Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: XfOvqC+5h79v0Fo18daasMeA+KPwWFOs+2AEvt0iAUs=
Subject key identifier: 25:A5:87:F3:FF:D3:11:84:55:C9:CE:93:47:B6:44:4C:02:BD:21:10
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 019D27047A8E176AF63096BED565A2938D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 1552
Signing time: Wed 25 Mar 2026 22:01:38 +0000
Manifest this update: Wed 25 Mar 2026 22:01:38 +0000
Manifest next update: Thu 26 Mar 2026 22:01:38 +0000
Files and hashes: 1: 0BJKSsJW7qiVAHXCjZXJq3R-Kpk.roa (hash: r7csimlTjHrK6Lrz57cYuylUp8cy5+rV8BLjohqs/qU=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: xSeSt9D/CQ9mam2gMl/3c5xBauS8dUTVfA/z+FI0MKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7a:8e:17:6a:f6:30:96:be:d5:65:a2:93:8d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Mar 25 22:01:38 2026 GMT
Not After : Mar 26 22:01:38 2026 GMT
Subject: CN=25a587f3ffd3118455c9ce9347b6444c02bd2110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b7:8b:1b:33:f9:1f:83:62:61:34:31:e6:6c:
b7:59:f1:9d:c4:48:01:04:a4:a1:d6:88:60:32:db:
eb:34:b0:4b:b8:c2:2d:c8:eb:d8:6f:0b:f7:51:ba:
53:d1:86:a3:22:8c:d9:b4:7e:ac:92:67:2e:59:5f:
e2:42:6e:09:9a:e3:e3:2b:ed:e1:d4:5f:f3:d5:3f:
d0:11:fa:20:3a:d8:bb:a0:5d:93:bf:c0:4e:80:34:
9f:87:76:c1:07:4e:a6:f9:31:a8:af:0c:8c:89:cf:
65:5e:d9:29:76:86:96:1c:ee:69:bb:a2:6f:e6:1b:
2e:f9:df:2d:68:e0:7e:71:c9:7f:67:7d:18:11:fb:
b5:68:1b:25:c8:90:7a:4b:99:3e:9a:a4:03:da:fb:
84:c6:0a:bf:3d:b0:ce:6d:c6:bb:e9:db:63:fc:60:
d4:9f:99:ed:47:73:f4:a6:f5:86:e6:92:34:eb:62:
72:de:5b:53:1b:c8:70:e5:a4:f5:ec:cc:54:ed:ab:
a6:df:b3:07:d5:6c:09:3a:ea:8c:18:48:fb:d2:09:
44:cc:e5:cb:20:88:6c:89:48:ea:3c:27:f4:05:b3:
e2:fc:71:c8:ab:08:79:b7:66:31:c7:54:bc:75:13:
7c:10:7f:b9:ef:f3:20:a5:cf:01:78:0b:cf:a7:23:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:87:F3:FF:D3:11:84:55:C9:CE:93:47:B6:44:4C:02:BD:21:10
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d0:d8:93:9d:c2:9b:99:40:8c:2b:38:4c:04:0b:18:f1:1c:
71:9c:17:7d:1e:b1:70:f8:a2:e8:24:4f:60:1b:ae:62:f3:55:
d7:3e:ec:5c:82:24:5b:08:68:12:39:45:ae:0f:aa:11:ac:91:
7d:a2:19:cc:1b:f0:bd:0e:64:50:34:f7:8e:15:84:2f:07:57:
0d:26:47:26:c8:13:0c:de:0e:2c:06:68:11:c7:cd:a1:4e:92:
c1:4a:22:c3:bf:c5:3d:9a:a1:12:a4:4c:17:37:71:0b:5d:d3:
36:89:18:5a:e5:83:6f:d0:fe:36:37:2e:5d:9b:db:ca:17:d6:
1d:6e:a4:af:74:db:72:0c:dd:f2:fc:f7:6c:66:bd:b4:e9:d5:
1a:33:ca:d7:35:8f:b3:e3:57:d5:b9:20:df:c2:28:6d:85:b8:
a6:19:90:5f:96:87:95:1c:06:d8:9c:89:74:11:95:39:80:90:
a4:22:0b:33:13:cf:40:27:b8:ff:a6:80:cf:f7:67:08:e8:a7:
75:28:3e:e5:50:fd:24:e4:0a:d4:55:ec:ed:d7:8a:18:71:12:
13:7f:18:35:29:64:83:87:03:e2:88:de:a2:9c:d3:3f:65:8f:
d4:66:6d:66:04:f1:85:42:48:7a:0a:e8:a3:65:9e:65:e2:bb:
47:6a:c6:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHqOF2r2MJa+1WWik40eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4
NDQ2ZDAwHhcNMjYwMzI1MjIwMTM4WhcNMjYwMzI2MjIwMTM4WjAzMTEwLwYDVQQD
EygyNWE1ODdmM2ZmZDMxMTg0NTVjOWNlOTM0N2I2NDQ0YzAyYmQyMTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7eLGzP5H4NiYTQx5my3WfGdxEgB
BKSh1ohgMtvrNLBLuMItyOvYbwv3UbpT0YajIozZtH6skmcuWV/iQm4JmuPjK+3h
1F/z1T/QEfogOti7oF2Tv8BOgDSfh3bBB06m+TGorwyMic9lXtkpdoaWHO5pu6Jv
5hsu+d8taOB+ccl/Z30YEfu1aBslyJB6S5k+mqQD2vuExgq/PbDObca76dtj/GDU
n5ntR3P0pvWG5pI062Jy3ltTG8hw5aT17MxU7aum37MH1WwJOuqMGEj70glEzOXL
IIhsiUjqPCf0BbPi/HHIqwh5t2Yxx1S8dRN8EH+57/Mgpc8BeAvPpyMoCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWlh/P/0xGEVcnOk0e2REwCvSEQMB8GA1UdIwQY
MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt
NzY1MjYyZjI5ZWFmLzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm
LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdDYk53C
m5lAjCs4TAQLGPEccZwXfR6xcPii6CRPYBuuYvNV1z7sXIIkWwhoEjlFrg+qEayR
faIZzBvwvQ5kUDT3jhWELwdXDSZHJsgTDN4OLAZoEcfNoU6SwUoiw7/FPZqhEqRM
FzdxC13TNokYWuWDb9D+NjcuXZvbyhfWHW6kr3Tbcgzd8vz3bGa9tOnVGjPK1zWP
s+NX1bkg38IobYW4phmQX5aHlRwG2JyJdBGVOYCQpCILMxPPQCe4/6aAz/dnCOin
dSg+5VD9JOQK1FXs7deKGHESE38YNSlkg4cD4ojeopzTP2WP1GZtZgTxhUJIegro
o2WeZeK7R2rGhg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:42 2026 by rpki-client