Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
File: oIy1sm6mXYH99jodmyAFcJEAA7A.mft (raw, json)
Hash identifier: GZc/FmzTXTyp+QuIFAia1CEozYNnK1DkrRNlF+RkQGU=
Subject key identifier: E9:04:40:7F:3D:3E:E8:94:1C:D3:87:B8:16:12:A0:96:05:B6:42:02
Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Certificate serial: 019CADC7EA173290573D14C24CB43E6E59AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
Manifest number: EF
Signing time: Mon 02 Mar 2026 09:01:25 +0000
Manifest this update: Mon 02 Mar 2026 09:01:25 +0000
Manifest next update: Tue 03 Mar 2026 09:01:25 +0000
Files and hashes: 1: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (hash: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M=)
2: oIy1sm6mXYH99jodmyAFcJEAA7A.crl (hash: YUowJmutD85K9g9NUVAUh2efbIhenKLePw1pod2zSwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ea:17:32:90:57:3d:14:c2:4c:b4:3e:6e:59:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0
Validity
Not Before: Mar 2 09:01:25 2026 GMT
Not After : Mar 3 09:01:25 2026 GMT
Subject: CN=e904407f3d3ee8941cd387b81612a09605b64202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:86:c9:ce:7f:da:39:79:48:c3:e8:20:41:
e3:0e:b8:a6:b9:18:f7:a7:80:f4:f2:03:6b:3b:41:
d2:45:a7:a1:38:bb:5e:7e:79:63:c7:73:12:2f:32:
33:5f:e6:53:01:24:e8:9b:e2:f2:5f:02:a4:27:70:
74:23:d9:f6:6f:3c:88:42:63:2f:9b:0b:f1:71:af:
61:6a:26:d8:08:c7:66:e3:97:4e:1b:24:e1:c4:f7:
ab:80:40:8f:a4:72:09:2c:e7:42:9d:02:55:a2:98:
11:3f:e4:85:0a:21:86:d9:33:5b:68:ab:ac:9c:32:
7b:6c:3f:e7:d3:c1:ac:46:92:25:34:69:2a:80:8a:
4d:0f:f4:1c:a2:a0:9f:8f:80:24:c0:4f:45:32:13:
80:67:34:03:d8:69:31:de:98:d5:78:44:47:f2:e8:
77:29:c2:3b:2d:97:fe:69:07:ad:ae:8b:2c:84:ba:
8f:16:a4:69:f7:aa:de:ca:2b:8c:cb:8f:8f:52:2a:
b6:02:0d:ef:6c:f1:0a:6c:cc:7b:29:a6:c9:cb:49:
cc:71:52:81:d8:37:df:3f:66:66:ad:6a:33:ad:e9:
17:e4:32:d5:eb:92:85:77:6f:8e:a3:21:d2:00:7e:
44:d3:fa:57:11:a9:ac:57:8a:c8:51:2f:23:47:7f:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:04:40:7F:3D:3E:E8:94:1C:D3:87:B8:16:12:A0:96:05:B6:42:02
X509v3 Authority Key Identifier:
keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:84:72:90:7e:fc:cb:ca:46:99:1e:17:96:3f:06:33:43:54:
56:62:ee:49:7d:73:67:f1:6b:ac:a9:9c:65:30:5d:40:14:e2:
08:af:e9:98:c3:0c:96:eb:8d:e1:1e:16:da:5d:9c:16:74:5d:
4d:00:f7:4f:20:52:23:cf:bc:b4:06:33:ec:19:c8:b9:f5:2a:
76:bc:e0:0f:a5:55:c4:4a:6f:7e:64:ff:5e:c5:75:ea:77:cc:
1d:6a:75:34:c9:9d:eb:78:dd:37:f0:16:76:23:f9:fe:b4:3b:
81:e3:5f:a2:78:46:d5:ff:ae:2b:32:5b:56:74:9d:24:ef:a1:
d2:70:f1:cc:bd:de:aa:b5:26:29:4c:03:5b:f7:68:dc:bf:16:
d6:25:bb:f8:32:cf:6a:86:3e:8d:ef:f5:8c:e6:cf:9e:98:46:
51:b3:9b:77:cb:d9:8f:07:b9:84:54:27:9b:83:32:19:e8:ec:
72:88:94:a1:eb:25:f9:c1:b5:1f:ae:d8:8d:19:59:76:71:b5:
eb:32:90:9f:3d:19:a9:97:37:5c:e5:56:51:97:b7:78:8d:36:
bc:0f:68:70:11:88:11:30:0d:79:1d:10:2f:ce:28:d1:ce:03:
c3:fc:d3:55:c7:90:26:c3:7f:ca:ce:f0:33:43:5c:9d:78:db:
eb:b6:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:08 2026 by rpki-client