Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier: +mZN6vnIa6qc8mbqY6dKZbW8R4uL8QKYZFh0JYyWQTE=
Subject key identifier: C3:5E:BA:E9:80:B0:B0:7F:E5:A8:84:2A:0F:1A:96:1B:80:C6:CE:44
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial: 019D2583D094B581A2CEEE5175271EB8B5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number: 04F8
Signing time: Wed 25 Mar 2026 15:01:28 +0000
Manifest this update: Wed 25 Mar 2026 15:01:28 +0000
Manifest next update: Thu 26 Mar 2026 15:01:28 +0000
Files and hashes: 1: CWrDgc5NbM6Zs9itj9MrhDXauLk.roa (hash: 560ydlJiyR+07bXN/UJ/XSK5/4Gksiqy4Mjbt8hjlzc=)
2: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: URMP51fYd21JB8DleiBKGCPd2lpXiNq7LQBv4N2oGW0=)
3: xf3fvrapGPL0YVXoyYDdzlTvzBQ.roa (hash: Lr8wCklzvs9FPPUMnaTVlsRfmWB1G14CuyO51jqEGdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:d0:94:b5:81:a2:ce:ee:51:75:27:1e:b8:b5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Validity
Not Before: Mar 25 15:01:28 2026 GMT
Not After : Mar 26 15:01:28 2026 GMT
Subject: CN=c35ebae980b0b07fe5a8842a0f1a961b80c6ce44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:03:59:c1:33:97:14:cf:ec:ab:fa:41:bb:
7a:69:28:ac:9a:01:66:a7:06:6e:bc:96:74:ce:ff:
5b:77:4d:bc:52:ab:47:a7:4a:8d:9d:12:7d:87:90:
70:9c:5f:0b:01:4d:cf:e9:9f:27:99:a1:7d:52:e2:
7d:cd:04:e1:98:91:f0:62:86:9c:b6:ab:52:55:e9:
db:38:b6:44:c1:79:d6:e2:72:c9:74:b6:09:fb:b4:
3c:6d:24:39:2d:71:0e:4c:40:d8:a3:6d:65:cc:a1:
e7:38:4a:4b:c2:ab:6b:ae:7a:c5:f9:26:89:0e:ab:
43:41:ce:bc:1d:d4:73:37:3c:b6:1f:b6:c3:ea:5b:
81:3e:2c:cb:f1:b1:1f:f4:49:2f:a9:4f:91:29:22:
8d:91:91:6b:d1:50:7d:65:81:12:d3:94:5c:04:db:
99:4d:41:bd:bf:e5:61:ad:db:04:96:bd:f4:01:73:
d1:7e:e6:f1:bb:7e:a6:0a:0d:a2:8a:33:66:1b:5b:
1c:7b:8a:74:9d:68:cd:14:83:13:1d:d4:af:b8:7a:
7b:70:04:fb:8f:df:d0:7f:15:02:64:1f:15:b4:7a:
67:86:9b:6b:9a:66:3e:68:55:74:85:5c:9f:db:79:
97:0c:2e:f8:9b:a4:e0:cb:cf:8c:7d:ce:11:06:7d:
db:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5E:BA:E9:80:B0:B0:7F:E5:A8:84:2A:0F:1A:96:1B:80:C6:CE:44
X509v3 Authority Key Identifier:
keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e3:12:10:5d:5c:e9:31:d1:2c:15:ab:d1:92:6c:56:d3:bf:
0b:8a:04:8c:bd:30:10:24:ac:3d:00:d4:c5:91:5a:c7:ee:20:
9d:21:94:ff:c6:71:ed:c6:0f:11:84:fc:14:5f:2a:40:c3:df:
b5:96:bc:0a:b2:a2:97:e7:4a:c2:36:01:2c:ef:82:0f:86:7f:
32:05:b4:2e:e2:e9:98:ef:4a:da:e1:15:15:bf:ac:5f:28:77:
b1:14:43:43:22:c3:80:e9:6c:4d:94:89:8c:34:31:aa:b1:0f:
cf:41:58:7d:62:20:75:57:1f:d5:a5:df:3b:7c:69:e6:33:4c:
6b:31:f6:3a:d2:71:44:c9:60:3a:78:80:4c:45:55:23:1f:62:
f1:03:d9:6d:ed:b9:a5:84:d1:1f:b1:cb:5e:e7:41:01:20:1c:
8b:26:27:46:f7:87:11:c0:ba:8e:9e:6b:60:4f:ce:46:45:35:
ce:8f:33:a6:29:a4:94:a6:6f:f9:d6:bd:8d:de:a2:dd:46:06:
a6:1f:dc:de:66:00:72:12:18:66:1a:69:78:b7:25:53:ac:cc:
3e:ab:74:a8:e0:d6:b1:b5:3a:e2:5b:13:ff:35:18:5a:f7:15:
63:b8:7e:61:83:1e:d9:c5:4f:7b:56:8b:64:b5:61:7b:58:db:
33:3b:a2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:18 2026 by rpki-client