Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
File: O47zaZ48ewDP9VFOVME2EqO8CBA.mft (raw, json)
Hash identifier: JTI+YegTX+56yJRQJiyXOXbpzmNkESUlVaqglt+9Ey0=
Subject key identifier: 5A:9A:89:A2:E1:32:A3:F1:70:CC:52:A2:15:91:0E:9D:5B:A5:3D:F4
Authority key identifier: 3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
Certificate issuer: /CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Certificate serial: 019D38D382DD837A94B92FDCF1CA08117C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
Manifest number: 57
Signing time: Sun 29 Mar 2026 09:01:18 +0000
Manifest this update: Sun 29 Mar 2026 09:01:18 +0000
Manifest next update: Mon 30 Mar 2026 09:01:18 +0000
Files and hashes: 1: O47zaZ48ewDP9VFOVME2EqO8CBA.crl (hash: O6mwceAs3EX1QE/tm/aNFChWdo8NTSaa+UrtbOJi3P0=)
2: sLLadZHcLuLxJyRCEcg6ugP5rdc.roa (hash: z14c08hX3kPcGJfG3drJX75MFVvqokGJtQr08nJp+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:82:dd:83:7a:94:b9:2f:dc:f1:ca:08:11:7c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8ef3699e3c7b00cff5514e54c13612a3bc0810
Validity
Not Before: Mar 29 09:01:18 2026 GMT
Not After : Mar 30 09:01:18 2026 GMT
Subject: CN=5a9a89a2e132a3f170cc52a215910e9d5ba53df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:56:31:09:9c:1e:f8:fa:86:cd:60:c7:b5:
f7:96:89:c1:df:5e:da:1c:c4:b5:b6:b0:e1:88:65:
75:a2:31:3b:bc:ad:3c:0e:11:49:9c:fa:2e:d9:d2:
77:04:e4:3a:28:33:39:7e:07:b2:2f:91:49:80:75:
ee:5a:45:35:a6:0e:08:e4:43:83:56:9e:3c:19:6f:
9c:26:b4:29:d6:5e:29:f9:c2:02:c0:9c:7d:51:f2:
02:13:3f:87:c6:c2:42:fd:5b:44:03:fd:01:0b:eb:
45:35:a2:64:25:1d:99:94:e7:11:75:b7:e5:8b:95:
1e:ae:1d:f9:fb:a9:df:52:bb:36:b0:8e:8d:52:86:
d0:03:d3:f5:0b:61:53:e9:b4:d9:76:ee:e5:0c:dc:
77:cc:0c:49:48:57:9a:c2:64:09:c8:ef:91:2a:42:
70:8d:04:69:1b:24:b5:4c:b0:6b:10:5e:a7:10:97:
1c:26:a2:da:77:0f:9d:07:74:2d:d2:1a:1c:89:79:
c5:cf:d7:6b:2e:48:25:43:59:02:ed:7f:d6:55:16:
57:af:ba:ef:78:9f:ce:83:b5:06:01:b0:41:ce:61:
14:a6:3e:a3:16:bd:03:20:91:4d:f8:dd:d0:6f:79:
71:71:51:65:61:df:b4:61:16:c6:2f:bf:76:dc:99:
f2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9A:89:A2:E1:32:A3:F1:70:CC:52:A2:15:91:0E:9D:5B:A5:3D:F4
X509v3 Authority Key Identifier:
keyid:3B:8E:F3:69:9E:3C:7B:00:CF:F5:51:4E:54:C1:36:12:A3:BC:08:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O47zaZ48ewDP9VFOVME2EqO8CBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/710239-3177-463a-8985-b21da6d0128e/1/O47zaZ48ewDP9VFOVME2EqO8CBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bd:50:08:10:0a:fd:29:09:a5:f3:61:a4:45:24:55:4b:94:
83:dd:93:ce:8e:42:69:c1:1e:b5:8c:25:02:3f:a8:05:66:d2:
04:67:63:29:36:d9:0c:83:97:92:05:a5:86:58:68:c4:18:6b:
90:51:dd:b0:b3:db:97:78:97:cf:2d:c7:e6:db:a3:17:aa:27:
61:f2:de:7e:5a:5d:51:6f:72:33:fd:8e:5d:2d:ef:c2:ee:61:
cb:1d:81:52:53:3f:90:55:31:86:b2:74:5e:90:50:fd:83:f7:
ee:eb:85:3c:85:a3:7f:72:d7:96:72:43:50:3a:b4:94:24:f0:
e4:bb:08:a4:a3:43:cc:16:38:04:d9:8f:45:1b:ff:c2:e5:49:
94:91:4a:8b:fd:35:fb:f1:10:4e:ce:3f:a2:4f:99:cb:5d:5c:
a3:dc:7d:c6:e1:7a:bf:38:8d:57:d5:f4:20:c6:07:c0:e6:c8:
5d:9b:5b:99:76:59:67:9a:b6:05:78:27:dc:81:ae:8d:22:d8:
48:f9:60:33:0a:8b:f2:53:62:d8:60:70:bd:fd:59:e6:20:fe:
b6:16:68:b5:00:e6:2b:05:38:81:49:8a:c3:43:1b:17:2c:b9:
1f:9b:aa:c6:34:f4:31:91:9a:0e:d5:cb:c8:a3:44:e6:8f:38:
9c:77:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:25 2026 by rpki-client