Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
File: cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json)
Hash identifier: 9mRgdBIgunwF2m+00Zm8OgzIiLfTUSF7xhoCxYL7+NQ=
Subject key identifier: 79:DB:04:C7:89:00:23:A2:ED:48:29:DE:A9:75:E3:02:3C:07:3F:3C
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial: 019D29CE65330F09511511A546D84193698F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
Manifest number: 15AB
Signing time: Thu 26 Mar 2026 11:01:25 +0000
Manifest this update: Thu 26 Mar 2026 11:01:25 +0000
Manifest next update: Fri 27 Mar 2026 11:01:25 +0000
Files and hashes: 1: 7KqDQ5EQuGmvhILgEAo_YtQ7FJ4.roa (hash: bvJPZ/mgeT5elBDOrMpk/TrY61qYzctI3tuX2E3hfic=)
2: Np5-d6pE7_8dHk9RfSdlFSEfs0E.roa (hash: gjFbN+E1antkUUyBnAYdSj98ROmWvKsFE03Y29xogf8=)
3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: sJI6MZ/Hni6K9s9P/cD/ZwMJe3v3gCl760MjTEy1jRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:65:33:0f:09:51:15:11:a5:46:d8:41:93:69:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Validity
Not Before: Mar 26 11:01:25 2026 GMT
Not After : Mar 27 11:01:25 2026 GMT
Subject: CN=79db04c7890023a2ed4829dea975e3023c073f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:22:0b:e1:5f:cd:2a:c5:38:3f:d7:97:a1:93:
ae:9f:e7:6d:52:06:17:19:a0:e0:1a:f4:45:6a:66:
b8:a1:5f:14:8b:27:a8:0f:45:8a:98:1e:25:dd:41:
ff:3a:4c:ec:a0:cf:1e:d0:ce:a3:62:72:51:3a:1f:
c3:64:d2:74:94:44:05:42:2f:d9:27:f8:a2:68:bc:
c1:de:47:23:63:20:e1:76:58:59:ad:c6:60:66:86:
0c:f9:e2:62:08:92:de:11:f6:07:0f:7b:c7:d5:62:
b9:1c:50:8b:e6:c6:93:2f:bd:28:4d:99:c2:24:fe:
49:d6:cb:81:34:d5:76:5e:d9:22:08:34:2d:a2:ea:
38:b6:1d:38:9e:77:ba:44:68:31:af:f8:21:0e:56:
b3:0e:02:75:35:55:60:46:be:af:b1:81:38:ea:db:
8e:68:92:0d:4f:cc:01:fa:bd:ea:5a:4a:da:a8:1f:
7d:e5:4a:5d:ee:fb:27:a4:70:ea:fa:52:d7:45:52:
ef:ae:89:5e:85:07:d6:ed:35:ef:39:43:38:8d:db:
43:8c:f2:bd:50:6c:7a:48:02:12:7e:f3:7a:87:97:
24:74:b4:eb:f8:36:75:58:0c:c2:2f:f4:85:8e:c5:
00:bf:07:88:91:86:57:75:69:94:75:1c:f7:ae:6f:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DB:04:C7:89:00:23:A2:ED:48:29:DE:A9:75:E3:02:3C:07:3F:3C
X509v3 Authority Key Identifier:
keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:dd:e9:3a:1b:27:a6:f8:ee:44:71:00:a8:d9:b2:b7:07:62:
2f:b2:06:87:f4:e9:fa:16:bd:b2:12:c0:18:f5:52:66:e4:5d:
d1:bb:cd:49:b7:82:54:0e:8e:44:50:3c:45:37:1f:66:22:cc:
62:f5:fa:95:b6:00:ca:99:c3:81:44:ac:cd:55:77:d7:56:e4:
da:f6:6b:80:59:dc:54:45:41:69:fa:91:70:1d:6e:71:9d:32:
10:69:55:37:2b:b4:4d:f2:c3:68:6b:0d:91:12:0e:8d:bd:45:
d4:d1:70:8b:c2:fa:0c:58:0a:d0:26:ec:c0:02:fb:e7:f1:bc:
3e:e8:6f:b5:4f:51:e6:a3:97:7c:de:f2:50:6a:6f:fd:e4:1a:
5d:cc:d4:0a:87:b3:a8:b8:eb:8b:12:bb:16:b9:80:b6:97:95:
89:b1:79:27:c5:e6:49:a6:90:1e:85:98:d0:00:59:cc:7e:ac:
43:c9:3b:19:9d:ea:9a:96:bf:80:b3:4b:4c:89:0d:a1:d4:a7:
be:1b:64:ed:de:6d:3a:d5:62:5b:83:96:aa:11:55:19:c0:2c:
e1:f3:97:00:52:a9:2c:a7:61:89:24:28:a2:0c:7e:da:3d:ca:
b4:a7:e7:d6:61:b7:94:9b:23:9e:67:0e:94:73:1d:df:91:3a:
de:92:b9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:14:49 2026 by rpki-client