:36:8f:9a:ae:e4:73:57:b8:6a:05:08:
48:f1:1a:b9:f6:24:5f:cc:81:ed:37:1a:ed:b3:b5:8e:55:c5:
e1:f7:a3:92:ba:85:2e:1c:b9:2c:84:e3:be:61:e8:c7:b0:2c:
78:8c:3c:fc:14:ee:54:39:f9:4d:f8:94:63:d5:71:0d:ab:05:
eb:83:97:72:da:b4:fb:6b:d4:8b:a6:35:7b:69:98:7c:ed:a1:
7c:55:ad:8f:59:26:bf:ba:34:f0:d1:3d:f5:e9:d8:49:9a:7d:
35:2c:96:ce:45:de:e7:ff:43:10:73:bb:0b:bf:69:f0:1d:f1:
3f:eb:c6:af:fb:44:f8:6c:98:9f:45:67:36:97:30:be:5e:02:
fe:b0:50:bb:52:f0:12:36:63:4b:cd:61:45:77:58:85:9c:83:
29:81:7b:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM92iuxOsQBsWmy0wvB+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYTJkNjM3Y2IwYWNjZjg3MjFmNDNlMjY2Y2UyMTNmOGVk
ZGQyNmEwHhcNMjYwMzAxMjEwMDI4WhcNMjYwMzAyMjEwMDI4WjAzMTEwLwYDVQQD
Eyg2Y2IwYzc2OTJiYzU2ZDdhMDk5YTFlNDg4NDdhNDBkNTNlZWIyMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rwk9IqjD0n+8C8Zz8resaaGzhTt
VMCsYkoal8j8QHM9NysLHo0ZcWV1GDC92nh3laEFuqPBwbfI39yn71aLOZPDUhk0
chvfElZpFUlrluFKohTkFL/SPU+qdtWwirH2uaKJeuKhHRRFjYKIToZdAq/o3VTH
AMgRpMpFA1Aq9X4coVMeONCBi9gNh7Lk5yjifVaxWnNXudvCNwE9T5vz8HMsjkFf
d2S/wXZzJAZPKWzO75NM6aWM+Dolb08g58bSaxKTkU9gSxVs4tWfcIeyGGeShKBZ
hzYiAlqCwjf3khuN+zkqG6uTvfATPeE8wsroADNK4QpmuIKwyXc8ehdrxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGywx2krxW16CZoeSIR6QNU+6yMkMB8GA1UdIwQY
MBaAFKGi1jfLCsz4ch9D4mbOIT+O3dJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQt
ZTIxOTc0YTI5NGJhLzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9lZGJmNDQtMzczMi00NGZmLWE5NDQtZTIxOTc0YTI5NGJh
LzEvb2FMV044c0t6UGh5SDBQaVpzNGhQNDdkMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHgxjOYL
tR8wf6rQsjH6/qQcn5hJIzBVZ/487cimdkbTZQ6IAoxr/SAIBF530DmnFmzOhX9X
jojJOgmcvl3xtfmiQIMsYL/vZM6NbiaXcRQJBLrQlUWQpH4yANXjjp3EPTaPmq7k
c1e4agUISPEaufYkX8yB7Tca7bO1jlXF4fejkrqFLhy5LITjvmHox7AseIw8/BTu
VDn5TfiUY9VxDasF64OXctq0+2vUi6Y1e2mYfO2hfFWtj1kmv7o08NE99enYSZp9
NSyWzkXe5/9DEHO7C79p8B3xP+vGr/tE+GyYn0VnNpcwvl4C/rBQu1LwEjZjS81h
RXdYhZyDKYF7Dg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:39 2026 by rpki-client