Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
File: oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft (raw, json)
Hash identifier: f8xw5ddzvNvYjAh+tyJTLrbHae2HScon2N7/SbCWlww=
Subject key identifier: 26:A8:D6:8B:3B:7F:1B:8B:83:0A:72:75:AC:33:2D:E8:D4:B4:D0:7F
Authority key identifier: A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
Certificate issuer: /CN=a14e499240cea588541a7dc74f321c9141744bb6
Certificate serial: 019D27724A423CB8DA8DD7FE840B21538EB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
Manifest number: 1448
Signing time: Thu 26 Mar 2026 00:01:34 +0000
Manifest this update: Thu 26 Mar 2026 00:01:34 +0000
Manifest next update: Fri 27 Mar 2026 00:01:34 +0000
Files and hashes: 1: T7SGrHKPk51Bd9kpjh6WAe1tWEA.roa (hash: FVkceHso9IzRGOUwbIhbDL1KSec08KiEK4/1vfjoIxA=)
2: iCHozfTTxF16YGNAVt20MXzc00g.roa (hash: H989MZeJbW+NOaRo/HUuwj+zsKhP6qt0Wm1UtPVlNvk=)
3: oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl (hash: Si7SjBwkIyW+I94ej7rTRKlbvO4ZUAxyBClXGemQiLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4a:42:3c:b8:da:8d:d7:fe:84:0b:21:53:8e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14e499240cea588541a7dc74f321c9141744bb6
Validity
Not Before: Mar 26 00:01:34 2026 GMT
Not After : Mar 27 00:01:34 2026 GMT
Subject: CN=26a8d68b3b7f1b8b830a7275ac332de8d4b4d07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a4:2a:f3:00:9e:4c:55:9d:60:b9:c7:dc:79:
f8:c6:0a:8b:a2:e3:87:d9:6e:e1:a7:39:fd:fe:4b:
ca:4a:03:4d:50:54:29:26:ee:a1:f4:92:bf:19:f7:
cd:e8:28:f5:d5:e9:3f:47:73:88:2e:77:8c:c0:ef:
ed:f4:41:ba:cc:bb:66:00:97:5c:0e:ca:a6:4d:40:
34:0e:ad:3e:66:d3:86:fc:bf:d6:67:26:06:da:37:
88:82:81:d2:56:00:cf:9c:f7:49:f4:bd:ad:5d:62:
6a:c6:b2:fa:99:24:02:d2:fd:d6:91:c6:6b:92:cd:
da:37:73:8e:ca:c0:12:83:3f:1e:93:50:32:68:5e:
0c:43:ba:d7:46:31:d3:4e:47:76:00:bf:e4:af:b7:
a9:8f:7d:32:95:91:81:b9:6c:41:98:c3:ee:94:fc:
95:21:70:87:bd:5d:b8:20:da:51:ca:5c:a4:9c:31:
8a:5a:30:db:f1:1d:78:6b:63:16:54:a0:0c:cc:13:
f3:37:dc:ec:2f:be:6d:45:e9:f9:6c:72:71:86:ae:
6a:35:24:bd:03:ec:b8:f7:b7:49:05:a9:4c:f3:04:
7e:ea:5d:31:0a:f5:4a:28:10:ef:ea:43:eb:d9:73:
b0:05:fa:57:19:3d:53:20:5c:75:f8:93:39:9a:72:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A8:D6:8B:3B:7F:1B:8B:83:0A:72:75:AC:33:2D:E8:D4:B4:D0:7F
X509v3 Authority Key Identifier:
keyid:A1:4E:49:92:40:CE:A5:88:54:1A:7D:C7:4F:32:1C:91:41:74:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU5JkkDOpYhUGn3HTzIckUF0S7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0828e7-1e57-4747-8ea1-36a808f3d14d/1/oU5JkkDOpYhUGn3HTzIckUF0S7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cc:80:7e:dc:bb:c0:4a:9a:17:d7:7f:dd:27:51:b2:b2:5e:
86:20:98:5c:bb:10:fa:a1:20:95:41:e4:35:b8:a8:6d:68:eb:
48:58:1b:21:0c:07:db:fa:0e:0b:02:2b:36:08:4a:82:5c:cd:
eb:14:bc:61:0c:d9:21:05:78:89:97:c7:43:40:b6:2d:5e:44:
41:af:8f:be:36:c5:21:36:2e:b5:5a:a9:7d:cf:dc:15:94:34:
77:b5:2f:0c:da:2a:0e:c9:08:e9:4f:8a:bf:98:67:d5:c5:78:
a7:ae:e6:5c:c9:9c:8d:f7:64:9d:c4:cc:8e:82:b9:f4:e1:b8:
0d:0f:67:d9:47:65:99:e8:d2:04:0c:d6:62:ae:72:62:b5:d3:
fe:35:c6:72:b4:fd:88:27:f4:d9:a3:a8:80:8e:81:64:7f:17:
fe:54:3d:f1:ba:f5:dd:ac:a8:41:3f:63:37:12:27:41:ca:0d:
8f:d8:9a:ad:1a:95:93:6d:4c:8f:e9:b5:77:f8:91:61:a6:7e:
ea:42:c1:f3:3c:a7:d4:dd:a8:6c:1b:6d:42:85:cc:9f:6c:3d:
c0:0f:2b:de:43:a9:2f:9e:ff:cf:49:8f:ce:17:06:06:c1:59:
ab:3c:6b:57:07:46:4a:1e:4e:eb:6c:3f:f2:df:bf:0e:90:f5:
36:c9:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:54:32 2026 by rpki-client