Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: qDMniIlSHD5n5GMmG8lBLKcrXu9+bIdssabh4N/VS+I=
Subject key identifier: 0C:38:53:C8:4D:84:74:0F:1C:6F:D2:3E:30:0A:28:6D:40:8D:2A:74
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 019D3A1C9D888E4783933FB3852373ABFFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 180F
Signing time: Sun 29 Mar 2026 15:00:47 +0000
Manifest this update: Sun 29 Mar 2026 15:00:47 +0000
Manifest next update: Mon 30 Mar 2026 15:00:47 +0000
Files and hashes: 1: 2MsPFamPffku1ttx9gaJe1ffa6Y.roa (hash: DHSbfM3R76vdNxci0L/Qjop0BLeabp3SpJ5q1Jd300M=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: aG3fpHP/NyglrdrkirpAeL3QpfIOG6Vr8UoowfZy1ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:9d:88:8e:47:83:93:3f:b3:85:23:73:ab:ff:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Mar 29 15:00:47 2026 GMT
Not After : Mar 30 15:00:47 2026 GMT
Subject: CN=0c3853c84d84740f1c6fd23e300a286d408d2a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:54:56:04:f2:35:29:7a:ce:b1:fd:fb:c3:
e1:c6:d8:f1:d5:16:be:d8:95:31:a8:76:a6:63:ed:
99:74:2f:0f:ad:c4:cd:47:0c:e5:7a:c1:85:ca:c7:
6d:cd:12:f4:bc:f2:55:d5:97:6b:ed:6e:28:d8:e1:
51:fd:65:72:57:36:5c:37:6b:e1:43:f4:d0:52:4c:
14:dc:72:02:89:63:b5:01:94:6a:c1:62:83:e5:be:
ee:78:33:50:c3:81:d1:ed:77:e9:a8:26:de:3c:b8:
5f:25:06:c8:f5:bd:cf:0c:e0:ab:a0:46:c4:f8:ef:
ba:22:75:d6:c1:88:a9:4b:f7:7e:7d:5f:42:b3:b7:
14:b1:f9:29:b2:5b:21:d9:95:2c:76:fd:06:60:a7:
cb:08:a5:33:0a:56:78:92:f6:6b:c8:8f:a4:61:74:
75:ea:de:91:ff:d7:a8:03:c5:00:21:fd:76:ac:19:
5a:d4:98:7e:a0:3f:9d:41:ec:63:56:49:5a:64:4a:
4c:9e:20:88:9b:87:c2:fb:6e:05:95:c9:3d:34:b1:
62:ad:b9:43:08:4c:07:16:03:a4:ac:ea:b1:97:07:
13:73:87:84:1e:da:bd:c1:80:37:47:c8:8c:58:e5:
60:72:7f:49:1e:85:da:38:76:e5:6b:43:0f:c0:8b:
6a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:38:53:C8:4D:84:74:0F:1C:6F:D2:3E:30:0A:28:6D:40:8D:2A:74
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4e:a6:09:aa:00:b5:fd:b9:1e:5f:ce:e1:3f:2a:e8:70:d8:
2e:69:f9:54:c0:2f:e1:19:25:ef:04:5a:cb:93:ec:e4:a4:6f:
9c:9e:04:6b:c3:7c:88:b3:0c:cc:56:9e:6d:b8:f8:32:64:b8:
08:46:db:bc:22:67:6b:22:3b:77:04:30:69:af:65:dd:3f:e2:
7b:d8:a4:f8:fd:af:a9:b7:44:28:c6:4c:93:bd:32:c5:a1:df:
eb:e8:a2:04:02:67:90:2d:43:0e:5f:8c:8e:d5:85:0e:5a:94:
54:09:b7:2c:41:c0:b1:e6:8c:4c:93:df:71:62:50:9d:28:ca:
b8:81:4c:1e:cc:a0:a0:c3:e5:66:71:d8:87:8e:a8:e9:52:23:
24:da:13:30:f2:61:3e:07:1d:e1:15:54:4b:a2:65:20:67:55:
32:65:81:95:2e:94:9e:77:c8:1c:a8:47:09:bb:41:0f:02:21:
85:c4:2b:04:50:3d:b3:69:8a:85:96:da:89:5a:fd:f6:ab:86:
72:57:2e:67:7c:83:68:83:f6:c0:fb:4d:8f:9c:42:98:a4:81:
a4:16:50:a2:42:70:b5:b5:70:9a:39:91:e3:dc:27:c1:ac:1b:
4c:c1:b6:c1:df:f7:5d:e5:ae:6d:e9:d0:1f:8b:c1:2d:8a:e4:
9c:48:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:00 2026 by rpki-client