Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: EG51TRaEBYKQWL0grE83SXrob1y1jxt7pePmdcxo7hA=
Subject key identifier: 55:65:D0:F1:80:E7:AB:F7:7E:36:E9:57:BB:9C:BC:F7:3C:A9:0B:8B
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019D2771E7FD55F0EA9921F84428BF9D8FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:09 +0000
Manifest this update: Thu 26 Mar 2026 00:01:09 +0000
Manifest next update: Fri 27 Mar 2026 00:01:09 +0000
Files and hashes: 1: A64W6614jSKOipagUq4esU4_VnM.roa (hash: xLqDioXNu9/ImV10GNbnXjX0lmGB/yXNEGDqLOMVfeA=)
2: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: JCrRWq3HaIKfUMatlRD8f/VFjgIOv818J7mAz/+5fSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:e7:fd:55:f0:ea:99:21:f8:44:28:bf:9d:8f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Mar 26 00:01:09 2026 GMT
Not After : Mar 27 00:01:09 2026 GMT
Subject: CN=5565d0f180e7abf77e36e957bb9cbcf73ca90b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:ba:6e:da:1a:23:22:25:b8:27:3a:46:94:
3d:02:2e:97:0a:b7:77:e0:63:5b:d8:2a:f4:70:fc:
89:81:a6:08:3b:e2:2b:5f:ac:8a:9f:7a:65:12:63:
af:a1:26:d9:3c:4e:74:c8:e7:a1:ec:ec:18:82:d2:
a9:61:5f:cb:08:4e:d8:35:0e:2d:2d:a9:09:55:be:
4e:91:21:f2:84:49:93:85:cb:8f:ed:58:be:2d:28:
93:a3:46:bd:6d:0a:ed:50:45:d5:a7:6c:4d:a0:d1:
41:11:42:e7:c6:e4:90:08:f8:0c:fd:26:57:37:b9:
cf:05:5e:97:db:04:4f:84:ee:a4:37:ee:97:9d:99:
f4:52:33:df:c7:c4:fa:98:cc:21:9f:5b:5e:bb:0f:
b1:dd:fa:8b:64:c8:b5:3e:00:2d:1f:e0:7f:5c:13:
41:c9:c1:09:31:6f:87:ab:ad:81:6e:7d:0e:50:2c:
1c:78:d2:2e:17:63:b6:70:eb:53:5e:15:84:03:41:
dc:42:ec:ad:82:f7:c4:21:7a:e6:7f:50:16:99:af:
ae:47:24:d9:e0:c2:9c:82:19:28:34:0c:02:aa:b7:
d1:4d:da:b6:52:0a:6e:ce:03:64:4e:99:95:e9:37:
48:96:1d:d6:99:63:c9:ec:22:3a:e9:b3:2c:66:24:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:65:D0:F1:80:E7:AB:F7:7E:36:E9:57:BB:9C:BC:F7:3C:A9:0B:8B
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fd:e3:3c:3b:b0:4f:90:c1:8d:0b:9b:51:7e:c0:43:ad:35:
48:4b:b1:75:8d:12:1d:b9:d5:95:59:75:f1:86:7b:b1:6c:9a:
ee:5b:2e:89:7b:ba:fa:72:b8:b5:a1:a7:a1:62:4a:e5:9d:83:
f9:b9:27:82:53:87:da:1c:b4:89:48:df:15:88:14:55:0f:63:
1f:85:2f:85:18:a2:bf:9f:ea:ca:51:40:f5:51:9a:23:a7:ae:
03:84:c8:ff:b8:a9:72:51:67:72:87:ec:8d:97:55:2b:50:b3:
30:76:23:bc:b9:2c:c1:66:ab:31:f0:09:b2:66:ba:a0:71:6f:
de:89:d9:ee:84:e7:5c:be:50:2b:88:29:32:47:5b:13:54:8b:
53:95:d3:be:20:a2:4c:fd:6b:0c:1c:c8:22:f5:2c:56:f5:06:
93:e0:5c:fb:e6:b5:31:04:cb:3b:09:fd:fc:db:a8:ce:a2:0e:
b4:39:b7:dd:c9:69:83:b6:5e:d1:b9:ff:6e:96:9d:e9:6f:b9:
98:4f:53:2a:0e:9e:f4:47:06:4c:74:7a:30:f5:b1:ac:b7:47:
a2:26:72:7a:0a:ec:df:5e:e0:f3:eb:ef:a0:5c:cd:6a:4e:6f:
c2:1c:4f:7b:b4:9b:e4:c6:91:dc:2b:1e:21:0a:8f:7c:67:f8:
40:c9:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:28 2026 by rpki-client