Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: Bs8P44X0f8h9wQmTwqfoJCuaChwnlCHtjtM78OJHp5o=
Subject key identifier: F5:80:1A:65:E6:91:AB:6A:7D:76:D6:5E:38:AB:07:4A:52:31:55:B1
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 019D269624A0A62376E5043CB45B8D9DDBDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 048F
Signing time: Wed 25 Mar 2026 20:01:07 +0000
Manifest this update: Wed 25 Mar 2026 20:01:07 +0000
Manifest next update: Thu 26 Mar 2026 20:01:07 +0000
Files and hashes: 1: HL__qaGc13R_JJTvUCH7c2B82tc.roa (hash: HV/JSNT03SbWk0eCa+7g8K+2C1DRHozLoBRXr4HShVE=)
2: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: U2JS/Dvpb/4VoVd8WqaXrkJ0WU7nqlJZ5RsWzxxPF4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:24:a0:a6:23:76:e5:04:3c:b4:5b:8d:9d:db:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Mar 25 20:01:07 2026 GMT
Not After : Mar 26 20:01:07 2026 GMT
Subject: CN=f5801a65e691ab6a7d76d65e38ab074a523155b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:20:fb:e9:fe:0e:10:d4:ff:a6:7a:29:fd:92:
35:14:77:f2:99:df:62:e2:8d:75:6d:67:4e:9d:fa:
41:41:47:9a:d3:7f:41:9f:a2:ce:30:b9:50:db:47:
ae:cd:fb:ef:70:02:ff:48:20:22:e8:10:96:cd:47:
74:25:1a:a5:92:db:71:a7:d5:fe:d6:b9:31:40:d7:
49:70:ee:bd:30:c4:0f:a0:4b:2c:4b:eb:b3:83:37:
13:9e:19:45:d1:88:44:00:e7:cf:fa:3e:a6:a6:30:
30:d5:6d:7c:5c:a4:f7:eb:16:21:97:1b:31:ec:88:
76:cd:d2:e9:56:ed:cc:fb:7a:5d:a1:4b:a0:05:7d:
12:4f:a1:70:66:4e:4a:b9:42:a4:df:97:a8:1a:35:
cc:95:2c:ec:b5:ca:49:d4:3f:b4:db:f2:40:1e:d3:
20:a4:9a:4c:79:65:91:76:8d:f4:11:78:01:da:54:
52:cc:9f:32:54:1d:ff:c6:b9:78:3d:c4:2e:fd:92:
78:4f:00:3b:64:67:09:eb:93:df:0e:4b:d7:be:b0:
5b:a4:d7:a9:ac:05:fd:71:45:60:d2:94:00:16:99:
36:1a:ee:ed:bd:01:97:b8:8b:61:bd:4f:55:11:c2:
b1:73:9b:94:79:9a:1c:33:f5:b7:aa:88:c8:54:44:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:80:1A:65:E6:91:AB:6A:7D:76:D6:5E:38:AB:07:4A:52:31:55:B1
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:80:7f:83:88:42:12:d8:d3:8b:d7:37:0b:ab:0a:c3:ec:36:
99:6d:40:75:5d:80:38:65:8a:5f:fe:f6:01:e4:7a:9a:1a:dd:
f0:48:6d:dd:f1:dc:7f:38:26:0b:97:8f:ad:95:56:d3:14:b4:
84:9a:a3:29:33:ab:b1:3f:e2:a6:20:0d:8c:67:68:c7:eb:92:
ff:10:10:5b:7d:00:aa:52:ec:f1:41:aa:04:64:de:9d:36:7f:
b5:22:ac:db:0e:ad:2b:d8:2e:10:18:f4:c5:b2:05:01:1c:1b:
36:0f:6b:04:87:6c:0b:ff:df:94:27:b6:37:17:1d:82:be:8e:
4d:34:0b:a2:75:94:74:5b:48:3e:96:49:98:8e:55:e6:ed:42:
80:cc:d9:8a:06:1f:e9:98:f8:5a:e4:56:f5:d2:a4:47:2b:20:
5f:f8:d9:32:63:ef:6a:8b:72:c3:cd:7d:24:7b:b8:4a:45:34:
3a:cd:dd:05:8f:b6:8a:69:79:cd:94:67:62:5d:bb:6e:be:55:
90:9e:2a:17:b0:67:1b:50:0b:15:a2:3c:6e:2f:70:3b:6e:1c:
ac:5f:dd:d0:0b:89:40:3e:38:48:c9:5e:a0:ec:53:71:d3:83:
ce:ae:18:14:5d:fa:2b:2f:6c:8b:64:4a:32:b6:13:a3:03:e0:
12:0a:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:01 2026 by rpki-client