Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier: QPUvARUNutImRj+y50n3ifY9ttENuR32jnWES1cEcmo=
Subject key identifier: 86:0B:3E:CB:4B:35:A1:19:D4:78:BB:51:F4:20:42:29:9C:0E:88:26
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 019D389C0E796DF2D4648194CAF176DA8F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number: 1160
Signing time: Sun 29 Mar 2026 08:00:44 +0000
Manifest this update: Sun 29 Mar 2026 08:00:44 +0000
Manifest next update: Mon 30 Mar 2026 08:00:44 +0000
Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: 9o+tyzQ5KZQhHAsajeZWGeEdZZfK5JMWGkYfe/EfNj0=)
2: VKdoGfLRpSy-iS0ByTtLZ3OIUZI.roa (hash: GLPIQNk9SF4ckQrOTlAnl4nPM7oMaUINPgb3JIgnuFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:0e:79:6d:f2:d4:64:81:94:ca:f1:76:da:8f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Mar 29 08:00:44 2026 GMT
Not After : Mar 30 08:00:44 2026 GMT
Subject: CN=860b3ecb4b35a119d478bb51f42042299c0e8826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:c8:57:87:09:c0:98:73:e9:00:19:ae:22:
a7:0f:7d:74:6c:8b:33:51:ae:0d:d1:7c:b9:11:18:
be:1c:b5:38:6c:47:fb:76:92:a2:cd:50:8d:80:56:
8e:86:18:27:c2:2c:b6:e0:af:1d:4f:89:c6:9b:30:
70:72:6e:12:5f:ff:ee:4c:79:2a:db:1c:3a:8b:c8:
86:af:76:60:c5:59:27:35:72:61:ea:d4:cd:f9:0b:
63:76:c2:29:4d:07:f3:29:18:46:ed:72:9a:f1:f7:
83:01:4b:8d:11:91:5d:f6:75:a9:fc:b6:8e:7e:17:
d0:ce:d1:68:f9:14:ee:5b:77:ae:67:79:ac:fb:ca:
47:16:e1:4b:eb:43:81:a3:de:dd:3b:5b:be:a9:86:
2e:eb:dc:92:d7:36:5c:20:74:95:9b:a0:27:de:bf:
87:c9:4b:d8:e8:93:97:3c:aa:88:84:14:b4:8e:2c:
d1:2f:fe:cb:16:10:9c:28:94:d3:ae:ba:a6:42:53:
81:99:6c:af:d5:38:23:43:52:36:b0:7e:75:99:e0:
26:87:e9:c9:23:10:ee:fc:4c:27:42:40:ee:e1:97:
82:75:71:83:e3:f1:78:53:17:3b:4f:71:7c:7e:56:
73:4c:9f:1b:25:2e:31:1c:17:c9:d0:c6:2b:27:a7:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0B:3E:CB:4B:35:A1:19:D4:78:BB:51:F4:20:42:29:9C:0E:88:26
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:77:a8:ac:b7:54:bf:29:bf:62:8d:43:d5:6b:8e:af:fc:33:
c7:71:6a:cc:54:39:16:3c:87:2b:4d:46:d2:2c:07:2e:16:a5:
75:47:18:c9:5b:e6:58:ff:c5:66:32:8d:b5:9e:30:52:b4:2b:
5c:ac:04:fe:39:1e:37:60:f6:bb:e6:22:15:b6:c7:ed:97:cb:
5c:1f:24:f4:28:c4:47:51:43:39:4d:7d:3c:01:e3:da:f4:ed:
af:ec:9d:29:75:50:16:2b:02:3b:47:50:c2:43:9a:c1:52:af:
a8:76:9e:89:40:8b:99:e1:8a:92:0a:aa:cb:ed:28:47:13:59:
70:96:fe:72:21:f1:55:1f:f1:31:2c:39:b5:31:7e:04:78:c8:
62:bd:a9:b1:25:33:e5:c1:79:46:ef:8b:25:fd:68:cd:10:6d:
79:6f:2d:3d:b6:23:93:0c:ef:4e:e9:74:8e:4e:d0:94:f2:a3:
50:d3:57:7a:fd:d0:28:bc:35:97:5a:4c:a1:40:13:be:91:8b:
13:4d:29:45:93:0f:9b:01:a4:59:3d:3e:f5:7b:80:84:54:22:
6b:8a:95:8b:c2:97:65:63:7e:c2:7f:c7:0e:87:06:32:b1:ef:
40:bd:6f:1f:8e:b4:ff:e0:2f:65:89:23:a0:3c:7f:83:67:40:
7f:35:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:35 2026 by rpki-client