Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: KRG2ujHQzsJ9ucwdnmowsGggFTX14HfPdiGtvX/KUGk=
Subject key identifier: E8:5B:65:D3:E2:34:2F:72:70:5B:06:52:16:F1:1C:34:ED:9A:AE:F8
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 019D2771E0E5A089987BCF316C365A17CEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 04AC
Signing time: Thu 26 Mar 2026 00:01:07 +0000
Manifest this update: Thu 26 Mar 2026 00:01:07 +0000
Manifest next update: Fri 27 Mar 2026 00:01:07 +0000
Files and hashes: 1: 5LuAukBT-PYtoVc1x_YPxle1wsc.roa (hash: h17Dfweg2VbRUUt3KQP8Gh9v6kUcdiw65gP5QtU0txQ=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: EQGE3tuDHzJfThbT/N8HplTSAwHuZl0BXz1aaJIJgC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e0:e5:a0:89:98:7b:cf:31:6c:36:5a:17:ce:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Mar 26 00:01:07 2026 GMT
Not After : Mar 27 00:01:07 2026 GMT
Subject: CN=e85b65d3e2342f72705b065216f11c34ed9aaef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:6f:5f:1e:f5:82:4b:51:12:4f:71:d0:38:
99:f4:5f:06:33:88:ed:31:a7:2d:7c:5e:a4:c5:c3:
5d:2d:09:e9:42:74:ba:01:74:85:13:5a:d0:4f:f4:
73:63:1b:0c:be:d3:1b:2b:75:80:21:04:31:1e:22:
d9:9b:b2:f8:83:db:37:49:eb:c1:af:d2:f6:74:b8:
79:d9:23:d6:8f:2a:88:c3:e9:89:ee:ca:76:77:fd:
77:74:b9:fd:35:65:17:b9:12:6f:9c:7b:d8:13:6f:
f5:a0:18:b7:d3:9e:5d:f2:9a:88:67:03:b2:dd:cc:
94:5f:98:df:7a:08:5f:c7:c8:4d:07:4f:6f:09:e4:
2e:4a:f4:7b:2c:11:98:0d:9c:05:c8:11:7c:23:11:
37:73:cb:3e:50:c3:b9:92:fb:f6:7b:69:06:16:2a:
76:ad:dc:e0:bf:aa:91:ce:a7:29:57:98:47:3d:81:
32:0a:ce:c8:d8:18:d3:22:ac:4c:76:fc:22:95:fb:
3a:e1:74:e8:fa:91:db:42:84:6f:75:eb:e7:55:26:
40:09:25:a5:eb:8d:6e:81:c3:5f:35:2c:1b:68:96:
1b:df:ed:4f:fe:3f:3d:eb:19:3c:40:f5:c6:06:00:
ea:71:cf:db:e7:a5:bb:ad:6a:06:ff:42:e4:d0:31:
ac:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:65:D3:E2:34:2F:72:70:5B:06:52:16:F1:1C:34:ED:9A:AE:F8
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f1:7f:24:33:c2:12:66:84:f3:bc:0d:1d:9c:ef:6d:70:26:
9c:61:85:5b:87:6a:73:d3:bc:d2:4a:38:fe:35:a4:18:88:7b:
dc:c2:b6:da:34:c8:c0:96:82:ef:56:d5:bc:f1:02:cb:77:3b:
ff:43:43:95:21:ec:37:98:71:fe:43:d7:55:71:63:c7:70:13:
c6:ef:33:6b:4f:a3:14:eb:7b:3b:fb:02:cb:96:3e:5e:5d:9d:
6b:32:b8:5b:26:5e:29:11:16:df:45:5b:44:53:c4:47:28:b6:
25:f1:5d:15:99:82:8f:33:ea:89:fb:6a:39:d7:2f:21:38:05:
83:43:d9:c9:d4:9c:69:64:0b:99:df:df:d5:0c:b5:da:fc:7a:
42:d8:95:3a:d9:13:3f:37:7f:8d:54:56:7f:86:6d:ec:71:79:
d2:cb:2d:1f:c1:60:fb:e7:40:4b:9d:72:de:fa:cd:67:11:34:
bd:c7:5f:e5:6e:de:0f:05:71:1c:ed:db:8f:00:82:c3:26:c4:
a4:60:ef:97:d1:2e:f7:fe:17:db:40:24:d1:1e:c0:6c:fc:62:
a8:41:ff:c4:3f:2c:cf:26:0c:cb:e5:96:0d:cd:bf:11:e5:85:
09:09:4c:ac:4e:be:d2:b5:3e:2b:4b:cc:d7:a0:0d:b7:ed:b4:
8e:5d:fd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:32 2026 by rpki-client