Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: xQ3mm+otVmRYnFM1E0R1FfTY1gGqaWOxBZItd2D1Vxw=
Subject key identifier: B5:D7:16:95:95:5B:A3:27:1B:EA:F9:58:52:41:F4:26:87:B4:40:EE
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 019D37C12A63C9664244939401785EC7EE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 0ECC
Signing time: Sun 29 Mar 2026 04:01:39 +0000
Manifest this update: Sun 29 Mar 2026 04:01:39 +0000
Manifest next update: Mon 30 Mar 2026 04:01:39 +0000
Files and hashes: 1: O4mhqRGKIoCKcIMKacGidJQTeig.roa (hash: o44fh95pYU44LJ84noRE8s+3KorVfsnK8XoKEFDXt+c=)
2: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: Jjhuna0Volg/p28ltltv3jYIFSbUX6gdIBhs9EP4vec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:2a:63:c9:66:42:44:93:94:01:78:5e:c7:ee:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Mar 29 04:01:39 2026 GMT
Not After : Mar 30 04:01:39 2026 GMT
Subject: CN=b5d71695955ba3271beaf9585241f42687b440ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:1f:00:43:16:f4:3b:0c:d0:7a:ea:13:34:
7f:3b:f7:b6:76:01:2e:14:a2:e4:e4:a6:50:15:f0:
c6:2c:d6:02:76:ea:9d:ce:4e:7f:a3:ba:60:4f:b4:
d1:b0:0f:6d:cf:c8:c2:c2:9f:68:22:ff:21:11:77:
dd:3b:d8:3f:37:27:7f:38:35:c4:ef:9c:ac:8f:d8:
69:5b:0b:a9:26:a6:10:8b:0d:3c:2c:bf:53:ed:b9:
64:2e:be:ab:91:c5:4b:74:fb:e0:ff:fe:1f:67:fa:
13:db:5f:be:32:ec:a7:44:ff:13:67:d0:39:6f:f6:
a8:52:10:fe:b5:0c:fd:42:7d:88:c7:e5:39:00:aa:
2c:a2:fc:b8:d9:bb:cd:0a:f0:33:89:fe:5c:b6:37:
d1:d1:2c:14:3a:1d:7f:04:e9:9e:5f:01:57:76:a1:
6b:99:6d:d2:a2:2f:08:ae:21:78:9f:93:d3:e4:f6:
69:df:e6:f3:67:c5:41:8b:c4:8f:9b:20:e3:61:44:
51:3b:85:e9:83:6d:d2:14:f9:e6:29:d0:25:b7:f7:
3f:74:c3:eb:69:91:0c:cd:08:11:17:55:2a:e4:3e:
de:3e:83:ce:ba:30:03:57:14:af:8c:1c:c8:33:ca:
d8:ea:94:c5:f0:ba:bb:3f:ff:2a:87:78:70:53:50:
2a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D7:16:95:95:5B:A3:27:1B:EA:F9:58:52:41:F4:26:87:B4:40:EE
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:48:e4:b7:85:5b:01:b0:84:f9:a3:10:e9:21:0b:04:0f:d1:
4c:d0:5f:d4:fb:bd:a1:ea:43:3d:59:b6:96:b5:0f:99:30:52:
0a:8b:19:25:7c:5a:6a:cd:06:c8:a7:cb:0c:99:a7:38:fe:d6:
f4:c9:96:49:2a:99:2e:ce:34:be:37:c0:13:13:51:98:78:a9:
cd:81:33:d2:71:a5:45:e6:5f:cc:5e:28:ec:fd:0a:b5:33:cf:
d1:c9:fb:3c:c3:e9:d6:ab:ff:95:f3:f5:05:c8:24:4b:f4:4c:
22:88:3a:20:75:31:b2:c1:cd:29:b5:1e:7f:2b:b0:33:68:2e:
d0:68:80:05:78:c3:b9:47:ef:8f:c9:1c:55:4a:9c:0d:90:42:
ce:28:9f:68:02:5a:ac:ae:12:8f:7b:22:ff:1a:be:f3:43:5d:
81:31:cc:14:56:dc:55:fd:74:de:08:fe:bb:ec:7d:4c:b3:77:
55:c6:93:67:fd:ae:23:77:9c:e8:10:ad:ba:94:75:e2:fb:e8:
32:51:4a:4d:02:5d:13:a4:d4:fa:1a:7c:b7:0a:6a:05:72:64:
0f:65:a3:35:32:0b:90:44:b4:f8:4e:a9:0f:65:7d:e2:e2:61:
61:22:31:a9:5f:90:44:32:c7:14:6e:e0:74:5b:b1:75:ae:e2:
15:3c:a9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:19 2026 by rpki-client