Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
File: o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft (raw, json)
Hash identifier: fNsackFjwUnIfZqdApeIP+9xV+JTVfEeX62MpLSwFSc=
Subject key identifier: E5:5E:F9:1E:75:3E:E5:6C:1F:C7:43:53:18:73:FF:B5:A1:F8:B9:15
Authority key identifier: A3:E6:2D:FB:95:C8:EE:30:58:EA:B0:85:FC:50:F4:5A:AB:7A:03:EF
Certificate issuer: /CN=a3e62dfb95c8ee3058eab085fc50f45aab7a03ef
Certificate serial: 019D375259B9618BFE8B17BACB09F412990E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
Manifest number: 3F
Signing time: Sun 29 Mar 2026 02:00:36 +0000
Manifest this update: Sun 29 Mar 2026 02:00:36 +0000
Manifest next update: Mon 30 Mar 2026 02:00:36 +0000
Files and hashes: 1: 8zHxjb_mmV0JsMrNprnGTu9CPmU.roa (hash: xguh2vgCy/zW4Ej9WmgnSI8V8ugA63OiLSYijedgqr0=)
2: o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.crl (hash: uvJy4LL5TlvtlARE0qbAf1XuNF8x0kyoqqAtiEpR8ss=)
3: pMAiTF1ySg9ogcwhwA1KzWh15ZU.roa (hash: cD1iyHvMqU0IUOL/sirhVf8EXZ1S7JtYKgjAxXeAnfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:59:b9:61:8b:fe:8b:17:ba:cb:09:f4:12:99:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e62dfb95c8ee3058eab085fc50f45aab7a03ef
Validity
Not Before: Mar 29 02:00:36 2026 GMT
Not After : Mar 30 02:00:36 2026 GMT
Subject: CN=e55ef91e753ee56c1fc743531873ffb5a1f8b915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:6e:0f:fe:51:f8:b6:d9:3e:07:b9:05:0c:
b4:19:0d:c6:95:4c:4d:0b:7d:dd:b1:92:98:d8:78:
ed:72:f3:21:fa:af:99:0c:39:e3:90:ee:f2:70:b2:
da:f5:93:da:1c:e2:b6:76:4d:08:ab:ce:be:83:0e:
c1:0a:74:fe:4d:8b:84:3c:b2:86:86:89:31:1c:ff:
32:27:8c:df:dc:85:f9:31:05:04:0d:56:7b:79:bd:
5e:07:ce:7c:2d:91:57:d1:f4:e2:0d:3a:36:ef:bc:
d9:f2:a4:07:bf:ab:ba:57:12:45:54:1d:f7:a3:fb:
cf:a8:3e:ce:9b:11:04:fb:d5:99:ec:b2:6f:cb:a1:
9a:d6:e1:d4:2a:aa:b1:97:96:d2:d6:30:0e:8c:e5:
bd:d2:21:1b:aa:31:f8:1b:9d:85:ac:29:ae:fd:29:
dc:42:31:ef:cc:ea:93:30:c3:33:a5:61:dc:76:f2:
86:11:5a:7e:1d:01:03:de:86:ca:01:58:6e:95:bc:
07:47:b9:4c:06:54:31:76:e3:47:3c:61:c7:e0:13:
dd:00:73:ae:ac:d4:b7:e2:c8:cf:6e:38:44:11:4e:
15:e2:b9:6f:70:6b:74:04:5e:8e:3c:23:38:54:e9:
cc:42:5a:41:64:60:ad:bc:c7:8b:f4:9d:ce:d5:bd:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5E:F9:1E:75:3E:E5:6C:1F:C7:43:53:18:73:FF:B5:A1:F8:B9:15
X509v3 Authority Key Identifier:
keyid:A3:E6:2D:FB:95:C8:EE:30:58:EA:B0:85:FC:50:F4:5A:AB:7A:03:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de5411-4da9-4c86-a629-a44987accecc/1/o-Yt-5XI7jBY6rCF_FD0Wqt6A-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:61:8a:68:6b:1d:44:5c:9e:73:3c:5a:74:09:59:b7:10:be:
f9:52:26:8c:82:73:23:45:c1:8d:78:51:04:7f:4a:7a:b5:70:
b1:81:cb:dd:10:d8:5d:4d:47:e1:7f:66:66:91:7d:fc:0a:2d:
5f:94:b7:9a:4f:bb:e5:e2:f1:59:cb:d4:88:41:70:b1:a7:24:
4b:44:ff:0f:8f:e0:63:60:2d:35:2d:8a:b8:e2:83:c9:2e:51:
52:98:ce:66:7e:a9:bf:0f:86:26:eb:73:b8:19:aa:00:d1:84:
1c:05:31:75:a2:db:ec:56:5d:d0:2f:fe:1f:40:6a:69:16:14:
7c:20:00:f4:76:2a:97:e9:d8:a7:06:0f:81:a8:90:25:ed:68:
1c:5c:aa:66:24:45:0b:47:1d:8a:77:3e:4d:39:f0:77:ba:6e:
fa:e1:dc:65:f3:2c:eb:2a:5d:73:75:21:83:b1:da:7d:cb:c1:
96:01:3b:97:c9:3d:93:1d:66:92:4f:a6:3f:7d:dc:93:16:f2:
7f:e5:57:de:08:6c:51:26:fb:72:09:57:fc:06:48:46:02:0f:
14:68:2a:14:b9:c7:05:58:fe:b5:7a:c0:25:b2:cf:4d:a3:f5:
f6:4a:80:77:49:11:93:b4:de:09:70:58:a3:4b:33:ff:d7:ec:
07:82:b9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:11 2026 by rpki-client