Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
File: oet7cZVO3_yjWEyF-gj7EiQv7NU.mft (raw, json)
Hash identifier: dS1o5xgbcOs0Ye4uH2xPrC6k8JqM5wqg0JE60x0D+As=
Subject key identifier: D5:D4:7D:D1:BA:32:71:5F:78:A1:FC:46:6F:2E:AD:B4:FD:08:81:6F
Authority key identifier: A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
Certificate issuer: /CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Certificate serial: 019D28841D378BC621EC67ABBEE5D603FE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
Manifest number: 0158
Signing time: Thu 26 Mar 2026 05:00:39 +0000
Manifest this update: Thu 26 Mar 2026 05:00:39 +0000
Manifest next update: Fri 27 Mar 2026 05:00:39 +0000
Files and hashes: 1: lE1Kxf9PJiSztZNrzwwBPAVYUcU.roa (hash: jNZxU5D1EKLny/wqaNa70XGzWgiNnFCUNtLqg86RKFE=)
2: oet7cZVO3_yjWEyF-gj7EiQv7NU.crl (hash: ld/iyWo8iMMxu6aqw0OxZTpFgyFhomH4g+Y2slFCAc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:1d:37:8b:c6:21:ec:67:ab:be:e5:d6:03:fe:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb7b71954edffca3584c85fa08fb12242fecd5
Validity
Not Before: Mar 26 05:00:39 2026 GMT
Not After : Mar 27 05:00:39 2026 GMT
Subject: CN=d5d47dd1ba32715f78a1fc466f2eadb4fd08816f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:33:99:d1:e2:94:17:ed:47:92:8c:0f:9c:
58:f5:a3:ce:e5:48:50:6c:38:85:41:55:3c:0f:28:
a1:04:f8:3b:ca:40:3f:fe:d3:cc:96:f7:1b:76:2e:
b3:0f:a7:cb:2b:8a:c8:9a:dc:13:17:95:6f:18:46:
85:a2:b7:c4:3c:d1:48:92:0c:71:b6:19:f7:a2:a3:
6d:33:8e:48:5f:4a:7d:30:71:ff:ac:be:4c:ae:40:
b7:25:a1:36:91:e3:86:ed:83:4c:c9:20:86:84:5d:
cc:98:2b:88:20:1b:9c:e7:0e:a5:49:f7:ef:33:31:
4b:32:f9:a8:d9:ff:2e:ff:c9:5f:11:39:38:36:0a:
2c:4a:7c:f8:48:59:3b:a8:67:7f:3e:c5:45:47:5c:
89:40:55:79:cc:cb:8d:d6:b3:4e:e0:08:81:5b:de:
88:44:4b:2e:85:d9:cb:db:29:f9:77:4f:fb:3c:9f:
16:ae:a1:f1:4c:ea:67:f5:c8:9f:24:bc:59:c2:dc:
95:6a:78:34:4d:df:0d:92:5a:1b:1a:9f:e7:a9:0a:
1c:75:96:f1:cc:50:bd:77:e7:bf:f0:f4:78:78:4d:
ce:19:39:ea:fa:07:e6:4e:79:22:78:6d:f3:61:63:
b3:e0:dd:b7:af:fa:67:5e:6f:08:ad:1a:54:27:1d:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D4:7D:D1:BA:32:71:5F:78:A1:FC:46:6F:2E:AD:B4:FD:08:81:6F
X509v3 Authority Key Identifier:
keyid:A1:EB:7B:71:95:4E:DF:FC:A3:58:4C:85:FA:08:FB:12:24:2F:EC:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oet7cZVO3_yjWEyF-gj7EiQv7NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/b6c505-ef47-4809-b5fc-0ed17a69800f/1/oet7cZVO3_yjWEyF-gj7EiQv7NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:80:26:a1:18:37:96:8c:2d:42:10:f0:f1:86:5b:0f:3b:
d2:b4:dc:63:74:21:bf:4a:aa:b3:0c:7a:61:33:e9:15:b2:c1:
a3:40:e0:9b:49:10:37:98:d9:00:f2:42:97:44:27:e7:40:71:
c2:68:00:fd:27:14:70:91:04:30:28:e7:1c:bb:81:43:f0:2d:
36:e3:a8:a4:25:bc:91:65:20:2b:b7:9f:76:ef:ea:2b:9d:73:
f8:b3:29:e8:0b:45:f7:0e:f3:75:ec:81:43:e8:71:ec:f8:04:
5e:bd:c0:73:45:37:e8:3a:e5:a9:2a:28:d2:49:37:38:bc:42:
3b:1e:25:44:78:eb:a8:2e:6d:86:39:15:25:4e:fe:e0:5d:7e:
11:e5:27:fa:56:c9:e3:72:12:eb:d1:33:dd:b4:51:83:59:eb:
08:f2:75:5f:0b:40:0b:63:19:56:2d:3b:45:e4:18:ee:37:01:
9c:13:08:b2:ac:06:a6:85:98:b8:20:45:0c:88:4b:a6:79:3f:
61:86:9b:20:c3:78:87:17:af:77:e4:97:5b:0f:91:b9:43:55:
0c:b5:65:04:94:f6:aa:e3:f5:b7:d7:c5:80:de:e0:3c:27:97:
7a:9a:4d:31:9a:10:89:c0:c4:a1:29:ab:83:05:00:a0:77:a4:
09:8c:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:07:43 2026 by rpki-client