Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: x7lwPOyKVASGAeLTt5Fr2/680JbFYXjukdCDpKm2UtY=
Subject key identifier: 33:42:A2:A5:B1:B9:0B:F2:47:8D:A1:C1:6D:7A:25:57:7F:00:82:58
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 019D26CCA81E42269876B8CDEBFE532BC254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0F7B
Signing time: Wed 25 Mar 2026 21:00:39 +0000
Manifest this update: Wed 25 Mar 2026 21:00:39 +0000
Manifest next update: Thu 26 Mar 2026 21:00:39 +0000
Files and hashes: 1: Qtqqzn9yRNvrI3RXEfT5VayjgJI.roa (hash: lOFGAsrm5iHQNlLgX36AU9zrlOWulEYrqP1lI6ectMM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: Dmau5VvOEp26b7X1JDLsHKOqT6R4j/0jcmWRjrZpW8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:a8:1e:42:26:98:76:b8:cd:eb:fe:53:2b:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Mar 25 21:00:39 2026 GMT
Not After : Mar 26 21:00:39 2026 GMT
Subject: CN=3342a2a5b1b90bf2478da1c16d7a25577f008258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:56:98:8b:98:8f:c3:c2:bd:8c:d7:8b:49:
53:e8:77:36:1d:36:4d:46:c6:4d:b1:71:24:bd:2b:
71:9e:de:6f:4f:a9:1b:bf:41:22:11:1a:01:d2:91:
6e:51:af:f0:2c:bf:fb:93:3b:53:74:d3:42:14:93:
9b:ce:9a:98:44:5b:80:c9:52:bf:65:88:4f:96:7e:
55:a4:d9:72:a1:1b:97:6a:7f:49:2b:7b:6e:7b:95:
95:d4:1f:9d:d5:e0:03:87:23:48:61:80:4e:e9:f1:
1e:9f:43:ff:51:49:f9:65:cd:49:5c:84:e0:4e:fa:
ff:b0:c5:9f:b9:f4:a0:9a:07:7c:a8:55:2d:20:56:
cb:f1:1c:e7:94:8e:8d:aa:71:f9:38:2a:c2:b9:ba:
8a:71:63:ed:0b:50:39:ef:2a:0e:cd:cd:c7:b3:e4:
01:35:bd:c5:52:6c:79:84:12:e0:00:4b:c1:d0:29:
97:ae:69:59:30:02:f5:d0:25:92:f1:ea:a6:ec:1a:
f9:f8:9d:e0:ef:6f:c6:5f:79:5b:15:39:04:59:7e:
b0:4d:a2:13:ff:3e:dd:18:53:2f:81:36:b0:03:dd:
af:27:2f:52:01:57:1c:93:f9:e7:8e:e3:22:4f:4f:
4f:a8:4e:ed:ee:38:a9:51:06:db:82:dd:7e:33:c3:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:42:A2:A5:B1:B9:0B:F2:47:8D:A1:C1:6D:7A:25:57:7F:00:82:58
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:dd:ed:d8:06:0d:e0:ed:07:6b:ed:77:22:ba:5b:d0:f3:a5:
73:4d:0a:40:54:92:35:ec:90:1f:69:b3:f2:34:94:91:62:7d:
23:37:ce:27:eb:31:87:ff:1f:03:8f:a5:14:c8:ce:ec:2f:7e:
77:c8:e2:a3:42:46:18:a5:55:27:b1:45:3c:8d:3c:f7:da:99:
bd:3d:dc:75:b1:63:c9:f2:81:39:f4:db:e7:e4:a0:b4:d4:2a:
0a:04:5a:5d:2f:63:81:66:3f:9b:7f:70:6a:f4:54:1d:55:a1:
96:4e:df:2c:8e:9b:a9:06:0a:d1:6a:53:d5:03:9d:11:93:c2:
23:0b:0a:1f:2f:cf:f6:fd:39:9c:5d:52:4c:b6:13:9b:2a:46:
13:34:b9:59:1a:c6:06:5a:8f:a4:22:5b:16:39:53:0c:ff:b8:
d4:db:33:55:02:42:f9:d5:e8:04:e0:ba:a2:02:6b:46:a4:cd:
a7:0a:19:f0:ba:71:02:e5:76:a3:a7:81:ae:54:26:cc:f9:32:
af:30:a9:73:03:6b:dd:44:49:96:6e:57:ac:28:0c:49:75:4c:
b7:ea:ff:5c:41:36:ac:26:3f:9b:eb:98:b3:19:e2:7f:0f:51:
23:53:16:7a:b4:16:68:3b:f2:f8:0a:1e:5c:c2:3b:ce:3b:95:
eb:a5:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:04:29 2026 by rpki-client