Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
File: rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft (raw, json)
Hash identifier: vXeqBW22y+J93MAXviB7EttguRsZlIG8diQ1/XbBkps=
Subject key identifier: A6:69:2C:9D:33:8B:EE:3D:5D:E7:1C:1C:C5:A6:10:B1:9D:9D:CF:2E
Authority key identifier: AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
Certificate issuer: /CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Certificate serial: 019D2B4EDAD8E9A1D8A9E4BA520D29E86E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
Manifest number: 04AB
Signing time: Thu 26 Mar 2026 18:01:21 +0000
Manifest this update: Thu 26 Mar 2026 18:01:21 +0000
Manifest next update: Fri 27 Mar 2026 18:01:21 +0000
Files and hashes: 1: D1uepCAmRlFVjKTUqfMxFmzOti0.roa (hash: pf7DS73sBkltlYtAHV2Wkt/8vgHhRENJ2syRZHBzVdQ=)
2: rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl (hash: RkpBCY6fJseSI8EG5gNgIscL/yiy9HWKq36dI2q8xrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:da:d8:e9:a1:d8:a9:e4:ba:52:0d:29:e8:6e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acecf09b85d91cd682b06743cb6c5930e1fc551c
Validity
Not Before: Mar 26 18:01:21 2026 GMT
Not After : Mar 27 18:01:21 2026 GMT
Subject: CN=a6692c9d338bee3d5de71c1cc5a610b19d9dcf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:ec:08:ea:47:66:9b:a7:57:5f:95:45:d0:
f0:3c:d7:9e:e3:c9:95:c7:e0:3f:90:c7:66:c7:dd:
3a:31:7a:c7:e6:d0:2d:7c:30:b1:5c:ce:03:7c:fc:
85:9f:57:bb:0c:ba:49:9f:c5:4d:5c:cc:e3:a9:ac:
45:10:48:9f:bd:52:7c:07:1f:bb:e9:34:99:b1:fb:
ea:9e:f7:d6:a2:bf:88:b4:82:4c:49:a7:21:53:9d:
06:29:b7:67:f7:cd:85:c1:ac:9e:8a:ec:fe:dc:89:
56:c0:eb:5c:26:b5:80:b8:7b:57:0a:d2:fc:f4:80:
d6:01:17:cf:50:f3:73:5e:2e:44:36:1f:70:28:9a:
8e:9f:bb:b6:a7:54:21:66:ae:42:7d:e8:aa:8d:c0:
fa:b1:3f:ea:5f:ea:15:51:a4:6c:ac:33:d6:0d:b9:
ef:65:ec:11:84:d1:b1:fc:7f:37:08:fd:47:cf:d2:
79:e5:0c:d8:1f:6b:92:39:83:16:b5:66:ab:5b:dc:
73:ab:0b:2d:c7:87:eb:55:3c:94:80:9f:82:40:da:
b9:67:e3:20:bf:4a:1d:40:fc:3c:93:ba:07:ff:6c:
af:8a:79:fe:af:33:9e:ba:2c:35:98:fb:76:ae:e3:
0c:79:da:fc:88:0c:c7:00:a0:91:8a:8b:9c:a9:38:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:69:2C:9D:33:8B:EE:3D:5D:E7:1C:1C:C5:A6:10:B1:9D:9D:CF:2E
X509v3 Authority Key Identifier:
keyid:AC:EC:F0:9B:85:D9:1C:D6:82:B0:67:43:CB:6C:59:30:E1:FC:55:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOzwm4XZHNaCsGdDy2xZMOH8VRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/25f4f4-a547-4238-a1da-f18d7818f84a/1/rOzwm4XZHNaCsGdDy2xZMOH8VRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:ff:54:de:c6:f8:33:6c:f9:5e:3d:4f:73:e3:39:7e:65:
09:9c:a4:ad:da:d3:25:2b:c2:5d:46:d5:6b:04:5d:26:26:6f:
70:8e:7d:a3:3b:9d:d3:cf:88:75:cc:b2:fe:85:0d:e0:5b:cc:
59:84:66:3a:c9:d7:ba:44:e4:8b:94:34:86:b5:cc:7f:28:18:
32:36:b5:20:fb:ae:20:a0:9a:1c:3b:bd:af:cb:4a:fd:9c:a5:
97:aa:c3:da:c6:24:06:c0:1d:39:b0:d0:5f:0c:a5:ae:69:82:
64:27:08:12:b1:c8:a7:02:1f:09:09:7d:f7:b3:c2:d2:4b:3a:
63:bb:6e:48:e1:f4:c3:b5:11:33:01:9d:f8:07:88:35:d5:ed:
e3:66:77:74:38:3c:f9:b6:c8:6b:f0:6b:57:93:37:4a:51:02:
34:9f:e7:30:90:c5:02:78:8c:c5:42:fb:13:95:18:fd:b1:4b:
19:86:64:00:7b:2a:0d:c7:8c:28:e8:1a:91:ab:aa:4d:7c:3f:
74:f4:5f:47:2c:37:ce:5b:cb:40:af:8b:9b:6d:93:b6:90:c0:
38:fe:0d:07:0f:f0:23:f2:00:16:5b:01:a3:ce:a4:53:ce:af:
b7:25:3e:97:c3:c5:2b:ca:42:00:c6:22:f6:6c:97:01:65:c7:
1c:a5:67:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:35:10 2026 by rpki-client