Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: sdcust6b7f+cAkbjYci4vnrD5pf19vxhCaHB4PpBueQ=
Subject key identifier: AA:FA:39:73:66:E3:86:60:14:8C:93:5B:FD:F0:0A:B1:FB:32:C8:48
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 019D25BA1AC1C6C5769FC4CAD2A98F9CDB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 14AE
Signing time: Wed 25 Mar 2026 16:00:46 +0000
Manifest this update: Wed 25 Mar 2026 16:00:46 +0000
Manifest next update: Thu 26 Mar 2026 16:00:46 +0000
Files and hashes: 1: 1-hcdN0H8sYbxU2FJ2TIpbt1wrcs.roa (hash: +oHH/wDqJPdzoao+MeKrBaUm4lv6BOEi7Q0L1v4HB8k=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: 6PCOdrvV23b9Z4NI1vodPbPEZDvkZd2Y0bEZ3dJQcoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:1a:c1:c6:c5:76:9f:c4:ca:d2:a9:8f:9c:db:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Mar 25 16:00:46 2026 GMT
Not After : Mar 26 16:00:46 2026 GMT
Subject: CN=aafa397366e38660148c935bfdf00ab1fb32c848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:68:79:69:d9:33:be:ab:3c:b3:aa:41:84:
3d:b3:76:30:1a:01:c7:3a:a4:f1:63:29:b3:cc:e9:
c0:2b:8a:04:3b:97:b6:e4:47:b7:7d:d2:09:85:13:
b7:28:30:4d:85:4a:c2:19:85:36:a3:26:95:a6:58:
ef:59:0b:a4:e8:e4:09:e4:1a:33:22:50:2b:3b:b5:
da:41:dc:f9:9e:88:7b:a0:b5:c4:7d:b8:13:f6:b1:
b3:5e:7b:76:22:89:df:d5:47:8f:f2:a8:c7:78:cf:
47:21:b1:c1:f9:e7:5d:50:cf:2a:7f:7c:a1:03:2a:
e3:eb:cc:8f:75:68:85:fc:a7:ac:6a:8b:65:49:c9:
97:2d:3b:65:75:ee:37:82:9c:09:8b:83:e8:87:ff:
bc:0a:c6:2b:b4:81:af:4b:43:5d:05:3e:dc:ef:a1:
68:bc:b3:8d:14:3a:03:9b:6b:78:d9:9c:23:cd:37:
66:85:35:dd:7f:39:bb:16:cb:0e:5d:f6:5b:5b:86:
d0:83:d9:de:bc:78:95:c4:f8:f3:be:a1:01:ac:87:
1e:30:59:44:1b:08:8d:b2:dd:50:4d:c7:19:c6:e1:
c4:bd:2c:7a:80:f6:b2:5f:bb:13:55:8d:c6:45:11:
a1:ff:fe:32:5c:a2:73:e5:16:fc:fb:d6:f3:85:8f:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:39:73:66:E3:86:60:14:8C:93:5B:FD:F0:0A:B1:FB:32:C8:48
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a2:79:fd:fa:6c:16:d6:36:fb:c5:89:88:9e:d2:5b:40:83:
07:79:75:db:4b:8f:72:a5:4b:35:fa:4f:1e:23:62:23:9a:ac:
50:cc:2e:ce:cb:16:07:83:23:aa:78:04:82:c0:a4:fa:9a:61:
c8:af:d3:57:5d:f7:b6:08:a3:73:c3:cf:98:a7:be:df:af:53:
df:71:c5:d4:7d:c0:a9:a8:9c:21:e5:6b:c0:25:94:b1:08:7c:
bd:f0:6b:9f:41:9f:12:3a:2e:b4:4e:ca:6d:10:58:3b:65:85:
b4:19:27:69:85:89:ad:21:35:67:49:53:d3:41:6b:ad:ef:76:
9b:6d:01:5d:7a:76:a3:17:f6:b3:8f:30:63:5d:5a:0c:79:2f:
bb:d8:51:2e:c0:df:64:8f:71:29:b8:ce:1f:29:76:87:99:42:
06:3e:45:cf:f9:90:bb:c4:0b:91:07:e9:b3:5c:d7:51:3e:c2:
1d:0d:34:ce:b5:6f:05:e7:e3:53:ee:2d:b4:5e:39:95:02:cf:
c3:64:5b:ed:1c:61:54:52:2c:d5:80:63:f0:33:2b:70:7c:14:
55:e0:9a:13:94:df:88:1f:16:c9:01:89:fe:37:cf:fd:e6:3c:
82:e3:c1:33:92:88:3a:ad:de:1a:4a:69:8f:e2:4b:1f:df:1c:
fe:70:5e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:33 2026 by rpki-client