Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
File: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft (raw, json)
Hash identifier: UYSzcaFhEw1nRu67U/aJXrPxS1NEOIjACDgzpvv3bk8=
Subject key identifier: C1:1D:AC:A1:7C:BA:39:41:89:26:28:D5:14:C5:E2:44:D5:9B:80:3D
Authority key identifier: A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
Certificate issuer: /CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Certificate serial: 019D284DEF978B1FADEA8306C8AA21B4505F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
Manifest number: 0360
Signing time: Thu 26 Mar 2026 04:01:29 +0000
Manifest this update: Thu 26 Mar 2026 04:01:29 +0000
Manifest next update: Fri 27 Mar 2026 04:01:29 +0000
Files and hashes: 1: 0sunuK8mYCHK4l0By1mDKNLTXQU.roa (hash: Bp/kxKZVCpRcoYpimQ/V45yUfQ2UHcCMtSwdBAO1PEo=)
2: oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl (hash: 7OTDIaT5ZJm1XvS8euMNFzIaJraObEpHJnn6WfBDqbE=)
3: qxHzPA9O-8GpBxVTvr_9Ai6EB2w.roa (hash: GWiMwB08/vtuFeBPkac8MF40YEUg4abdNc1TrrvX9Is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ef:97:8b:1f:ad:ea:83:06:c8:aa:21:b4:50:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18f02d5ebc9e8b9521af7132b12cb6bb65693c6
Validity
Not Before: Mar 26 04:01:29 2026 GMT
Not After : Mar 27 04:01:29 2026 GMT
Subject: CN=c11daca17cba3941892628d514c5e244d59b803d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f7:91:2c:9e:73:0e:c3:48:a9:16:f1:a7:fa:
e3:25:3d:dc:1b:36:6c:0e:ad:de:62:f9:94:43:40:
2d:3e:74:f0:fc:24:aa:10:66:bf:7c:b5:9c:36:0a:
e4:2c:05:31:ac:28:6b:2a:d0:9a:9b:ab:f5:20:d8:
01:41:d9:f9:df:4b:b4:94:fc:e2:ea:c5:35:97:ab:
bf:d9:27:5b:ad:f6:ae:d0:ff:62:86:6d:aa:66:f3:
88:28:62:e8:c7:f5:a2:35:c6:b7:0a:a0:74:39:99:
ff:8c:2d:6c:c6:2b:7a:f6:a6:bb:cd:bf:2c:26:64:
c7:db:5a:90:c2:08:9d:3e:09:f2:8f:30:23:a8:f0:
85:e9:93:42:97:68:3a:03:09:fc:67:9d:db:64:ab:
c1:2e:25:f5:2f:b8:55:ef:ea:f0:63:71:1e:7d:22:
93:e8:91:8b:e3:8d:4a:b7:8c:ab:c5:4f:6d:c0:17:
27:9a:6f:f3:ec:9b:10:36:b0:f1:8d:3f:56:fc:b9:
08:b6:a2:d2:ac:75:ed:94:1e:ad:2d:ee:2f:58:0a:
1a:e3:e1:a0:c4:be:a5:e5:11:a0:fd:2b:bb:b1:90:
6c:5e:54:f0:90:21:12:1a:0c:fb:83:5f:d6:d5:42:
7a:83:c4:0a:7e:f5:28:cc:57:80:50:45:19:bf:05:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1D:AC:A1:7C:BA:39:41:89:26:28:D5:14:C5:E2:44:D5:9B:80:3D
X509v3 Authority Key Identifier:
keyid:A1:8F:02:D5:EB:C9:E8:B9:52:1A:F7:13:2B:12:CB:6B:B6:56:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/71a97c-35f4-4f21-a43a-7396e42b1830/1/oY8C1evJ6LlSGvcTKxLLa7ZWk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b8:10:a4:85:25:00:dd:0b:d5:51:19:02:9f:e5:cf:cc:fe:
7c:7a:80:1d:e3:28:8a:c3:18:5b:df:7d:4c:ef:0a:a6:92:36:
82:59:24:1f:4a:62:33:ac:17:e7:4a:f6:59:e5:c0:7e:f9:c6:
47:52:cb:2b:e4:f8:7a:f5:1a:3c:1b:6c:f7:84:7f:5d:e6:35:
70:ab:74:28:f5:03:98:13:34:7f:84:a4:8b:de:0e:ca:a6:ab:
83:c5:11:94:b0:6b:05:b3:98:d7:ef:cd:1f:99:a5:bf:26:07:
5c:8c:6b:59:73:67:d4:b1:12:70:81:43:e2:b1:4d:bd:e8:9e:
ba:d2:07:db:bd:8d:12:cd:3a:52:cc:eb:b0:85:ad:db:81:51:
98:53:f4:ac:2c:df:f3:5e:9c:39:ff:43:18:a3:9f:9e:bc:e9:
be:a9:65:89:67:b9:3b:21:35:32:5d:83:b0:a6:2d:88:d8:3d:
5a:62:b8:a1:47:e9:54:16:d4:12:7f:64:32:68:e0:57:99:23:
d6:f1:37:b1:09:21:8b:a0:ec:69:23:d1:24:4d:17:39:9e:af:
73:ed:d9:26:98:68:84:45:90:9f:ae:c1:46:0a:77:e8:47:e8:
25:81:ad:40:1e:6a:a7:24:18:ec:fc:66:80:90:77:ba:d2:0d:
91:0e:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:18 2026 by rpki-client