Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: PGe1iyLM9agE0yQLcDU5XfwPBrsLbeBsCuIEWqveyms=
Subject key identifier: C9:07:6F:E8:F4:B1:1D:E6:CA:78:26:71:B5:7B:FE:00:EA:2F:5D:F3
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 019D2A3B471B08313A9E6C5926E88F078352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 13:00:21 +0000
Manifest this update: Thu 26 Mar 2026 13:00:21 +0000
Manifest next update: Fri 27 Mar 2026 13:00:21 +0000
Files and hashes: 1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=)
2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=)
3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=)
4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: WXWDHh9VhW8VhkpfiO+tPUfQGuSzrHTOXiN1FWIOnWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:47:1b:08:31:3a:9e:6c:59:26:e8:8f:07:83:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Mar 26 13:00:21 2026 GMT
Not After : Mar 27 13:00:21 2026 GMT
Subject: CN=c9076fe8f4b11de6ca782671b57bfe00ea2f5df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:af:6e:d0:b0:24:e0:cd:ce:13:a5:67:ea:
2e:88:f2:2c:e0:ed:94:3c:e8:0a:93:8a:d1:1e:a5:
04:95:2e:30:a3:8f:05:49:3d:3d:43:b8:b0:80:a6:
e7:98:00:c4:3e:9d:b9:81:e9:91:77:0a:89:fa:09:
88:97:79:63:25:f6:8a:10:e9:92:2f:f6:d6:0a:05:
69:aa:ce:46:40:50:ff:0b:d1:8c:12:d1:d5:03:a9:
eb:8f:fe:61:78:d6:39:4e:41:1e:d7:6e:ef:77:01:
9d:2a:c6:83:fb:0d:68:fd:9d:fa:cc:2d:c7:7c:d4:
74:6b:4c:e6:70:4c:a6:c3:ff:16:e7:d1:22:cc:d2:
a5:5a:39:8d:b0:f6:39:7f:76:0e:76:c0:d5:6e:cc:
58:1a:ca:fb:8b:ff:54:b7:ab:64:3a:f7:a3:17:54:
c7:3f:f5:99:9b:7f:1f:f2:51:09:29:33:d9:81:b9:
48:b3:2d:34:ab:50:30:e1:e5:43:8b:fa:28:e5:8a:
2e:4a:f0:45:a5:d9:f8:b1:62:7f:da:9b:48:46:f1:
1d:a7:96:ab:70:82:d1:b8:b4:65:6a:c8:20:ed:82:
64:d0:21:30:a2:db:54:3c:11:2a:df:c4:4b:16:cb:
65:c1:16:ef:89:d6:60:79:c0:d7:e6:8c:cf:7e:f6:
a5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:07:6F:E8:F4:B1:1D:E6:CA:78:26:71:B5:7B:FE:00:EA:2F:5D:F3
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e7:f1:00:16:29:a2:32:a2:f0:a2:52:f8:90:1d:af:8c:8d:
6b:e4:29:1d:fa:01:25:1a:cd:50:bf:95:bc:a5:0c:9b:ee:89:
64:69:3f:08:cf:85:fa:30:8e:b0:ff:5d:04:29:18:32:c7:59:
8d:df:23:b6:45:a6:c1:a9:d7:89:6c:c1:aa:ff:39:fe:55:78:
8d:04:b1:6d:0e:8f:8e:df:0a:f5:e0:cc:9b:71:8c:57:ff:4d:
f6:77:35:43:8c:8b:f4:20:8b:23:52:0b:f4:ff:13:ea:ef:3f:
ae:35:47:14:0b:0f:eb:2f:a1:41:79:84:e3:de:04:84:5c:9b:
97:2a:42:66:37:6e:46:b8:53:cd:46:37:7e:f7:62:d0:d5:6e:
3c:34:2d:dd:ef:06:f2:7b:0d:5b:82:f5:12:af:1e:da:97:85:
b0:7b:ea:81:60:7e:f0:8e:db:96:a9:a5:72:b0:3e:e8:6e:3a:
98:51:c0:cc:f0:e6:64:81:43:94:15:3e:76:22:d8:09:a9:4e:
f2:7e:08:75:0b:c5:90:61:1f:13:9b:40:74:ec:d5:1f:71:44:
83:19:ac:f6:c8:98:0f:9d:82:b7:df:34:68:9b:c3:a4:c6:b8:
0c:a2:11:63:9c:92:65:8d:2b:2d:6e:47:ff:e6:3b:a6:ee:28:
77:e2:45:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:11:41 2026 by rpki-client