Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
File: oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft (raw, json)
Hash identifier: Th/jR3YOe1KH3OUQsNUihfF4lodKLmhmACJUyect3yI=
Subject key identifier: 74:BE:B8:8B:88:F6:D2:7C:BD:B1:7B:3A:94:44:51:99:F1:49:E1:6E
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 019D254C999C217EA14E7C1CAC666E84663A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
Manifest number: 54
Signing time: Wed 25 Mar 2026 14:01:10 +0000
Manifest this update: Wed 25 Mar 2026 14:01:10 +0000
Manifest next update: Thu 26 Mar 2026 14:01:10 +0000
Files and hashes: 1: Bl_J51ealE87PBDrcx3y2abYz_M.roa (hash: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=)
2: oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl (hash: 2gyxZnTFAbZnuFrF95yFWy2oq9s9OZxG4dQlnknJsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:99:9c:21:7e:a1:4e:7c:1c:ac:66:6e:84:66:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: Mar 25 14:01:10 2026 GMT
Not After : Mar 26 14:01:10 2026 GMT
Subject: CN=74beb88b88f6d27cbdb17b3a94445199f149e16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0f:bf:36:ee:e0:29:93:3a:e6:79:c0:bc:28:
6c:a6:96:c7:77:44:54:b7:f9:4f:b0:56:ac:08:2b:
4f:bb:96:23:0d:1f:08:57:45:85:8d:d9:d3:58:2e:
8e:46:ba:03:19:5a:56:83:f3:5e:f8:e1:c7:c5:c1:
57:ef:f2:f5:70:0c:15:f4:10:65:31:ff:55:07:44:
9c:be:ce:4b:20:f1:5a:1a:e7:18:c0:05:b0:d4:30:
17:6b:dc:71:7d:04:53:38:16:47:18:73:1a:de:cf:
fd:a5:1b:20:01:f1:06:8f:2d:ea:c7:0f:0c:e9:5b:
25:fc:50:c2:6f:a8:d0:4f:98:5a:72:94:2e:77:04:
44:d4:44:99:21:a7:ae:00:7d:67:96:e6:5e:3d:23:
30:ac:7b:78:63:0f:3e:8e:8f:b1:b1:33:05:5c:71:
cf:b9:8c:00:74:d6:ec:c4:12:c6:75:13:9c:7d:66:
59:53:d7:f9:7c:6e:8d:63:48:66:5b:8a:1b:78:76:
3a:b2:1d:3c:9b:64:97:29:14:86:6e:8b:f5:09:b8:
8f:8e:48:e6:25:8b:ca:e4:53:67:66:fb:e5:7b:34:
08:d2:66:94:05:e4:67:3f:2d:e6:b7:5e:2d:02:8c:
ab:24:b2:88:8c:ee:ef:19:b8:11:a1:fc:f7:84:b2:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BE:B8:8B:88:F6:D2:7C:BD:B1:7B:3A:94:44:51:99:F1:49:E1:6E
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:7a:07:07:6f:f6:ab:69:d7:31:4a:95:cd:5f:3e:56:f4:de:
aa:81:f7:5a:ff:86:46:49:04:5d:7f:b6:56:1b:71:59:27:d4:
22:5b:bc:86:25:77:8a:25:9f:bf:c1:de:7c:04:25:78:be:3e:
25:cd:75:41:5a:1f:a4:a9:da:ea:49:4d:6b:2a:53:b1:3d:44:
78:e5:92:3c:e7:b9:b0:90:8e:08:86:7f:ac:25:f1:7e:40:ba:
44:e0:23:65:b2:66:14:97:09:01:ef:7d:77:98:61:30:48:7a:
cc:8c:74:d0:e3:96:20:2a:88:dc:01:b6:9f:6c:7b:b5:be:5a:
1b:3d:08:0e:ee:38:e5:e6:c0:81:85:fc:1d:8b:ee:65:78:1f:
e4:b2:d9:79:db:3b:cf:ca:7a:c5:77:cf:56:1c:f4:92:f6:4c:
9e:eb:4f:c6:88:7f:b3:1e:54:5d:c1:9f:cc:b2:94:ea:88:8b:
32:ad:4f:bd:21:f0:67:34:eb:f6:ae:5a:fb:2d:4f:26:a5:80:
18:b7:cb:65:fe:b3:8a:ec:d2:c3:d1:2e:f1:11:07:21:d0:2b:
2b:71:78:8d:05:24:9e:be:a3:7e:1a:fc:db:d5:e9:c6:95:e4:
18:44:08:5e:71:8a:10:60:3c:93:b5:b5:f9:2a:1c:17:dc:30:
77:63:7b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:24 2026 by rpki-client