Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: 4Gg47fT40PILJPE7urxGkWqcGHyUrVXUTu/E+hE2Zow=
Subject key identifier: A1:16:4A:99:30:90:67:DD:87:5D:21:1C:44:0B:54:DD:FF:29:A2:EC
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 019D26281512D3B8444722F47C2DB4BC3093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 1580
Signing time: Wed 25 Mar 2026 18:00:54 +0000
Manifest this update: Wed 25 Mar 2026 18:00:54 +0000
Manifest next update: Thu 26 Mar 2026 18:00:54 +0000
Files and hashes: 1: CC_uQGJB-X8dNzS4njkHHnRy0EE.roa (hash: kLWeBF22uNWLbsgPVVSSeJVxiHQO+5+Sj42QETQzuhc=)
2: K1Er1aBJx6bVqmO9OdMkkQAcoks.roa (hash: jgg7YMoJBVhZFbz63ciqQ92UHrRAMfSOORFFb9rl/W4=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: GhXs3j46zrm4OfecqlxbAW2qL4x8M00b3cydcwYkLKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:15:12:d3:b8:44:47:22:f4:7c:2d:b4:bc:30:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Mar 25 18:00:54 2026 GMT
Not After : Mar 26 18:00:54 2026 GMT
Subject: CN=a1164a99309067dd875d211c440b54ddff29a2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:a8:93:6b:54:be:8b:fc:7e:2d:b2:7a:a2:
5d:98:da:d6:6a:12:af:98:10:fa:1e:10:6d:8b:a3:
24:43:66:ff:37:a6:6e:37:81:e2:a1:99:38:d5:ce:
c6:75:a8:2a:a8:20:ca:12:4a:cd:c1:8a:d4:11:46:
b0:cc:44:24:75:16:2a:2a:26:04:5e:f1:f7:ac:7b:
e4:30:68:ae:88:2a:d6:d1:55:38:18:40:e5:7b:bf:
07:e1:2f:90:41:3e:7b:1a:c8:22:e1:b7:15:6e:a9:
8b:69:9c:3f:39:03:a8:7a:e7:53:28:18:30:54:62:
8a:3a:06:a9:db:71:05:7f:6b:9a:88:e4:23:66:b8:
6c:09:6f:05:51:f8:a9:7d:48:0c:ab:a5:76:2c:13:
cf:7c:63:1e:be:ab:de:c5:1b:f3:f2:aa:e0:80:cf:
2a:3b:61:7b:f5:0c:ef:67:39:01:52:48:d5:8a:82:
dd:90:95:e8:89:3c:31:b8:f5:96:73:33:30:76:6d:
54:d6:83:d1:a6:df:0f:c5:08:be:8e:40:14:e5:b8:
72:65:e0:64:7d:4f:3b:29:03:ab:78:d1:fa:9e:56:
d6:02:2c:85:82:5d:64:7e:e5:6f:0d:4e:4d:d1:64:
b4:36:79:13:ba:7f:d9:75:99:dd:29:b9:6c:74:cf:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:4A:99:30:90:67:DD:87:5D:21:1C:44:0B:54:DD:FF:29:A2:EC
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5b:07:a1:57:11:44:71:95:f1:b6:26:2e:4d:4a:43:b8:d9:
56:42:d7:ca:79:e6:7d:29:5d:a1:e8:d0:92:b9:1b:f8:bb:21:
16:1d:56:ab:57:00:22:32:c3:13:3c:ba:f2:66:7c:c3:50:93:
10:cb:ca:32:7c:bc:63:c6:b3:17:0f:42:4e:5c:cd:3c:b4:12:
88:82:0a:e1:c9:f3:1c:6b:19:b9:21:de:df:45:06:18:07:05:
ab:6e:01:45:ef:54:a9:ba:43:41:4f:68:5f:eb:1c:50:51:b6:
b9:c1:41:ac:c9:52:51:74:ae:b7:0c:52:db:d8:c8:d9:e3:fa:
06:fc:b3:36:29:27:af:8f:42:c0:c1:7b:cf:04:1d:4d:78:75:
f4:1a:3b:ce:39:24:db:fb:7d:25:d0:50:cc:bf:48:a6:7e:e9:
ed:f1:9d:ef:56:05:25:50:00:90:26:84:52:5f:e3:67:5d:8b:
ce:de:5a:23:cf:bf:98:28:5a:af:e0:6c:b2:ca:3a:68:42:13:
2e:26:dc:87:f6:b6:c5:7d:68:f8:1f:6b:ce:23:1b:ee:ad:22:
3e:34:f1:74:10:df:65:fe:75:bd:5a:8a:e9:e4:0f:05:5d:1f:
c5:75:bc:74:eb:ed:82:92:fc:0c:6b:8e:7b:19:1c:e3:5c:92:
02:61:4e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:15:15 2026 by rpki-client