Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier: oUWhqbVjBA8OEWDP0UpeNbSz8vrZzEdIeAv4DEX3eT0=
Subject key identifier: 1B:E9:21:A5:70:3D:1C:08:11:A7:37:83:A7:82:30:D7:27:27:9D:81
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 019D25F0EEE6FC9791C119EBFF0D78CB4F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 17:00:39 +0000
Manifest this update: Wed 25 Mar 2026 17:00:39 +0000
Manifest next update: Thu 26 Mar 2026 17:00:39 +0000
Files and hashes: 1: NYMylwf9Dy99-jdoW6MOpMPvCDc.roa (hash: 7KWu6+hM3g4WTQ+ghonIl9FYPPPFYnrLy9X/U5RAaK8=)
2: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: dh60B/Cp6TyTujVNb28aUdRTfoDq4Ai/hbQHC//JRaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:ee:e6:fc:97:91:c1:19:eb:ff:0d:78:cb:4f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Mar 25 17:00:39 2026 GMT
Not After : Mar 26 17:00:39 2026 GMT
Subject: CN=1be921a5703d1c0811a73783a78230d727279d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:1c:8b:43:73:98:ae:a2:02:65:aa:2b:28:
44:b2:93:88:0f:e3:f0:8d:68:e9:14:7f:54:87:d7:
5b:11:95:c6:71:8a:39:68:5c:af:aa:13:c1:8d:9a:
34:88:5c:73:be:7e:e4:38:82:56:bc:28:fd:6b:11:
bd:45:2a:54:78:ff:58:58:ff:67:70:fc:fa:c4:0d:
c1:7a:24:bd:a4:d3:ab:a8:86:8b:d3:45:ec:58:00:
90:1b:9c:6e:e7:35:be:72:29:47:5f:65:af:02:3b:
b0:63:4b:ea:2b:8c:07:d9:33:3e:80:43:d6:9d:c8:
32:4c:0f:6c:31:a1:c9:c4:ae:0e:97:1a:c7:38:e8:
50:60:66:fb:23:a3:86:5f:4f:15:87:25:58:87:26:
ff:30:b4:6a:89:1f:17:cb:05:08:25:27:7c:fa:26:
44:7d:0f:ad:f0:cc:4a:10:9b:2e:eb:1b:be:4e:2e:
2a:0c:41:fa:f5:28:0d:87:d0:74:03:a5:ba:b2:55:
43:20:58:ea:fe:16:97:73:78:40:93:7f:1c:42:97:
cf:7f:8d:d9:83:d8:08:31:26:69:47:77:8e:2c:73:
2c:8e:ae:1a:12:a0:f1:de:21:83:59:f2:0b:f4:6f:
95:7c:53:48:c0:de:19:bc:dc:59:2b:c1:40:69:f8:
c3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:21:A5:70:3D:1C:08:11:A7:37:83:A7:82:30:D7:27:27:9D:81
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:40:bc:d3:da:cd:38:87:4a:88:95:51:05:21:52:ca:ba:ec:
d9:6d:f2:8e:ca:f6:7a:dc:b6:58:80:0f:fe:11:cd:ac:c2:79:
8d:70:9b:57:f3:96:58:09:9a:31:65:9a:54:8a:e8:22:c5:0d:
f4:bd:49:1c:56:4f:c7:4c:9b:18:c3:f9:29:e0:b8:8f:f5:8d:
8c:a6:5d:52:ef:a6:15:28:7a:fd:4b:70:cf:22:8b:f7:34:84:
71:b6:fb:75:ed:57:19:ad:b1:6c:b3:60:af:f1:4c:1a:82:e4:
fb:dd:aa:9b:4e:b9:7e:2b:83:d8:c5:0f:65:70:59:9b:c8:4d:
49:2f:02:e2:42:27:d0:f5:75:50:b3:16:9c:51:ca:86:57:7c:
ef:d7:5d:16:c3:cc:e3:79:6d:84:3e:4a:f5:a0:1b:a8:32:b9:
94:a7:0f:02:7b:47:ab:9e:69:a6:88:7a:95:d3:ba:2b:9a:de:
fa:07:67:fa:58:86:17:4d:4d:bb:11:3e:2e:cd:bc:d7:2c:68:
04:e9:7d:cb:91:c4:8e:f5:06:07:a3:de:8b:28:2e:4e:e6:31:
99:c1:fb:db:e1:1c:4e:b2:7d:3c:de:e5:cc:fa:f7:57:3a:19:
03:4a:5a:9a:6c:9d:c7:3e:15:a8:46:03:b9:f4:ce:2c:a7:96:
94:81:c0:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8O7m/JeRwRnr/w14y09KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj
NWVmY2YwHhcNMjYwMzI1MTcwMDM5WhcNMjYwMzI2MTcwMDM5WjAzMTEwLwYDVQQD
EygxYmU5MjFhNTcwM2QxYzA4MTFhNzM3ODNhNzgyMzBkNzI3Mjc5ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIEci0NzmK6iAmWqKyhEspOID+Pw
jWjpFH9Uh9dbEZXGcYo5aFyvqhPBjZo0iFxzvn7kOIJWvCj9axG9RSpUeP9YWP9n
cPz6xA3BeiS9pNOrqIaL00XsWACQG5xu5zW+cilHX2WvAjuwY0vqK4wH2TM+gEPW
ncgyTA9sMaHJxK4OlxrHOOhQYGb7I6OGX08VhyVYhyb/MLRqiR8XywUIJSd8+iZE
fQ+t8MxKEJsu6xu+Ti4qDEH69SgNh9B0A6W6slVDIFjq/haXc3hAk38cQpfPf43Z
g9gIMSZpR3eOLHMsjq4aEqDx3iGDWfIL9G+VfFNIwN4ZvNxZK8FAafjDGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvpIaVwPRwIEac3g6eCMNcnJ52BMB8GA1UdIwQY
MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt
MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2
LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEC809rN
OIdKiJVRBSFSyrrs2W3yjsr2ety2WIAP/hHNrMJ5jXCbV/OWWAmaMWWaVIroIsUN
9L1JHFZPx0ybGMP5KeC4j/WNjKZdUu+mFSh6/UtwzyKL9zSEcbb7de1XGa2xbLNg
r/FMGoLk+92qm065fiuD2MUPZXBZm8hNSS8C4kIn0PV1ULMWnFHKhld879ddFsPM
43lthD5K9aAbqDK5lKcPAntHq55ppoh6ldO6K5re+gdn+liGF01NuxE+Ls281yxo
BOl9y5HEjvUGB6PeiyguTuYxmcH72+EcTrJ9PN7lzPr3VzoZA0pammydxz4VqEYD
ufTOLKeWlIHA6Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:31 2026 by rpki-client