Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
File: T0_oHzIxJo9848MUpJaoLMInfDs.mft (raw, json)
Hash identifier: ZP3R3liGDIEmHpMfgI3o6urv1S96OTkpAZKP5jwm4wM=
Subject key identifier: 90:CD:A4:58:99:B9:E5:22:8F:32:CB:4E:E6:94:BD:9E:7B:08:33:30
Authority key identifier: 4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
Certificate issuer: /CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Certificate serial: 019D26CD7B3AE19F0AE2D39E80C29DECA070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
Manifest number: 15FF
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: 6NIaTUJDouCrOz0JAuSF_NduOwA.roa (hash: hDytd6duXPNmzRp/8kY+LISu/ZM6ohz2sTIHpo5hKjg=)
2: T0_oHzIxJo9848MUpJaoLMInfDs.crl (hash: r70aCAE4VNcY8iRcaVtchiv/kj1pxYfPf3dnofg1t1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7b:3a:e1:9f:0a:e2:d3:9e:80:c2:9d:ec:a0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4fe81f3231268f7ce3c314a496a82cc2277c3b
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=90cda45899b9e5228f32cb4ee694bd9e7b083330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:86:e3:2e:0b:5b:52:9c:ce:a1:4e:a0:fa:
b3:48:8b:31:57:b7:ac:1d:76:94:22:e2:1e:ec:60:
34:f3:42:89:df:39:3b:f1:d8:54:df:e9:b9:7b:8a:
65:1f:64:43:e1:4f:e3:2a:fa:47:c3:15:40:df:67:
df:c2:c5:de:98:66:70:9a:c0:cc:89:6c:8d:04:a7:
3e:ce:55:ae:a4:36:ee:b2:a8:9b:2b:29:f3:c4:a9:
9b:90:f7:74:3e:47:f3:9c:80:ff:ac:6b:c2:b0:b0:
38:46:f5:6d:cc:93:49:55:c5:96:73:7b:20:ae:49:
41:68:11:7e:56:6b:28:3e:2d:d6:09:a3:bb:06:5f:
86:6d:2b:38:e9:0c:7e:46:eb:f9:45:40:f0:bf:4a:
af:3f:e1:ec:c1:98:26:b4:f1:88:44:be:d4:d2:a8:
de:ab:0d:84:e3:df:82:39:dc:f6:a6:0b:bd:5c:e3:
5e:0b:4a:b8:0d:3d:6d:d4:36:d7:f2:f9:0a:81:30:
62:a0:65:e5:7f:36:e3:fb:2b:2e:2d:fd:43:6c:92:
59:04:37:32:56:06:d4:76:a8:d0:76:53:ff:9e:98:
50:a3:c1:27:f9:8f:16:cd:61:06:95:64:9c:c2:ba:
52:51:e9:80:fb:e5:76:86:93:79:5f:9f:41:ff:f2:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:A4:58:99:B9:E5:22:8F:32:CB:4E:E6:94:BD:9E:7B:08:33:30
X509v3 Authority Key Identifier:
keyid:4F:4F:E8:1F:32:31:26:8F:7C:E3:C3:14:A4:96:A8:2C:C2:27:7C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0_oHzIxJo9848MUpJaoLMInfDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/89460c-132f-4c91-bd81-cfc0fcba83a2/1/T0_oHzIxJo9848MUpJaoLMInfDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:1a:ee:bb:84:55:00:b7:8c:38:ae:7d:6e:bc:f7:08:95:b4:
11:47:fc:77:8d:88:46:f2:1f:5c:cc:04:43:37:8e:1f:0e:82:
f4:00:11:c4:9c:0d:3d:ef:3f:85:b7:32:2f:af:d7:cd:cf:6d:
66:9c:e6:73:5e:c6:5d:d9:3e:82:47:2e:ea:79:ce:56:36:35:
ce:5b:e9:65:d8:cd:0c:5d:3b:00:13:0f:fa:44:2f:dd:df:73:
83:5f:cf:b2:f4:09:43:b0:21:7e:8a:20:22:14:c7:5c:0d:bf:
6d:c7:b9:52:eb:55:c0:75:4d:0a:9c:2b:68:22:66:85:66:df:
21:dc:cc:18:b5:e9:f1:d2:60:5e:ce:2d:38:90:30:0e:fa:a4:
b7:85:67:d7:f7:03:12:49:39:a7:86:ed:cc:c3:60:de:d0:18:
46:5b:98:1b:07:48:6e:70:ef:7d:21:78:29:1c:30:5a:8f:64:
b1:d7:1a:0f:e9:61:a2:71:06:c2:cf:51:17:80:d5:e4:4a:fe:
3c:cc:89:06:46:78:ac:e8:ad:94:25:56:55:32:8d:31:bd:ed:
31:8a:d7:4f:ef:91:e7:81:76:be:79:ff:5b:92:99:48:f4:90:
53:89:a0:00:f1:a5:8c:8e:7f:d5:75:c0:f0:77:ce:3f:2a:5a:
ca:79:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:25 2026 by rpki-client