Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
File: o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft (raw, json)
Hash identifier: VaBH9/309EB5JZGHIWDLvXGMSIxW6E1/H/0UxIt1l0w=
Subject key identifier: A2:FF:95:C9:8E:6E:12:86:20:80:4E:27:A1:E3:F9:CC:33:01:EA:CE
Authority key identifier: A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
Certificate issuer: /CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Certificate serial: 019D27DF741D7433B544AEC874D5926CB778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
Manifest number: 09E5
Signing time: Thu 26 Mar 2026 02:00:48 +0000
Manifest this update: Thu 26 Mar 2026 02:00:48 +0000
Manifest next update: Fri 27 Mar 2026 02:00:48 +0000
Files and hashes: 1: TAHQBaXvNoEqJwVwuxNKlcHwMBY.roa (hash: 1l7RMaksGMvJALttYQHPmRPplRyW7anaFOwZ35pYzSw=)
2: o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl (hash: hoDJ8HxFRQ60zOyFFGGMJyvp20XT2O1eRSwuNDP0Nm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:74:1d:74:33:b5:44:ae:c8:74:d5:92:6c:b7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3464820dcc46769fd154c8cbae66b8bb38fea03
Validity
Not Before: Mar 26 02:00:48 2026 GMT
Not After : Mar 27 02:00:48 2026 GMT
Subject: CN=a2ff95c98e6e128620804e27a1e3f9cc3301eace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:de:d4:74:bc:fe:e9:59:77:a1:19:06:56:
41:7d:07:33:78:05:ef:66:01:53:ef:b5:0b:7c:90:
17:5e:1a:7b:12:f5:bf:0f:8b:5a:51:32:37:90:70:
11:4f:b2:89:b0:0c:fc:87:5a:d6:18:71:8e:17:08:
17:01:d2:47:7e:9c:cf:2f:56:04:5f:dd:e1:f3:fb:
5d:d2:f7:49:80:26:25:dc:6e:32:4b:a6:37:f0:8e:
46:59:3b:67:94:b2:75:00:50:b1:57:00:9b:de:8f:
61:e7:7b:e9:65:37:7f:1f:3d:fd:95:ad:13:65:b0:
9b:7a:9d:ba:bb:5d:aa:2b:b9:49:5a:2b:61:c7:e6:
fd:29:79:c3:88:85:99:df:cf:84:32:af:88:55:f6:
d4:60:d7:ec:88:8a:b0:58:d8:d3:9d:36:b6:3e:af:
3b:2c:37:9b:fd:61:e4:ff:c8:fb:96:b2:b2:5c:4c:
d9:78:48:8d:ec:37:21:c9:11:f7:ee:71:fc:50:bb:
0f:e6:69:47:a2:50:95:04:fc:39:6f:ae:c0:49:48:
9d:81:6d:a0:c6:4b:f8:21:b8:1a:8e:65:ba:da:37:
c9:d4:c5:d5:7e:c0:1a:11:c5:30:0c:8b:b7:95:a2:
8e:00:0d:b6:a7:fe:64:a7:e0:f6:54:34:10:3f:f4:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FF:95:C9:8E:6E:12:86:20:80:4E:27:A1:E3:F9:CC:33:01:EA:CE
X509v3 Authority Key Identifier:
keyid:A3:46:48:20:DC:C4:67:69:FD:15:4C:8C:BA:E6:6B:8B:B3:8F:EA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0ZIINzEZ2n9FUyMuuZri7OP6gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e2c39d-1b1f-4e41-92b0-e0a2a2c7942e/1/o0ZIINzEZ2n9FUyMuuZri7OP6gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c3:8f:92:dc:47:cc:9c:83:69:0b:94:21:ca:50:49:4d:17:
69:3d:1e:cc:f1:62:2c:15:6c:98:b9:08:0a:af:77:d0:7c:f7:
d6:65:fe:6d:ae:60:61:85:65:89:4a:24:d7:a8:fd:0b:3f:cc:
85:a1:93:a4:fb:31:d4:f9:80:6c:2d:99:f5:fe:25:d3:06:e7:
13:5f:47:fd:b0:23:de:8a:20:c6:e6:cf:36:f2:3a:75:a9:79:
6f:73:37:cc:96:04:ee:21:2a:ce:0b:62:10:60:23:74:8b:9e:
ac:be:60:78:b8:54:bf:60:d2:62:8f:3c:8b:64:d1:59:ca:5b:
db:c4:8b:dc:36:5d:ac:45:74:77:66:7d:77:62:9e:64:4d:f3:
33:03:76:45:dd:ac:a6:59:03:69:2b:3b:14:bb:3f:cf:2e:a6:
2e:8c:d4:ba:67:1b:27:0e:8b:90:a1:f9:22:3d:74:b7:a2:b8:
0c:3e:94:4e:07:d6:4d:52:36:89:68:45:28:cd:ff:34:34:be:
62:e2:44:df:c8:86:8a:c4:56:4c:31:fb:c7:a7:74:6f:66:73:
98:1e:0b:75:bf:66:ae:79:a0:e4:db:47:df:ce:02:b8:6c:28:
b6:9a:59:13:0f:4a:90:ca:68:95:36:8c:86:2c:a2:1c:d5:22:
c1:c4:bc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:38:39 2026 by rpki-client