Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: Nadu4VieODyT2Tj5WL9JQDU2IckT0a3e8Tfi8uKSO10=
Subject key identifier: 61:06:3E:A4:EC:93:1D:A2:E8:57:10:B6:1D:07:E2:08:37:17:29:5C
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 019D26CCC31ECBCF59183C1EB3D7F7B9679A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 21:00:46 +0000
Manifest this update: Wed 25 Mar 2026 21:00:46 +0000
Manifest next update: Thu 26 Mar 2026 21:00:46 +0000
Files and hashes: 1: 1nHUlwt2X9A095aW8Ml7tVPj8v4.roa (hash: eAfz7g6fQcUQW5klBUU8wHwhbjDDEZDHt243j4/4j64=)
2: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: NFIj+A8XTg235h6O+DMoS4HX/g3FECGhum5obMbQFYw=)
3: Nq0UTD_SclIG9HFMOsAxBcWAB9U.roa (hash: znYnyo3jsEa5JPCdrns9UrjveBbD2qT9TL2pzWDyjTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:c3:1e:cb:cf:59:18:3c:1e:b3:d7:f7:b9:67:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Mar 25 21:00:46 2026 GMT
Not After : Mar 26 21:00:46 2026 GMT
Subject: CN=61063ea4ec931da2e85710b61d07e2083717295c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:a4:c0:f3:51:04:3d:22:b2:b1:33:c9:dd:
c8:60:4e:fa:10:c6:69:19:d0:d9:19:63:e8:57:ca:
fe:c5:25:02:83:f1:0e:ef:46:43:46:7d:b3:f6:f1:
3f:d5:b6:de:92:81:31:d2:bc:12:e2:64:14:da:ff:
00:99:23:37:f8:46:81:23:77:26:5b:00:55:c1:33:
9f:11:c9:43:b6:f0:d1:3d:3b:5c:ff:c5:6f:eb:0f:
6c:23:84:83:dd:71:d9:4e:c3:5e:e1:c0:98:c6:dc:
d1:bd:2b:e2:49:d3:0e:e9:ff:68:24:a3:f2:38:10:
24:4e:a8:ea:f1:ad:70:f1:2a:9e:58:f0:8e:59:18:
a9:2b:d6:c6:f8:2a:95:88:6e:cd:22:6a:63:ff:79:
ac:58:f5:c1:59:1a:6c:4d:9d:ac:56:9c:c1:a6:c2:
14:dd:d3:8e:7d:82:c4:04:a5:64:b1:79:b9:f4:57:
d7:99:46:f3:22:19:9e:67:71:c5:8c:3d:03:29:05:
50:de:4d:eb:f9:da:e7:7f:6a:e1:85:0e:f6:15:9b:
1c:8a:5e:fc:32:0a:8e:b3:ec:45:7f:f9:48:12:45:
a5:45:8f:3e:77:32:b5:8c:90:34:db:7f:24:6d:68:
a8:ef:2f:a9:d6:fa:cc:28:41:2b:a9:a9:6f:c4:be:
e6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:3E:A4:EC:93:1D:A2:E8:57:10:B6:1D:07:E2:08:37:17:29:5C
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a0:09:73:ee:6b:d5:88:a8:2d:77:01:06:18:fa:2c:cd:90:
b5:1d:e9:3d:ad:e2:94:3c:03:8f:7d:b5:38:7c:68:b3:0b:d1:
3c:b9:6d:67:dc:4f:8e:a9:0d:fb:fb:8a:9a:f1:53:6a:1f:f8:
0b:6f:76:25:aa:0f:e1:54:82:51:50:55:d2:1a:a1:c3:2a:c2:
d8:ad:63:91:24:0c:75:9c:bf:30:67:43:be:fa:10:db:87:d2:
74:3f:44:89:74:93:14:1d:ac:34:6a:76:90:90:c6:b1:13:4a:
4e:f7:0e:9d:25:76:b5:53:72:af:5a:04:0e:cc:5b:53:80:a8:
7e:bc:e2:95:10:45:83:a5:34:ab:13:a1:22:36:8d:78:c7:49:
5a:73:9b:f0:ea:ad:12:4c:50:68:4a:40:a3:47:92:e6:ff:fc:
43:2f:5c:47:14:2d:76:d4:aa:41:33:ca:24:59:95:7a:40:31:
f7:ea:12:aa:78:38:df:10:60:0e:c0:fd:02:65:6b:31:e0:56:
cd:f7:24:34:8c:78:82:9b:23:56:ee:de:66:b2:0e:21:1e:63:
ad:ee:74:fe:5f:24:01:cc:a0:0f:cc:b6:64:5e:b6:a7:e3:44:
3c:6c:bc:80:b1:2d:41:8c:74:4c:40:42:38:a4:f1:7d:79:1b:
ea:d6:06:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:26 2026 by rpki-client