Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: CmHHfjzOx4cw2R2xvS1+zkxAwOGKE3O0pPzGFLx7Bvg=
Subject key identifier: EC:E2:DB:EF:B0:56:B6:F6:DD:45:FB:37:17:0C:15:B5:15:CE:64:2F
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 019D29CDE18578D8C2E96B6F823F18700AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 072A
Signing time: Thu 26 Mar 2026 11:00:51 +0000
Manifest this update: Thu 26 Mar 2026 11:00:51 +0000
Manifest next update: Fri 27 Mar 2026 11:00:51 +0000
Files and hashes: 1: 4Da2j7Bi2NbmfPUpK3LZNaUxeKw.roa (hash: sVS+CgceR72IsZG8/n9nxIxVExnNtdYxPtu3DwmNmPc=)
2: 6A3jyIMKHg4wFV2SvrfE3nKtTQo.roa (hash: W2pcnpJGAQePhmM2PwP+0VJq/IVZmkSfxPewBfpKTAk=)
3: Vb0Mb3VEM3veCPCrKvrEOo3esUE.roa (hash: wsQvVbcVPuKEsiVmA3jQc45iZrjeqJsQtYSOLDFq6yA=)
4: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: DPrAGRdUze6L1Cm45AlzglpMzaRJJxKdAlNpf9ol+NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:e1:85:78:d8:c2:e9:6b:6f:82:3f:18:70:0a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Mar 26 11:00:51 2026 GMT
Not After : Mar 27 11:00:51 2026 GMT
Subject: CN=ece2dbefb056b6f6dd45fb37170c15b515ce642f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:f1:58:b4:45:b5:1e:31:7d:e5:25:b0:c0:
a1:9d:8c:21:e8:13:b7:d1:cf:40:bb:24:0b:28:b4:
3d:04:f6:fe:b4:ad:b4:96:61:69:5c:4e:4f:cb:da:
50:86:41:94:20:86:dc:be:6e:1b:21:a0:a5:2e:35:
82:f6:3d:fd:14:cc:39:ab:53:a0:73:88:e7:ad:2b:
e9:b8:5b:aa:f7:83:39:2e:7b:6a:80:93:c1:58:37:
af:f2:86:d3:e1:62:77:2e:be:e0:d4:ce:98:71:c0:
68:8c:15:22:e7:f6:cc:0b:dd:1f:55:5c:13:ae:0f:
4a:90:ec:af:75:31:80:03:bf:80:b7:c9:4b:b1:27:
3b:58:5c:1a:8d:73:0e:a4:b1:75:50:38:2a:5a:af:
6e:d2:bd:18:b3:2b:5a:1d:0c:16:91:e9:3b:4a:74:
f8:c5:a0:8c:87:58:66:b4:21:e2:76:a6:85:23:7e:
f9:4d:d8:69:d0:1a:e7:55:ae:2a:43:03:0a:ab:8b:
02:6a:92:5f:38:84:be:2c:67:fe:93:06:bb:25:9d:
95:5c:b6:d3:0b:86:19:fe:5d:39:2a:81:cb:0c:63:
12:43:7b:32:82:8e:5d:39:4a:9e:f4:1e:ce:9b:8e:
b7:d8:fd:3e:37:15:00:2b:87:0e:67:d1:f9:15:67:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E2:DB:EF:B0:56:B6:F6:DD:45:FB:37:17:0C:15:B5:15:CE:64:2F
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:3d:33:81:b9:7b:e3:34:d2:de:ab:c6:e0:30:35:e2:93:47:
b6:12:05:bb:6f:a5:fa:12:0e:bc:e2:75:59:8e:25:25:e6:1a:
01:c8:ee:76:fa:d8:66:bd:93:bd:37:23:63:3a:97:d1:c5:04:
32:d6:d8:63:73:c5:f7:61:9c:3e:82:a5:49:b7:c8:f6:63:8f:
83:0f:0e:21:2c:b3:e7:cd:52:78:40:42:85:08:fe:90:4c:2c:
af:8f:38:3c:be:9c:d7:8c:59:ed:72:85:c2:38:d0:1a:68:ff:
cb:9f:81:a4:8f:9f:8d:85:8d:8f:0f:bc:28:68:12:32:32:3e:
26:c3:8e:af:2f:63:42:f7:32:44:ff:f6:45:1c:ec:57:60:7b:
dd:96:84:d2:21:8b:46:64:6b:7f:a8:b8:5b:0d:0f:aa:f7:a2:
6f:15:9c:16:74:00:2f:50:04:1f:a7:9e:a6:bc:04:78:ce:a2:
d9:5e:7b:aa:08:35:b4:e5:df:c0:ab:00:4a:36:2a:a0:30:a0:
65:cc:b6:88:ca:29:42:f0:08:bb:82:28:ce:39:1c:8a:62:63:
b4:32:70:c5:68:1d:95:ce:01:74:6a:03:ac:be:da:a4:fd:f7:
3a:3c:53:34:ac:ca:db:67:ce:b8:28:c5:1d:9f:8d:36:47:7a:
4d:e5:9e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:12 2026 by rpki-client