Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
File: oN9_W2YYvaI8g77RG0QgQfH7RW0.mft (raw, json)
Hash identifier: o3jh6eZ6fNA2H9cSQH1vH88CB8hqDgB63pVhK8X3a8c=
Subject key identifier: 36:10:E1:77:1E:A5:EC:47:1C:5B:B6:28:D2:82:91:EF:8E:F8:08:9C
Authority key identifier: A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
Certificate issuer: /CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Certificate serial: 019D273AF8B016C22F71806A9FBD149C46AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
Manifest number: 1148
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: We9JlhRC7AnuKdXNeDiRVJR3cSQ.roa (hash: aCm3hVdiPu8wrcYehfXy6dGkmo0BNiZb3dnL5cg7bd0=)
2: dNqWn8LLbtUjse_iEIk0LyE_w9U.roa (hash: pyT41frLnr8b4Y4mOhVh340WexYxDekl72v7q/1e+g4=)
3: oN9_W2YYvaI8g77RG0QgQfH7RW0.crl (hash: Mt9XjBE/mlhOqCHaI8GYUxFmyKRlsLgmeM6f6of1DVY=)
4: ovUvt1pWliISM3HaoCAcadW0xKw.roa (hash: H639MxSrvwDoO2fDDqrmu0kQ4erJQr6FKFxoVbpwHPU=)
5: pzkAsevaRgjEYyiE9vP5vLFmiuQ.roa (hash: nO/grxvmKZkvhDphy8GQW/Icm/R4FkLHljLabsv3llQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f8:b0:16:c2:2f:71:80:6a:9f:bd:14:9c:46:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0df7f5b6618bda23c83bed11b442041f1fb456d
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=3610e1771ea5ec471c5bb628d28291ef8ef8089c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:5a:b6:52:96:b4:95:fb:d2:f7:9c:8a:96:
32:8b:a5:6d:5c:71:56:cb:4c:ea:9b:e0:95:4d:03:
c6:ea:28:d6:3e:0c:86:f5:1b:4e:27:ba:d3:1e:59:
49:36:c2:a3:45:42:17:07:e6:e4:6c:56:ab:2b:74:
e5:28:16:da:21:1f:30:7e:29:ed:6b:e2:f5:90:47:
42:3a:a6:40:fa:f1:d8:89:b8:3c:ef:e4:3e:b6:02:
f3:fa:56:d8:29:b9:e8:65:0e:66:32:f7:a2:63:51:
94:d4:18:f1:40:c9:9e:23:20:b3:25:2d:dd:9f:d6:
fd:3d:d1:23:fb:90:1b:ea:61:60:44:07:36:8c:08:
c7:86:d2:48:1e:68:f0:06:53:b9:2d:47:42:b1:a6:
ef:5a:bc:af:48:ea:ca:50:88:bf:73:38:86:f2:3b:
d8:2c:31:b3:7c:60:3b:a2:11:6a:99:7e:36:7c:f0:
9f:45:f6:aa:5d:f2:25:6f:cb:fc:e8:9c:3a:05:4e:
47:db:9d:55:5a:43:21:f3:ae:f4:f6:ac:e4:40:40:
b5:f5:fb:91:97:bf:1c:fc:62:fb:53:0a:86:e9:fe:
39:a2:94:b9:65:08:d5:96:9b:20:22:9d:52:49:20:
6f:81:7d:23:52:19:81:eb:ca:95:9e:5c:1e:21:1f:
fc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:10:E1:77:1E:A5:EC:47:1C:5B:B6:28:D2:82:91:EF:8E:F8:08:9C
X509v3 Authority Key Identifier:
keyid:A0:DF:7F:5B:66:18:BD:A2:3C:83:BE:D1:1B:44:20:41:F1:FB:45:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oN9_W2YYvaI8g77RG0QgQfH7RW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5728b-a36d-4fba-93aa-5f4bc900c03d/1/oN9_W2YYvaI8g77RG0QgQfH7RW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:6c:56:62:e2:2a:d8:72:51:3b:ca:75:1f:27:90:1b:ed:
fb:af:5b:e3:e6:e9:53:70:0a:34:ba:65:e5:ba:5b:53:13:7c:
be:28:6b:45:cd:dd:98:6b:0b:0f:7b:0e:4b:e3:43:74:bc:35:
9d:47:ed:15:6d:23:26:61:c7:1b:37:75:55:4c:1e:1a:4d:1a:
af:d0:9c:e6:d5:e3:23:65:22:dd:29:f2:5a:16:4a:6e:3a:54:
0f:0e:c0:4a:34:e4:fe:46:21:50:69:f9:23:1d:42:37:c1:e3:
3d:ab:0f:ef:a8:d3:bd:0b:11:8d:b4:f1:11:1e:6d:32:77:7e:
af:31:c6:e2:87:f6:02:94:8a:95:ef:ee:6c:01:2c:c2:f7:23:
e5:7e:0e:00:7a:46:05:22:dd:05:5b:93:33:f6:73:4f:ec:76:
5d:ef:fa:27:0a:3f:7e:e4:59:23:7a:c2:b2:10:cb:7e:80:d6:
8d:49:e2:64:73:bd:8c:01:c5:ad:7d:ac:af:3b:fc:dc:e0:73:
d5:ff:9a:b3:92:10:8f:03:eb:5e:1b:a4:92:84:65:ce:69:ce:
d3:ac:4a:fc:ce:f4:75:31:e1:97:98:11:27:8b:3b:07:5b:ac:
fe:2e:93:de:f4:fa:a1:d9:67:68:9d:74:ec:43:17:71:a0:0a:
92:da:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:00 2026 by rpki-client