Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier: 6GHXqncHdNK8r1KN3FW/AdrUeO8L7eVMDTRyvv8gLMc=
Subject key identifier: 4B:24:23:3A:8A:23:00:25:B3:09:53:82:9B:1F:37:59:4A:3C:56:F5
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 019D2A727F5A02D3699D06E8ED1856BEB4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 14:00:39 +0000
Manifest this update: Thu 26 Mar 2026 14:00:39 +0000
Manifest next update: Fri 27 Mar 2026 14:00:39 +0000
Files and hashes: 1: TY6_RErHZwMLwaGjVhsCzV2QsIA.roa (hash: Pen7p5QY0R4eFgeU4z2Sze4YFXIqdZffU0dnu0AuPAk=)
2: b_1Qwkm_dwtq6WHZLgklv_RTWY8.roa (hash: +hT3xYsa619lAWaMx5WmCqSJiQ9WY/MqRSeQbajC3rQ=)
3: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: Ml/XOl7Y3ACE7zdpy94Ctqh35chYOti6Pa5j1Rba1fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:7f:5a:02:d3:69:9d:06:e8:ed:18:56:be:b4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Mar 26 14:00:39 2026 GMT
Not After : Mar 27 14:00:39 2026 GMT
Subject: CN=4b24233a8a230025b30953829b1f37594a3c56f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:4d:6f:b6:b8:9d:a3:8d:cb:61:28:56:72:
3c:ad:f1:83:07:31:78:3e:77:ba:a2:ce:51:51:92:
97:a5:d3:d0:9f:75:ed:de:7a:8e:f9:21:c0:06:61:
59:dd:d8:8c:b5:70:6b:21:ba:26:ed:24:c2:60:c4:
15:e2:96:5d:69:29:e0:a2:54:bb:b7:81:f0:e9:f3:
1f:69:f7:b9:d1:9a:a8:ec:bf:ea:9c:98:4d:34:39:
5d:b2:29:4b:2f:21:e7:c2:5d:cf:c2:13:ec:51:1f:
64:16:ff:5a:10:9d:f2:11:85:e6:44:38:16:9a:a9:
e2:21:1e:01:7e:dd:d0:40:c9:8e:c9:ce:c2:a0:14:
36:8a:12:76:e0:f9:2d:4d:9f:d8:17:dc:7a:ff:1e:
d9:09:27:12:27:b2:2d:a5:01:e0:46:c7:9d:6a:b9:
89:16:01:a5:5e:31:ea:e9:0a:71:2b:8c:87:56:71:
38:c6:40:3b:96:5a:c9:3e:3e:3a:bf:e3:84:6d:2d:
45:0a:bf:fe:dc:37:27:95:07:3a:cc:3d:32:42:d1:
9f:84:f4:6a:48:e8:17:b5:47:01:32:ee:61:7b:55:
98:d2:bd:6d:a2:9f:c0:df:57:b9:53:8d:56:e4:98:
31:2a:ef:60:c4:2e:b5:a9:18:a9:ff:61:39:2c:be:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:23:3A:8A:23:00:25:B3:09:53:82:9B:1F:37:59:4A:3C:56:F5
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:69:c5:86:68:3e:e0:05:23:f5:19:5e:3b:84:d2:8f:c6:24:
83:13:f3:c1:32:b2:10:5d:15:df:ea:a5:25:54:5d:86:c0:20:
e9:54:85:93:40:ec:c4:9c:94:a9:65:88:73:98:54:f2:a8:36:
5b:7c:cc:a2:f8:12:e6:1a:f7:74:00:d4:a8:95:07:b3:77:e0:
ef:18:39:bb:11:d1:f6:c0:fe:a7:ca:61:1f:47:5b:75:1c:30:
be:91:e1:8a:c4:d1:cc:1c:a1:c4:21:ee:69:69:8a:dd:72:de:
23:bf:47:a9:81:52:28:5c:33:de:b6:c4:f6:76:23:2e:59:48:
66:ac:9e:d9:b4:77:bf:4c:a9:49:78:09:e5:18:cf:44:72:25:
26:54:dc:b4:f3:f4:f9:2d:fb:4e:3f:df:a8:18:3a:bd:d1:4f:
09:64:97:61:b5:b1:a1:b6:85:99:6b:3b:da:af:5c:e6:a9:a8:
55:80:73:ba:86:b8:4b:d2:f6:98:06:c3:d3:d9:0e:ca:29:ba:
1e:ca:1a:1c:45:db:9a:03:c3:25:48:42:c7:7b:16:4e:95:54:
df:f3:86:b8:a7:27:b3:0d:41:9a:89:17:b9:19:13:ec:cb:c5:
9e:85:76:27:9f:cc:63:34:6f:33:2f:a3:88:70:c2:40:1a:55:
c5:0c:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:36:44 2026 by rpki-client