Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: zptgKVIXnlxFIUv5PDqikkiYNyIqArmRh3omVgvJE0U=
Subject key identifier: 44:47:E4:24:92:81:00:F9:B1:DB:20:DC:C5:21:48:8A:87:ED:6B:AE
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 019D2771E904F057E9B5E92AB88057A9BD04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 0415
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: Mme1Yguuy87yZsc3gR3cQd41qfWCgFqq/sUE+f8t3Pc=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e9:04:f0:57:e9:b5:e9:2a:b8:80:57:a9:bd:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=4447e424928100f9b1db20dcc521488a87ed6bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:90:c7:c4:c3:61:33:3a:36:1a:67:7f:a7:00:
60:d5:d7:e5:ed:8b:92:8b:ac:5a:23:c4:1a:90:77:
ea:d6:a1:ad:22:f4:30:09:7f:05:58:e7:c6:f2:ce:
12:6f:a4:09:52:bc:c8:23:53:80:db:0e:08:f4:6b:
91:b3:24:bb:d7:d2:8b:0a:2c:36:cd:a4:13:5c:55:
d9:42:7c:02:b6:1a:7c:cf:01:2b:9a:36:47:e0:20:
c9:b1:48:8b:09:80:b1:fc:b5:45:2f:c7:93:fe:b6:
64:92:e9:7e:64:82:ef:93:d0:29:8c:1f:de:4e:56:
08:56:11:73:53:3c:f2:81:1f:7e:a1:05:c9:89:c0:
d3:ba:82:d3:d9:f7:e3:17:6e:50:b8:d9:39:38:6d:
a7:d5:b3:ef:b5:d8:54:17:e4:51:ae:a6:f3:64:6c:
75:ff:e2:87:82:d4:0c:4f:0c:01:d3:55:58:62:44:
10:e8:42:e8:f5:5d:a0:22:9d:12:80:68:7b:82:38:
ac:e6:fd:93:eb:c7:52:ad:12:13:28:70:8d:0d:c4:
b9:0f:52:fe:88:c4:a5:fc:a8:54:7a:e0:b9:80:5a:
aa:b6:d2:85:4e:fa:a2:0e:cb:95:3e:c9:21:6e:1b:
c1:04:39:db:0e:8a:3f:d7:be:ef:61:7c:27:2e:8c:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:E4:24:92:81:00:F9:B1:DB:20:DC:C5:21:48:8A:87:ED:6B:AE
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:15:8f:27:f3:b4:b5:f4:b9:ea:a6:3c:7a:c1:de:55:ed:a2:
ce:97:d8:aa:a9:33:0b:eb:ad:69:a0:98:7c:78:80:56:d7:95:
87:e1:bf:67:5c:87:73:74:be:b7:c4:84:df:36:a5:eb:23:82:
ed:a1:27:75:5a:1d:66:79:2a:a7:67:ff:26:9a:49:c1:ea:12:
cc:c2:6e:ab:a7:0d:79:18:48:8c:7a:6c:a2:ff:18:14:17:56:
18:50:91:a3:f6:01:32:81:e5:9c:6e:c3:a2:32:86:3c:26:7e:
da:29:25:97:b8:21:53:82:2c:21:1e:e9:67:27:ca:9e:73:fd:
34:a4:f4:fa:32:2b:53:60:ea:19:2a:c9:9d:48:f8:bf:51:7c:
85:32:b0:3c:82:64:15:2f:61:d4:28:bc:b3:27:39:4f:44:8a:
75:f1:d2:38:e1:a2:62:bb:50:cf:fc:b5:fe:97:14:b4:5c:81:
6a:4e:11:3d:c1:56:ed:91:b3:bb:18:55:9c:26:ba:ac:e1:74:
8f:e2:fb:dc:12:9e:65:0b:9a:07:2e:e0:64:90:26:22:35:2b:
a8:55:5c:cf:25:be:16:f3:74:9b:14:d1:08:e9:5c:cb:89:19:
06:f7:11:d0:6f:1f:94:6f:31:70:9e:75:f3:5d:a2:c6:c8:8b:
ed:a8:25:6b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0ncekE8FfptekquIBXqb0EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOGNiOTQ2ZmU4NjAxYTBmZDJhMWIzZTQzODJiNmIxZGMw
NDRmNTcwHhcNMjYwMzI2MDAwMTA5WhcNMjYwMzI3MDAwMTA5WjAzMTEwLwYDVQQD
Eyg0NDQ3ZTQyNDkyODEwMGY5YjFkYjIwZGNjNTIxNDg4YTg3ZWQ2YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZDHxMNhMzo2Gmd/pwBg1dfl7YuS
i6xaI8QakHfq1qGtIvQwCX8FWOfG8s4Sb6QJUrzII1OA2w4I9GuRsyS719KLCiw2
zaQTXFXZQnwCthp8zwErmjZH4CDJsUiLCYCx/LVFL8eT/rZkkul+ZILvk9ApjB/e
TlYIVhFzUzzygR9+oQXJicDTuoLT2ffjF25QuNk5OG2n1bPvtdhUF+RRrqbzZGx1
/+KHgtQMTwwB01VYYkQQ6ELo9V2gIp0SgGh7gjis5v2T68dSrRITKHCNDcS5D1L+
iMSl/KhUeuC5gFqqttKFTvqiDsuVPskhbhvBBDnbDoo/177vYXwnLoz+nQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFERH5CSSgQD5sdsg3MUhSIqH7WuuMB8GA1UdIwQY
MBaAFPqMuUb+hgGg/SobPkOCtrHcBE9XMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1veTVSdjZHQWFEOUtocy1RNEsyc2R3RVQxYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzMvMGQyMjcwLTVjNmYtNDJjZi1hNTYw
LTk0YTZlZjAxZDA0Ny8xLzEtb3k1UnY2R0FhRDlLaHMtUTRLMnNkd0VUMWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMzLzBkMjI3MC01YzZmLTQyY2YtYTU2MC05NGE2ZWYwMWQw
NDcvMS8xLW95NVJ2NkdBYUQ5S2hzLVE0SzJzZHdFVDFjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRWP
J/O0tfS56qY8esHeVe2izpfYqqkzC+utaaCYfHiAVteVh+G/Z1yHc3S+t8SE3zal
6yOC7aEndVodZnkqp2f/JppJweoSzMJuq6cNeRhIjHpsov8YFBdWGFCRo/YBMoHl
nG7DojKGPCZ+2ikll7ghU4IsIR7pZyfKnnP9NKT0+jIrU2DqGSrJnUj4v1F8hTKw
PIJkFS9h1Ci8syc5T0SKdfHSOOGiYrtQz/y1/pcUtFyBak4RPcFW7ZGzuxhVnCa6
rOF0j+L73BKeZQuaBy7gZJAmIjUrqFVczyW+FvN0mxTRCOlcy4kZBvcR0G8flG8x
cJ51812ixsiL7aglaw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:52 2026 by rpki-client