Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
File: O47zaZ48ewDP9VFOVME2EqO8CBA.mft (raw, json)
Hash identifier: b0zy1aAxGUiIzkZS91zXWpCuX2akomDQZZnUtkJmuTA=
Subject key identifier: 1C:1C:A5:29:45:76:52:04:43:5C:12:33:33:A3:77:FA:72:E3:7A:A2
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Certificate issuer: /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial: 019E8EA59873BF0AFCD3D49B564A88A417DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
Manifest number: 0108
Signing time: Wed 03 Jun 2026 18:01:17 +0000
Manifest this update: Wed 03 Jun 2026 18:01:17 +0000
Manifest next update: Thu 04 Jun 2026 18:01:17 +0000
Files and hashes: 1: O47zaZ48ewDP9VFOVME2EqO8CBA.crl (hash: PLnVQJWdjPfjNrReg4M9w1Q3tw6ecdPvPZhnChlcWVA=)
2: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (hash: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:98:73:bf:0a:fc:d3:d4:9b:56:4a:88:a4:17:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Validity
Not Before: Jun 3 18:01:17 2026 GMT
Not After : Jun 4 18:01:17 2026 GMT
Subject: CN=1c1ca52945765204435c123333a377fa72e37aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f3:f5:64:a5:b6:57:84:12:81:ad:4e:08:8a:
f5:42:82:0d:ee:b5:84:6a:48:e4:c3:08:f2:a9:a4:
17:eb:1f:e7:b4:de:a0:a0:24:a9:8c:eb:de:32:03:
ea:79:f9:f0:dd:2c:55:b8:c1:b9:cb:49:0e:1e:15:
c0:44:cd:18:45:a8:1a:f0:1e:80:1f:e5:51:02:71:
26:83:6f:7f:2c:29:4c:c3:18:7c:3a:83:56:b8:da:
cf:98:f0:00:b6:bf:19:1e:28:48:ca:78:37:08:21:
b5:89:87:62:1a:cb:ae:cf:de:fc:3b:21:37:e4:ef:
59:cf:10:7b:e0:f8:dc:75:af:18:c5:76:0b:53:12:
0e:f7:7e:ea:c6:2a:b4:b9:0d:95:18:b0:e3:90:ff:
e3:b0:4a:6f:e0:0f:10:da:68:92:91:a4:33:67:fb:
7e:6b:ab:43:8b:da:3b:7a:3c:70:be:c5:56:07:d7:
e2:b4:20:02:62:0b:34:4e:ce:b7:65:f4:56:50:09:
d3:91:8b:b0:4c:eb:ef:08:c5:6b:f6:76:6b:cd:b7:
90:60:34:37:43:7e:84:07:cc:14:1b:7d:cb:a3:64:
d8:e2:77:f0:ba:15:70:99:cc:71:28:b0:c2:df:da:
9a:f6:f5:7b:3f:49:43:ed:63:ab:be:09:8b:0a:c5:
42:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1C:A5:29:45:76:52:04:43:5C:12:33:33:A3:77:FA:72:E3:7A:A2
X509v3 Authority Key Identifier:
keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b2:42:81:cb:67:2b:c5:7d:2c:cc:39:4f:1c:0c:be:8c:98:
0c:16:8e:fc:af:bb:65:62:9e:dc:bc:26:0d:6f:c4:e5:57:d7:
b8:bd:31:ae:2f:d1:32:2a:12:67:36:e6:c0:21:5d:75:81:9a:
7a:7d:0b:6e:b4:c2:4b:5e:ca:f7:3c:e9:4c:6c:47:92:9c:25:
6f:0e:17:48:e1:42:15:1f:13:36:cd:fd:23:a3:84:5d:58:01:
60:9e:6d:3d:ea:03:9c:98:d0:b4:fa:24:03:b1:c0:6d:21:c2:
61:a3:17:d4:3f:e4:12:a9:96:f3:16:72:e4:c6:e4:13:68:57:
3e:e5:8c:fa:b2:d0:01:b0:89:2d:84:7d:ee:09:73:30:f7:fe:
bf:a0:3c:c4:bb:1f:3c:90:e6:a2:3d:4d:4f:bd:d3:38:ac:05:
d0:00:e2:9f:a2:b1:a1:95:34:a8:b9:f2:3b:ad:22:fc:e6:72:
ca:76:44:11:76:27:78:7f:28:b7:ce:11:c9:c5:75:41:9d:a9:
6b:aa:48:a7:6b:90:47:bc:a3:98:7e:64:1c:62:4b:7a:0b:30:
e8:0c:09:80:93:bb:99:22:1d:42:52:f1:54:7c:81:38:fb:cf:
1e:7c:cd:35:28:68:36:cc:85:c5:6c:af:a5:aa:21:f2:62:f2:
46:d9:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 01:20:09 2026 by rpki-client