Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: pjb+Iahd+vXDD1N4w7dtf2x50/FBh5Ix5yIxGvCrEm4=
Subject key identifier: A5:7B:1C:6E:D8:CC:D9:75:A3:E4:09:F1:DF:44:56:30:72:E5:4F:35
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 019D2816F7FD31FC41C1707898E11485D125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 1581
Signing time: Thu 26 Mar 2026 03:01:27 +0000
Manifest this update: Thu 26 Mar 2026 03:01:27 +0000
Manifest next update: Fri 27 Mar 2026 03:01:27 +0000
Files and hashes: 1: CC_uQGJB-X8dNzS4njkHHnRy0EE.roa (hash: kLWeBF22uNWLbsgPVVSSeJVxiHQO+5+Sj42QETQzuhc=)
2: K1Er1aBJx6bVqmO9OdMkkQAcoks.roa (hash: jgg7YMoJBVhZFbz63ciqQ92UHrRAMfSOORFFb9rl/W4=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: CfJagCmN9XZPOhWcRZSwEmuZbS6Uw1mNGnHemaPjrGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:f7:fd:31:fc:41:c1:70:78:98:e1:14:85:d1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Mar 26 03:01:27 2026 GMT
Not After : Mar 27 03:01:27 2026 GMT
Subject: CN=a57b1c6ed8ccd975a3e409f1df44563072e54f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c9:27:04:1a:17:d3:88:79:28:6f:83:03:6f:
21:d3:0d:f6:cf:36:2e:78:be:93:88:97:1e:e6:ab:
85:b7:58:78:55:3f:79:b1:b5:4f:27:0b:72:87:bc:
52:97:14:92:bd:11:a9:11:4e:88:f8:01:1b:a8:b3:
5d:cc:84:c4:ed:10:ae:c4:d7:53:32:43:a2:e8:da:
a3:fb:87:e5:ff:cf:1f:9e:04:e3:2a:2b:2b:7e:31:
1d:8f:48:21:03:21:d6:9e:63:b8:51:48:09:5f:aa:
ea:1f:5f:3a:3b:82:6b:c8:77:b4:fc:80:cc:be:ad:
3d:ca:c3:8b:fb:3b:57:1d:4b:26:dd:9b:ad:19:b7:
47:75:ac:25:81:f8:6c:1e:b1:93:58:37:72:a9:19:
94:93:c8:27:e3:2c:0c:b8:89:5f:1b:ec:c1:19:7a:
fc:20:68:e3:8c:9b:95:1f:ea:d5:c4:aa:f0:24:f0:
92:fa:78:23:ef:74:27:9d:44:a0:58:e2:a9:0e:42:
c7:23:49:97:32:48:e0:2e:6c:83:6a:85:35:ac:93:
6c:db:c4:84:e6:9e:8d:1d:16:ed:94:40:0a:60:c6:
52:52:56:51:a5:c6:80:db:81:71:37:53:61:3f:df:
38:bc:4d:23:86:0d:bb:a1:3d:7a:d9:d0:57:49:2a:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7B:1C:6E:D8:CC:D9:75:A3:E4:09:F1:DF:44:56:30:72:E5:4F:35
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ca:21:6d:f9:0d:40:66:e9:9b:ac:0b:c7:61:27:ed:a4:1c:
55:b5:b2:e9:d3:4a:ac:e3:95:f0:f9:58:cb:03:68:17:e7:af:
f7:c2:3d:d9:93:9a:41:7f:24:9a:5b:02:74:9e:99:c7:48:e4:
97:07:90:45:a8:6f:c9:62:78:02:e5:86:e4:56:71:5f:d5:f6:
a2:ca:9c:0f:7f:cf:82:aa:d4:d3:c2:5b:b4:94:f5:2e:9a:c7:
8e:90:44:00:51:5d:5a:ae:21:99:3a:84:1a:c1:8f:59:4c:f7:
47:60:24:70:e9:6f:f6:cf:02:bc:17:8d:84:3b:ab:3f:d8:05:
d0:e6:55:08:86:d6:7d:20:25:07:3d:06:bc:d2:0c:44:30:c0:
05:d1:04:3c:fa:9c:c8:24:f6:91:fc:c0:5d:1b:de:fb:e6:71:
cf:e2:92:ff:5d:6e:31:28:18:a6:29:3c:98:f2:3b:5c:ab:22:
f4:08:3c:de:43:6e:97:2b:55:83:e0:35:25:0c:68:9b:c3:65:
bd:1c:99:3a:ec:0c:aa:0c:21:09:39:bb:19:04:08:70:9e:be:
f5:27:2d:26:b0:76:00:35:90:40:5a:80:4e:24:a6:da:84:e1:
5a:b8:f2:cd:71:68:c0:97:87:af:c1:29:cb:d5:15:86:11:6a:
d5:aa:47:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:04 2026 by rpki-client