Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
File: oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft (raw, json)
Hash identifier: baCbZTZs1zonYiktXmaoZTmqlBgsmbECuxmaGGGNegU=
Subject key identifier: A6:6C:9D:FC:5A:9F:F8:4E:21:58:2D:63:A0:2F:03:C7:7A:24:CD:B7
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial: 019D26289264839DA4561798E111AA559C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
Manifest number: 06CB
Signing time: Wed 25 Mar 2026 18:01:26 +0000
Manifest this update: Wed 25 Mar 2026 18:01:26 +0000
Manifest next update: Thu 26 Mar 2026 18:01:26 +0000
Files and hashes: 1: fcv9CeFZofVzFIT0OS1kEqSLEro.roa (hash: mwt6iTwv8E5A7UEcMz2+LqSnC9Jb0HshexX8iDEURr4=)
2: oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl (hash: roPTpJBSig1lL7PNZlQYSUCHvzNXb4tDT3MvtrbQaXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:92:64:83:9d:a4:56:17:98:e1:11:aa:55:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Validity
Not Before: Mar 25 18:01:26 2026 GMT
Not After : Mar 26 18:01:26 2026 GMT
Subject: CN=a66c9dfc5a9ff84e21582d63a02f03c77a24cdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:2f:55:d7:c5:3d:1d:6f:07:89:7a:7d:df:
49:f3:18:34:be:19:a5:72:9e:5e:5d:05:2d:58:78:
5b:55:76:b4:dc:0c:9b:82:62:54:41:27:fa:af:bf:
84:d7:7d:67:35:66:a1:6a:6d:c6:16:8c:b5:41:ba:
3f:5f:a8:03:bf:16:7c:cf:e3:d4:86:4d:b8:d9:a1:
b3:66:22:5e:f2:91:f5:a0:1a:5b:cd:c2:08:98:bc:
b6:7e:5d:90:79:4c:01:90:3d:d1:42:9b:5f:b9:6f:
91:73:6a:69:5b:f4:80:a9:74:0e:1d:35:96:3c:25:
83:c5:40:5b:55:dc:c4:28:eb:20:fa:2b:69:dd:ed:
56:d8:21:92:6c:df:3a:e7:65:8b:f0:44:2e:8b:e5:
ec:19:ea:37:1b:50:d3:00:01:54:2a:d0:06:6b:e6:
51:06:87:9b:e5:29:3a:8d:3f:e1:5e:f4:80:6a:28:
53:1a:e7:fb:4a:92:b5:50:e9:8e:c5:cb:b1:07:2e:
c5:7f:82:df:12:51:7a:6f:c8:dc:f4:25:56:e1:c8:
b1:1c:73:10:5b:c8:2b:ae:91:77:5b:98:23:0d:ac:
80:1e:66:9e:08:55:55:54:aa:da:8d:7b:87:70:c1:
72:f3:39:68:00:3b:90:39:e3:b5:e6:46:45:43:40:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:9D:FC:5A:9F:F8:4E:21:58:2D:63:A0:2F:03:C7:7A:24:CD:B7
X509v3 Authority Key Identifier:
keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:48:ba:44:17:94:ed:ce:67:ef:35:ee:c0:ec:f3:04:04:dc:
44:05:e0:4d:a0:8a:b4:bc:8b:60:24:8c:12:b1:e6:c8:17:a3:
a6:e2:e9:18:bb:30:40:10:19:eb:a2:f5:b5:2f:83:66:eb:a5:
7c:84:60:66:b8:f7:de:6b:2e:fd:a6:5e:ce:01:a3:42:44:6f:
95:e4:75:a7:1c:dd:df:a7:56:93:21:c8:d4:b4:eb:0f:e8:4f:
07:49:cc:41:fc:60:0e:0f:be:13:87:b7:b0:d2:af:ac:e8:c8:
b0:82:b6:d4:17:00:0d:8a:f1:29:1a:5a:13:76:45:18:21:3d:
6e:9a:8c:64:94:c5:98:e5:21:12:0e:ac:27:d6:b5:ed:dd:03:
f3:9d:f7:7f:58:72:cf:c6:cd:1d:e4:19:17:68:ec:44:cb:a3:
e8:f6:c4:31:5b:92:ed:66:c5:50:6c:1f:6e:89:a2:2f:a6:44:
89:b5:e5:a6:a3:a2:b8:c4:e9:b7:e5:d5:2f:b1:64:22:07:16:
d4:a0:75:55:2c:f6:a5:fd:7b:37:01:d3:08:ab:ef:f4:27:3c:
7b:62:c7:8d:d7:77:af:6d:c2:f5:3c:7d:5c:f9:1a:18:b1:3d:
f8:a8:f4:6e:9d:ca:1a:ba:36:17:b2:28:2e:de:b0:af:7a:80:
7a:19:0d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:53 2026 by rpki-client