Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: mLSDhCLpEMmCn2egmLyZDHM/xwWBeaaeYIFzf6pivP8=
Subject key identifier: 25:D7:30:89:11:8F:8E:51:E1:82:A6:FD:53:1C:AF:A6:47:C4:B3:0A
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019D25F1000050BE99D115343D9450F4D26C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1896
Signing time: Wed 25 Mar 2026 17:00:44 +0000
Manifest this update: Wed 25 Mar 2026 17:00:44 +0000
Manifest next update: Thu 26 Mar 2026 17:00:44 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: bH9WiDeIv774nZ33mvO0CzWulz3dYIUaZJ6qMkkZkNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:00:00:50:be:99:d1:15:34:3d:94:50:f4:d2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Mar 25 17:00:44 2026 GMT
Not After : Mar 26 17:00:44 2026 GMT
Subject: CN=25d73089118f8e51e182a6fd531cafa647c4b30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:80:99:39:ff:d0:14:61:3e:72:87:ce:bc:
77:30:b3:c5:ea:df:44:7e:9f:ad:9a:a4:27:0d:b0:
44:2e:97:d8:1d:a0:94:d1:76:d3:ba:80:3c:91:7a:
18:14:af:e6:69:f2:57:fd:9d:be:26:a0:b7:ff:1a:
ad:69:c2:f4:1e:c3:a9:0f:7a:95:da:d4:28:71:11:
4f:9f:25:67:ee:b6:50:3d:fa:d2:b4:31:92:8f:1b:
d4:bc:33:bb:7f:af:0e:f3:6e:e7:78:f7:98:6c:2e:
1c:d7:fd:22:ec:a8:a8:d6:8c:57:25:fb:71:51:c7:
df:66:45:09:c5:31:36:8e:d3:14:9c:b9:33:de:a4:
e5:c4:e8:79:0f:48:85:48:a7:99:39:e2:f6:95:c8:
e9:a2:b0:5f:b5:d5:bf:de:9d:df:89:46:ed:e6:44:
5c:33:fb:82:9a:06:bd:c3:e6:af:91:82:c8:5a:ff:
9c:9d:41:2b:ce:da:ae:75:c4:23:d7:66:92:8e:b4:
aa:64:4e:ec:c4:55:74:ee:2d:4a:24:0c:2a:8d:a7:
f9:0c:70:46:6a:9c:e5:2e:1b:71:1b:72:a7:1c:16:
8b:61:ab:fa:f6:83:3d:12:b2:79:37:8e:0e:c0:8e:
a1:69:f4:ba:b0:47:ed:b0:39:e8:f0:72:a7:26:d7:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:30:89:11:8F:8E:51:E1:82:A6:FD:53:1C:AF:A6:47:C4:B3:0A
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:df:99:78:8b:ae:53:71:01:15:b4:a1:fd:23:d7:22:92:1b:
4b:a7:ca:4b:95:95:ce:83:7d:af:19:d2:a5:5f:95:f8:6f:4b:
91:88:cc:93:eb:4a:20:33:4a:c8:5f:a5:51:93:0e:04:da:48:
b4:7a:70:f2:09:14:75:38:93:be:fe:ce:01:fd:37:a0:58:17:
81:b5:49:48:b7:ab:e7:5a:b1:65:75:34:1c:03:20:94:f6:a7:
65:60:2d:da:27:9c:04:df:51:59:56:ff:a0:e9:15:c3:25:f8:
b3:5a:84:c2:60:b7:98:00:e0:52:25:ed:49:8c:ed:97:33:48:
05:ea:c2:6f:e4:6b:1c:aa:7e:95:5d:e5:ed:39:38:cf:14:2a:
79:3b:38:2f:4f:3e:3a:55:da:79:21:56:08:6b:e1:f6:ee:cd:
da:a4:02:0c:75:76:09:e9:e9:f7:97:6f:29:e5:fb:4b:ea:16:
ae:de:c2:1e:c2:34:63:c9:df:16:21:47:19:45:c8:5e:ed:3f:
75:26:d9:88:d7:79:f0:41:7b:d1:ef:d1:e4:c9:22:58:88:91:
b2:67:51:9d:98:a5:bb:04:67:79:b1:68:d8:bf:72:9f:d9:55:
7b:3f:5a:99:3d:1d:5c:47:d4:82:4d:b6:a9:47:3f:53:11:0f:
aa:d4:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:34 2026 by rpki-client