Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: AWajGm+aTlvkwi8fgJipB5VGK4rYSOK3ANOavw9DnJ4=
Subject key identifier: F1:B6:3E:08:5E:CB:C4:8A:F9:D5:5E:87:54:EF:37:CF:7F:B4:DD:51
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 019D273AAC7E8F8BEF663DA338637AA956BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 1120
Signing time: Wed 25 Mar 2026 23:00:49 +0000
Manifest this update: Wed 25 Mar 2026 23:00:49 +0000
Manifest next update: Thu 26 Mar 2026 23:00:49 +0000
Files and hashes: 1: Lw6dpIVKTrHkqnvz6_8ZfhY3LHE.roa (hash: zWKT6y6B8vxLNvJ+sCTyWUsXCNlPOrbo7d9YXIBVvAM=)
2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: EasDaD1ue6uQkDHilNjKkmnCKiEdgX0MorFomNXgFSU=)
3: yGo3bd_PBkdSOHP97aSwO25CbMs.roa (hash: 4G7Mo+idHxtoGcT5AVhMItxtHJ9uui0A13uK+5ubrzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ac:7e:8f:8b:ef:66:3d:a3:38:63:7a:a9:56:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Mar 25 23:00:49 2026 GMT
Not After : Mar 26 23:00:49 2026 GMT
Subject: CN=f1b63e085ecbc48af9d55e8754ef37cf7fb4dd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:a8:35:19:e5:61:ec:82:91:e1:5d:b9:43:
c2:04:40:dc:03:70:5f:6b:69:2c:76:13:2d:31:d3:
33:5d:8c:cc:bf:87:0b:f2:6b:4d:2a:a9:ca:aa:f9:
d1:7f:0e:9f:4c:1b:45:f1:31:38:b8:36:9f:55:37:
aa:b4:d4:e6:2e:df:8a:15:31:be:60:e7:04:cd:54:
0f:15:7f:0f:77:bc:a9:8b:ed:92:20:ee:47:54:89:
b4:8d:0e:8b:39:a1:de:6e:45:8e:b3:1a:8d:16:7a:
b9:da:02:dd:14:bb:af:e2:9d:d8:89:7a:79:d5:e8:
a2:97:b1:85:ef:9c:da:d0:72:49:40:b7:4d:2e:a3:
87:df:b8:dd:66:a3:e7:32:6c:e7:59:fa:a1:32:94:
11:84:4e:c8:66:57:b4:b6:81:e1:19:d4:c1:5a:7c:
79:d6:5d:07:16:6c:f7:23:71:89:95:5b:3f:b2:b3:
47:73:b6:d3:2f:06:a5:ad:8d:56:57:5e:33:33:9a:
6f:6c:ea:71:8f:ba:87:ad:fe:d4:ed:6c:49:51:5f:
13:90:51:cd:61:fa:09:72:d0:6c:e4:34:8b:c1:27:
e3:e5:ac:44:81:a2:35:e6:03:17:f8:f6:f1:59:bc:
50:60:db:19:1f:f6:1f:fd:35:41:d6:1d:dd:c0:38:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:3E:08:5E:CB:C4:8A:F9:D5:5E:87:54:EF:37:CF:7F:B4:DD:51
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:33:e2:0d:4a:cb:cb:2b:6f:d1:3a:3e:d8:4b:e8:e7:d4:7b:
b4:9c:9d:1b:41:c0:bb:af:c9:bc:64:83:8d:22:dd:cc:7f:a6:
72:f4:76:e0:50:25:48:67:77:31:ff:98:86:17:93:52:b3:c0:
99:0b:f8:59:40:61:63:25:8a:61:8d:97:c6:8c:01:14:f7:12:
cc:3a:45:d1:0b:c0:99:e2:4d:6b:cf:32:fc:c7:07:ee:cc:4a:
67:06:26:2a:2c:22:a9:60:c5:58:fe:81:4b:da:a0:c5:de:7a:
84:1d:d1:ce:dd:ee:f7:cc:05:36:77:74:80:ca:28:63:ba:27:
7c:0a:12:a3:e6:2e:6e:23:53:f5:03:1f:30:dc:c6:8f:4f:5a:
db:da:ec:1d:41:d0:82:36:5b:4b:e4:4e:5a:00:ad:45:6d:91:
aa:61:01:8c:80:a1:87:4b:6f:7b:b2:b2:6d:ad:b5:72:01:72:
da:34:51:8a:02:4a:6b:1b:e4:a9:8f:ab:7c:25:4c:62:c4:e7:
78:6a:69:22:a0:a9:e9:e6:da:7d:7b:22:a1:3d:b5:5b:b8:8c:
57:11:47:5b:8e:d0:05:55:79:80:59:cd:fe:73:85:3c:95:d2:
64:fd:f4:51:79:fa:b3:60:77:2a:1d:85:e1:7e:18:9e:22:72:
c3:5a:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:21 2026 by rpki-client