Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File: oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier: lIOe5aWyKe20l6FSc5EDe4dZLtSFJNW0+M120Mq/3Ww=
Subject key identifier: B7:08:A5:32:46:D9:B3:B5:CE:FA:31:21:2F:A1:9D:6E:A1:39:13:AE
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer: /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial: 019D2973F6DCBFE0E3D793AC3338243B88C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number: 0204
Signing time: Thu 26 Mar 2026 09:22:38 +0000
Manifest this update: Thu 26 Mar 2026 09:22:38 +0000
Manifest next update: Fri 27 Mar 2026 09:22:38 +0000
Files and hashes: 1: h0OnQS_LDhHmHtdq9MOUPdDXqMY.roa (hash: fvbR4O3MuxsJi7oWYqjm2ohLFx0/5Mha06ohU0AwT/A=)
2: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
3: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: adU7enSKkRrUay9LR/TJfXo0HIbxot0NQhvXSIqmLL0=)
4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:73:f6:dc:bf:e0:e3:d7:93:ac:33:38:24:3b:88:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Validity
Not Before: Mar 26 09:22:38 2026 GMT
Not After : Mar 27 09:22:38 2026 GMT
Subject: CN=b708a53246d9b3b5cefa31212fa19d6ea13913ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:d3:1d:91:51:d1:ad:1d:07:6e:49:7d:fd:
2e:8d:06:8a:20:8b:2e:62:df:e6:c7:40:07:97:7d:
ed:8f:9f:94:46:f9:d2:7a:b1:9f:b9:2e:6d:3d:07:
e6:a5:7e:89:08:ca:07:b8:ba:73:1e:d5:23:70:ef:
a3:51:ff:e0:a8:78:8e:0d:5c:43:34:11:a4:f9:ee:
74:a6:db:83:d1:33:38:01:0d:01:59:3a:c2:b5:96:
fd:7a:24:1d:04:37:cb:ec:3d:3f:35:86:72:ee:bc:
63:f4:9c:3f:ea:c0:ca:f3:7e:15:cc:06:4c:7a:a8:
fa:d6:b5:8f:78:b7:e6:a1:77:48:54:b0:d3:98:ba:
81:ec:93:45:54:c8:69:9d:8f:5c:dc:cc:84:3b:bc:
2c:54:42:58:ed:9f:52:95:0f:12:c6:4e:64:b6:f5:
81:8f:d9:83:6f:73:79:92:48:28:ea:ac:ea:3b:67:
b4:62:2c:b8:b9:b4:2d:a9:c1:a8:36:60:61:2d:76:
8a:a3:db:2b:c3:c0:9f:f0:37:55:91:d5:4c:40:86:
8e:20:02:ba:93:b5:42:a3:ad:31:4f:3c:63:bd:20:
a8:c0:43:c8:f8:92:9d:93:6c:6a:36:f5:3b:cb:d7:
39:09:df:a8:67:17:5e:2e:d7:04:5e:94:dc:ee:8f:
5d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:08:A5:32:46:D9:B3:B5:CE:FA:31:21:2F:A1:9D:6E:A1:39:13:AE
X509v3 Authority Key Identifier:
keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d2:f3:1a:6c:61:5f:87:47:16:0e:d1:ee:22:00:57:bb:62:
d9:68:8f:26:83:4f:fa:c6:40:db:2c:35:57:a7:f8:5c:b9:65:
4f:49:bb:cb:b4:ea:8d:23:64:f4:48:39:92:47:c7:c8:81:a4:
ed:04:04:5c:5e:ba:00:14:a1:0a:4f:3c:78:cc:b4:0a:f3:c1:
59:48:be:70:e1:29:1c:6d:4a:f5:c8:ac:3e:76:02:a4:15:2e:
a1:c0:0a:55:c4:0c:00:2d:01:a3:9e:78:60:2d:13:fd:84:d1:
23:f5:7a:15:07:82:fc:52:ce:2d:68:fd:1e:26:e8:58:c9:48:
83:9e:33:94:22:55:c0:42:82:14:8a:ab:44:68:c0:41:d0:50:
96:2c:4c:76:c3:74:d4:02:31:ce:66:5a:3e:36:f5:be:50:55:
b4:b5:ce:78:63:3c:4e:de:8b:b6:ef:6f:07:3f:41:05:ae:f9:
65:19:50:7b:54:08:92:62:59:e1:7a:b5:54:76:0e:04:38:77:
eb:91:c3:17:ee:c9:b3:81:24:fb:39:99:de:7e:00:f0:29:62:
26:7d:b1:d7:c6:f4:61:8b:d7:f2:30:0b:d6:3c:34:5c:a6:db:
b5:aa:02:ce:af:28:5d:8f:fd:0b:99:1f:4e:c1:b6:18:7e:f6:
2f:70:14:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:46 2026 by rpki-client