Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: LoPlg0tnoii3piLZKmtkIVm6ui2PqsFK1WY5HMfhBHo=
Subject key identifier: 58:20:0F:5D:7B:0B:C8:0D:95:3E:C6:5A:EB:E8:CA:9F:0C:1F:23:86
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 019D26CD8D81765FE83B20867B6801910ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 0A59
Signing time: Wed 25 Mar 2026 21:01:38 +0000
Manifest this update: Wed 25 Mar 2026 21:01:38 +0000
Manifest next update: Thu 26 Mar 2026 21:01:38 +0000
Files and hashes: 1: G_JW6F6wHuk8xHOWEfihSql-qpI.roa (hash: DioqiN9gi012cANZP03n6UlA0P8l0ilW5rpF7qQDEm8=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: v74PKl0GsdUcaDx4/WrMFLpt0vfqKcWIPmt83K4r/Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:8d:81:76:5f:e8:3b:20:86:7b:68:01:91:0a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Mar 25 21:01:38 2026 GMT
Not After : Mar 26 21:01:38 2026 GMT
Subject: CN=58200f5d7b0bc80d953ec65aebe8ca9f0c1f2386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:9e:c3:93:0d:30:ec:43:c5:a4:11:ec:64:
cc:95:8f:e6:22:55:c6:51:a8:b1:e4:10:38:d6:7f:
a0:04:44:9a:53:18:86:c3:88:d3:d6:a4:22:45:d9:
17:e1:3d:ef:ae:be:ee:c1:78:98:d4:eb:4a:1c:8d:
83:fd:9d:2d:56:61:01:5a:14:d9:56:e9:a3:51:c1:
d9:5a:47:2e:64:53:aa:89:95:fd:ae:2b:d0:84:77:
ef:b5:15:a7:bf:cd:84:1b:42:c4:c2:c4:42:7d:ec:
88:51:6e:b6:f4:0d:21:85:de:e7:f5:08:4d:20:d2:
8d:fb:34:35:3c:a5:92:fa:0d:2a:9d:0b:c5:c3:49:
8e:eb:09:5e:fc:90:db:b6:b7:5b:ec:02:6e:5e:5b:
00:03:6a:bf:99:a2:f6:ee:76:2a:38:ec:e5:23:65:
f4:76:52:1b:74:30:a8:0f:c9:c2:00:78:90:dd:24:
61:4f:67:35:01:d9:90:36:78:0a:df:42:1c:98:bc:
1d:33:0c:87:25:b6:30:c7:ff:b8:69:db:19:fb:1d:
2d:2c:8e:f9:9a:9f:0b:4c:f8:6a:5c:f4:b9:ee:ec:
0b:da:3c:c4:5a:51:85:ee:a6:6a:5b:27:6f:06:99:
01:ef:54:b3:74:16:c2:7c:71:eb:6b:03:67:6e:32:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:20:0F:5D:7B:0B:C8:0D:95:3E:C6:5A:EB:E8:CA:9F:0C:1F:23:86
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2a:0e:ab:38:3f:6b:14:a3:fc:fc:05:07:4b:a7:3a:bb:f0:
6e:43:b7:87:91:e3:47:73:88:fb:03:2f:e2:96:46:15:7b:fa:
9f:c8:02:03:c9:d5:2d:f6:bc:62:90:5e:d8:86:af:56:33:b5:
ac:45:0a:1d:6b:83:7d:94:87:df:12:22:73:4e:9e:be:30:f9:
5f:b2:e7:1d:f3:e5:9b:ea:6b:4c:d9:12:7f:38:a1:97:58:ec:
f2:ec:da:55:9c:4e:e6:c7:f9:17:69:2f:90:f4:21:1f:51:0c:
32:a1:25:c5:5f:c4:34:bf:58:58:48:54:08:67:ca:5d:12:59:
ea:47:5a:af:12:f1:04:a3:ff:c7:47:bd:89:6a:45:05:b7:d4:
e9:71:5b:6f:68:2e:20:f3:31:ba:86:1c:34:b6:68:1b:e1:7f:
48:33:ae:be:3c:e8:4e:fb:e5:17:6b:58:ac:bc:9a:8d:c6:79:
10:d0:04:eb:79:31:5d:4c:c2:2c:76:63:d2:05:43:94:c3:a2:
fe:c0:a1:9f:d1:53:ed:ad:7e:42:0a:b1:d0:69:ef:b4:06:83:
54:a4:55:a3:cf:24:1f:54:8c:84:8f:54:f5:27:2e:6c:7f:a6:
d9:b7:23:71:f5:df:3d:a9:6e:ad:77:7d:21:3f:a2:4d:73:99:
c2:31:11:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzY2Bdl/oOyCGe2gBkQq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTQ5NzYzZDJmZGI5MDk4NjQ2OTQwMzA2NmNiNWU2YTc4
MjVmMGMwHhcNMjYwMzI1MjEwMTM4WhcNMjYwMzI2MjEwMTM4WjAzMTEwLwYDVQQD
Eyg1ODIwMGY1ZDdiMGJjODBkOTUzZWM2NWFlYmU4Y2E5ZjBjMWYyMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Cew5MNMOxDxaQR7GTMlY/mIlXG
Uaix5BA41n+gBESaUxiGw4jT1qQiRdkX4T3vrr7uwXiY1OtKHI2D/Z0tVmEBWhTZ
VumjUcHZWkcuZFOqiZX9rivQhHfvtRWnv82EG0LEwsRCfeyIUW629A0hhd7n9QhN
INKN+zQ1PKWS+g0qnQvFw0mO6wle/JDbtrdb7AJuXlsAA2q/maL27nYqOOzlI2X0
dlIbdDCoD8nCAHiQ3SRhT2c1AdmQNngK30IcmLwdMwyHJbYwx/+4adsZ+x0tLI75
mp8LTPhqXPS57uwL2jzEWlGF7qZqWydvBpkB71SzdBbCfHHrawNnbjIxBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFggD117C8gNlT7GWuvoyp8MHyOGMB8GA1UdIwQY
MBaAFKzkl2PS/bkJhkaUAwZsteangl8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWIt
OTBhOGM2ZTc4NWM5LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80NjMwZmQtYTBjYS00OGEwLWJjYWItOTBhOGM2ZTc4NWM5
LzEvck9TWFk5TDl1UW1HUnBRREJteTE1cWVDWHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWioOqzg/
axSj/PwFB0unOrvwbkO3h5HjR3OI+wMv4pZGFXv6n8gCA8nVLfa8YpBe2IavVjO1
rEUKHWuDfZSH3xIic06evjD5X7LnHfPlm+prTNkSfzihl1js8uzaVZxO5sf5F2kv
kPQhH1EMMqElxV/ENL9YWEhUCGfKXRJZ6kdarxLxBKP/x0e9iWpFBbfU6XFbb2gu
IPMxuoYcNLZoG+F/SDOuvjzoTvvlF2tYrLyajcZ5ENAE63kxXUzCLHZj0gVDlMOi
/sChn9FT7a1+Qgqx0GnvtAaDVKRVo88kH1SMhI9U9ScubH+m2bcjcfXfPalurXd9
IT+iTXOZwjER6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:44 2026 by rpki-client