Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
File: o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft (raw, json)
Hash identifier: g90Ef9WLT00+IvnW5ejX8OcWwjXQunHTLXJ1HySgKkI=
Subject key identifier: 8D:25:5B:09:A2:FC:53:EE:87:EE:D6:76:AA:94:CB:20:77:9C:68:AE
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 019D2704A1F3D3340CF7DA59B133111E9A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
Manifest number: 0EA6
Signing time: Wed 25 Mar 2026 22:01:48 +0000
Manifest this update: Wed 25 Mar 2026 22:01:48 +0000
Manifest next update: Thu 26 Mar 2026 22:01:48 +0000
Files and hashes: 1: 5u5zeseIIAH3rUGwZvq3TcUwkp4.roa (hash: TkiEDmRqN7mva7bSv299QA1BJ0MJDg4yMGlz2EkHVWc=)
2: htYhWUioYCDJo6nxIcNKky94uws.roa (hash: k5FO6tYZGH00rUDjMFodEsOJSsR9ms34ekdAnYB+Tzo=)
3: o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl (hash: EhgwbFqYKzxsca5fBFBIkDT8RjHq8jul7HMYA2tbZoY=)
4: oBPZxPOpZv6eWUPg75KmO94jUtg.roa (hash: 18Vbpez1EJoqEvymbj/9uf7KA7iwDu8RHYxOgDkRI58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:a1:f3:d3:34:0c:f7:da:59:b1:33:11:1e:9a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Mar 25 22:01:48 2026 GMT
Not After : Mar 26 22:01:48 2026 GMT
Subject: CN=8d255b09a2fc53ee87eed676aa94cb20779c68ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:e6:51:d3:e9:43:db:0c:1a:a7:96:03:ea:
b4:86:d2:67:09:bf:05:ca:69:25:b0:f0:5b:6a:bc:
73:03:01:5c:bd:a4:d4:b2:49:4c:b1:71:f1:f8:a0:
c1:6a:6a:51:e7:84:fb:a0:0d:19:15:76:be:a4:75:
97:f5:6e:c5:6a:79:c5:fd:01:84:e2:3b:ea:4b:4a:
ce:5c:42:e1:6a:e6:8a:84:36:33:ed:9e:6d:1c:af:
d0:e1:70:e8:40:f7:87:85:bb:fd:28:a1:89:a2:c9:
4c:99:f9:bc:96:2f:f9:73:e8:b3:90:c3:eb:30:d7:
8e:36:7c:96:17:3a:1a:a4:49:ae:1d:fb:98:5c:4e:
bf:0d:3a:03:19:20:ec:eb:b6:6e:dd:27:75:97:92:
c9:ec:ca:a7:77:09:6b:25:fa:b6:54:5e:fa:2d:0d:
49:7d:8d:e2:62:a3:10:8f:cb:cf:0b:0e:1a:a3:14:
ce:0e:52:cf:37:d9:e3:87:f1:d0:64:19:52:dc:23:
22:a9:60:a8:96:76:09:c9:a5:f7:b1:73:28:52:ac:
7d:2b:13:89:86:ae:65:31:4e:80:8e:8c:4e:f1:ca:
97:c3:1b:da:17:b0:ed:86:ad:9d:a8:41:54:8e:37:
7a:ac:a6:d8:3c:65:d2:00:b9:bd:77:ac:b5:36:ab:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:5B:09:A2:FC:53:EE:87:EE:D6:76:AA:94:CB:20:77:9C:68:AE
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a7:f0:c2:46:69:21:c6:7f:81:d4:96:4e:58:4e:b2:3d:bb:
e5:1c:d6:ff:64:5c:1d:8f:80:f6:9b:65:27:6e:2c:20:29:ea:
dd:b3:6b:72:d9:03:8f:2e:89:2b:f2:cb:73:0f:29:c6:06:ba:
31:7b:46:a2:09:35:c1:fb:68:62:63:2e:4e:31:8a:93:66:92:
c1:a1:db:fe:8b:e1:19:fb:1b:60:e9:3f:16:39:40:70:1e:1d:
db:5a:76:42:5c:11:f2:77:7b:8b:14:6d:41:35:5f:69:74:5d:
d4:a2:c8:a4:20:ea:10:b2:a6:86:d2:78:40:73:01:eb:b0:ba:
ca:82:62:9b:ec:95:d2:bf:63:9c:96:2f:90:3f:a5:cf:3a:eb:
d0:52:f3:a8:cf:63:da:3d:a2:31:9f:9a:49:cc:52:5f:9b:51:
70:06:03:a2:78:77:96:d8:a8:42:ba:ba:34:04:15:2b:b6:3e:
27:4e:b3:80:c8:28:26:20:07:2b:33:2a:69:55:d3:57:fd:91:
cc:84:0a:ea:59:79:21:1b:4b:48:71:70:dc:ca:ff:89:e6:36:
5a:03:56:5b:b6:35:64:7b:4f:80:d3:cc:f7:0b:fb:15:65:51:
44:b1:b8:66:ec:3c:b7:69:02:a4:c2:db:88:96:00:ae:c4:f9:
8a:a7:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:01 2026 by rpki-client