Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: 2KsSQQS/OTOi3NcrFqwLw9F8uWuSb9ON3rXDhYgyzYw=
Subject key identifier: 0C:E0:72:B0:D1:A7:D1:C4:99:12:4C:83:03:DE:BD:4C:7A:70:C9:FC
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 019D28BB1BA3990AFF4F32A8DDE23175A271
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0DBC
Signing time: Thu 26 Mar 2026 06:00:44 +0000
Manifest this update: Thu 26 Mar 2026 06:00:44 +0000
Manifest next update: Fri 27 Mar 2026 06:00:44 +0000
Files and hashes: 1: LkRlWvjojGp88ImWjfx2Z3qaOy4.roa (hash: kB89kqUtMQKcyA7jSVcONA2ZKYzA7LpbjPMFFP5OhVw=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: 1FwQKkPEzv3zs48se0vNAHFovEt61JYf5MCj2KsRk/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:1b:a3:99:0a:ff:4f:32:a8:dd:e2:31:75:a2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Mar 26 06:00:44 2026 GMT
Not After : Mar 27 06:00:44 2026 GMT
Subject: CN=0ce072b0d1a7d1c499124c8303debd4c7a70c9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:03:4d:7e:3a:c4:ba:2a:8b:42:cf:42:2b:
8b:21:2d:ad:a1:86:19:e5:a7:4f:c4:39:9b:4d:32:
30:47:44:d7:a2:35:48:ac:a7:54:f5:d7:98:6f:47:
07:da:f6:77:6d:1b:43:27:51:53:84:37:64:51:e4:
45:d1:46:cf:16:bf:35:5e:90:1b:28:eb:f1:dc:3c:
e2:e4:34:d7:ae:82:3b:91:58:8b:97:c7:2c:85:e5:
d0:fc:d1:58:cb:f5:10:d8:27:ab:30:7e:85:64:7d:
f6:ec:8f:80:f1:de:73:53:53:ab:7f:19:58:18:db:
63:0f:3e:21:9a:99:23:f9:8b:3a:7f:5f:18:6f:60:
16:c8:3c:23:53:8c:10:f6:96:08:fc:83:f8:f3:7b:
f8:47:17:eb:6b:15:0f:1e:bf:7b:f1:57:ea:08:77:
b5:16:8c:4a:96:dd:2c:ca:71:9b:7e:44:c8:5b:b4:
12:bc:9d:e4:47:96:b5:c4:36:84:97:da:35:a8:25:
88:df:1c:9b:4b:83:7a:39:1d:31:cf:ab:58:17:95:
3a:33:b7:a2:85:63:05:55:7f:8e:61:f3:e3:73:b6:
66:38:0c:d1:87:94:65:5c:a3:8b:58:0e:d0:4c:0b:
39:6d:8a:56:d8:ee:ba:d9:aa:7f:a4:b2:6c:28:a2:
4a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E0:72:B0:D1:A7:D1:C4:99:12:4C:83:03:DE:BD:4C:7A:70:C9:FC
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:40:3f:d1:d2:87:0b:bd:a7:a9:19:a7:af:ff:59:bf:75:8a:
b0:48:d1:0e:3f:db:30:cf:3c:12:20:0a:76:67:26:3d:9b:3f:
79:7c:12:8f:d7:db:87:0e:46:1e:18:1c:0c:3a:20:52:3f:9e:
5e:9d:52:0c:2d:2f:3e:10:47:c9:45:a2:5a:8b:e0:f9:e1:dc:
11:f7:9f:b6:a8:da:57:a3:77:68:56:8b:3a:2e:13:95:73:67:
a0:8e:24:fd:77:92:f8:5c:47:80:6c:4a:18:0e:a8:9c:ed:20:
91:d9:e6:70:3e:5f:36:dc:be:0b:0a:6c:e5:59:b6:dc:9a:35:
c9:1e:5d:98:83:cf:3a:a6:03:ba:ae:e8:63:e5:03:ec:69:94:
71:f7:9b:d2:29:5f:8e:4b:74:9e:a4:42:ce:a0:8c:66:f7:db:
96:ff:20:b8:5b:b0:69:33:b3:3f:97:7b:7e:01:a1:9c:71:27:
e4:47:74:01:8c:7a:db:c4:52:8f:f7:a8:b7:3f:5a:0f:7a:1e:
79:9a:24:c1:66:16:46:24:a3:30:87:c8:77:f0:75:42:e6:6d:
c7:c5:aa:ae:e1:13:cb:93:34:e1:6b:0c:82:15:af:48:ee:45:
43:43:f9:04:0d:d9:74:37:f7:5d:8f:e0:cf:36:a7:72:b0:da:
72:f6:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:51:43 2026 by rpki-client