Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
File: txOOSEDKo6G9UYUnFKE1-w6DfEU.mft (raw, json)
Hash identifier: rZh0zY9WzNYofiiXTp/xbx4C/tt9OYBTN6N0iTFAeKk=
Subject key identifier: 61:A0:23:EC:73:0F:5E:34:8B:35:04:89:3E:B0:20:B2:DC:60:45:83
Authority key identifier: B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45
Certificate issuer: /CN=b7138e4840caa3a1bd51852714a135fb0e837c45
Certificate serial: 019D33ACCC6F844D3899086134B53ABF1C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
Manifest number: 010E
Signing time: Sat 28 Mar 2026 09:00:55 +0000
Manifest this update: Sat 28 Mar 2026 09:00:55 +0000
Manifest next update: Sun 29 Mar 2026 09:00:55 +0000
Files and hashes: 1: MQETek41Wy3jt_rGNyu3Hn-7_EA.roa (hash: d25pnju/DR6S1vf/CWN7TeMWaDuW0Zyl4oVi8NH6iUw=)
2: txOOSEDKo6G9UYUnFKE1-w6DfEU.crl (hash: MBNnm0r/C0X19YDofwaaVuDOc/pNusWiGHYCbP1A1qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:cc:6f:84:4d:38:99:08:61:34:b5:3a:bf:1c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7138e4840caa3a1bd51852714a135fb0e837c45
Validity
Not Before: Mar 28 09:00:55 2026 GMT
Not After : Mar 29 09:00:55 2026 GMT
Subject: CN=61a023ec730f5e348b3504893eb020b2dc604583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:7a:44:f7:e6:37:ed:4e:93:44:fb:fa:e0:
ec:b1:7a:fc:4a:96:93:53:07:8c:ea:82:c2:43:a5:
fa:c4:56:5e:73:64:0d:14:19:3d:70:aa:d6:24:1f:
0c:16:35:1c:f2:90:06:4e:eb:11:04:e9:e7:90:ac:
34:04:1d:c7:44:26:61:cc:17:0e:38:12:6b:1e:e1:
a5:99:12:67:57:b9:5f:f7:a3:8e:ad:26:84:9c:40:
45:fb:88:d4:8b:5e:a9:8b:66:8b:98:02:92:4e:97:
ce:ee:21:d5:78:ec:63:0f:45:91:d1:d7:7e:a7:08:
f2:a9:8c:68:7c:49:91:d0:dd:e4:c7:8f:6e:68:51:
f2:54:4a:c2:ed:fe:e7:4f:55:ea:60:35:15:53:74:
55:b8:8c:6a:62:8c:49:17:3a:7d:fc:4b:d2:3d:85:
2e:a1:c6:5c:4e:9a:23:e1:7d:cd:b1:31:20:2f:4c:
8f:fe:5e:f7:6d:d9:7f:2b:28:f3:d6:eb:bd:00:42:
af:40:9c:26:48:5f:6a:6a:96:c3:9a:81:70:d6:fd:
94:60:02:42:c8:83:52:98:70:1b:57:80:06:67:52:
71:54:16:29:42:af:04:3d:7d:ba:f1:55:97:7d:ee:
71:0d:fa:f6:fb:11:18:2b:b8:71:74:76:33:12:5c:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:23:EC:73:0F:5E:34:8B:35:04:89:3E:B0:20:B2:DC:60:45:83
X509v3 Authority Key Identifier:
keyid:B7:13:8E:48:40:CA:A3:A1:BD:51:85:27:14:A1:35:FB:0E:83:7C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txOOSEDKo6G9UYUnFKE1-w6DfEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2097ea-232d-4a2f-90e7-43fe4a51b54b/1/txOOSEDKo6G9UYUnFKE1-w6DfEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2f:30:c7:4e:c7:8d:22:2c:21:36:06:61:3e:02:79:0b:82:
43:1c:87:03:71:64:31:f3:81:0a:78:40:db:bd:28:40:f9:7a:
9b:60:c2:08:b2:8d:79:d8:b8:bc:76:7c:15:7b:73:44:22:37:
13:d7:8a:df:2e:7e:38:70:b8:bf:0c:4c:69:a7:ce:09:17:69:
be:63:52:a8:f3:d5:b3:f3:0b:64:40:53:9c:a4:48:ae:7d:6c:
8d:ea:49:3c:0d:81:eb:31:34:44:2a:5d:55:d2:79:9a:b3:d4:
5b:83:eb:63:11:e0:a0:8d:39:84:a0:82:64:ac:f8:3d:90:8f:
c3:4c:15:ed:38:bb:25:c9:e5:29:f7:5e:fc:8d:f5:f0:5e:d5:
e9:f0:8d:a2:bd:76:47:70:73:34:2f:21:69:7f:7f:ba:1a:12:
13:b5:c1:45:16:56:2a:cb:d5:fa:ab:76:a7:ea:49:e9:8f:5d:
b9:4e:47:d4:cc:b7:37:f5:b9:20:82:b3:0c:0c:10:82:ab:57:
eb:ff:21:a2:74:ea:85:33:6e:8a:fa:f6:f1:88:0f:d5:32:a7:
73:49:96:cd:78:3b:a6:a7:74:63:d8:df:ed:53:57:b2:b2:3a:
10:13:e6:0d:51:b8:7f:b0:41:fb:ac:9a:d9:9d:50:12:05:75:
4f:28:40:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zrMxvhE04mQhhNLU6vxwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTM4ZTQ4NDBjYWEzYTFiZDUxODUyNzE0YTEzNWZiMGU4
MzdjNDUwHhcNMjYwMzI4MDkwMDU1WhcNMjYwMzI5MDkwMDU1WjAzMTEwLwYDVQQD
Eyg2MWEwMjNlYzczMGY1ZTM0OGIzNTA0ODkzZWIwMjBiMmRjNjA0NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fp6RPfmN+1Ok0T7+uDssXr8SpaT
UweM6oLCQ6X6xFZec2QNFBk9cKrWJB8MFjUc8pAGTusRBOnnkKw0BB3HRCZhzBcO
OBJrHuGlmRJnV7lf96OOrSaEnEBF+4jUi16pi2aLmAKSTpfO7iHVeOxjD0WR0dd+
pwjyqYxofEmR0N3kx49uaFHyVErC7f7nT1XqYDUVU3RVuIxqYoxJFzp9/EvSPYUu
ocZcTpoj4X3NsTEgL0yP/l73bdl/Kyjz1uu9AEKvQJwmSF9qapbDmoFw1v2UYAJC
yINSmHAbV4AGZ1JxVBYpQq8EPX268VWXfe5xDfr2+xEYK7hxdHYzElxXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGgI+xzD140izUEiT6wILLcYEWDMB8GA1UdIwQY
MBaAFLcTjkhAyqOhvVGFJxShNfsOg3xFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMDk3ZWEtMjMyZC00YTJmLTkwZTct
NDNmZTRhNTFiNTRiLzEvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8yMDk3ZWEtMjMyZC00YTJmLTkwZTctNDNmZTRhNTFiNTRi
LzEvdHhPT1NFREtvNkc5VVlVbkZLRTEtdzZEZkVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQC8wx07H
jSIsITYGYT4CeQuCQxyHA3FkMfOBCnhA270oQPl6m2DCCLKNedi4vHZ8FXtzRCI3
E9eK3y5+OHC4vwxMaafOCRdpvmNSqPPVs/MLZEBTnKRIrn1sjepJPA2B6zE0RCpd
VdJ5mrPUW4PrYxHgoI05hKCCZKz4PZCPw0wV7Ti7JcnlKfde/I318F7V6fCNor12
R3BzNC8haX9/uhoSE7XBRRZWKsvV+qt2p+pJ6Y9duU5H1My3N/W5IIKzDAwQgqtX
6/8honTqhTNuivr28YgP1TKnc0mWzXg7pqd0Y9jf7VNXsrI6EBPmDVG4f7BB+6ya
2Z1QEgV1TyhAHg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:03:24 2026 by rpki-client