Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
File: O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft (raw, json)
Hash identifier: LzX4+Qdc44IGDNB6Hmv8/EpdsLQBNi6eQvtnyRxaa+U=
Subject key identifier: FE:6C:EA:5B:8F:E9:3C:AA:18:01:E2:D6:BB:83:54:21:E8:CC:88:00
Authority key identifier: 3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
Certificate issuer: /CN=3bee6066bb652c648c7a87099d0d9354546060d3
Certificate serial: 019D382DF33FC1378D95048B8AD118885B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl (hash: fTDNsxmfonbFkHqJbh4JjIKsvxL5x4ENIPhzOB53ULE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f3:3f:c1:37:8d:95:04:8b:8a:d1:18:88:5b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bee6066bb652c648c7a87099d0d9354546060d3
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=fe6cea5b8fe93caa1801e2d6bb835421e8cc8800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0d:57:c6:6f:88:b5:ee:1c:7b:aa:32:5a:32:
38:72:27:82:6b:86:5c:ec:c3:87:22:3c:44:73:0f:
56:63:a8:ba:10:a7:55:46:cd:92:90:f8:e5:ec:40:
2a:e0:5f:57:45:22:62:92:9b:47:a6:54:ac:ee:6e:
c1:e4:07:38:8c:40:bf:cb:48:6b:8e:25:ae:ae:b1:
ed:20:15:99:1f:f3:c2:3e:f3:ac:85:a7:bd:28:2b:
6f:7a:fa:9e:6c:39:c4:5c:07:cb:02:8d:d8:78:f6:
24:47:e5:05:5a:c1:46:39:ff:15:43:0a:30:b4:12:
65:19:27:b1:76:c4:1c:84:e6:5e:69:3a:2b:2e:10:
89:22:0b:7c:70:b6:a1:fc:0e:15:d7:76:52:81:d3:
92:37:65:c2:ea:b9:c1:d5:ea:25:4b:55:58:d4:42:
ac:27:1e:84:c1:b5:a2:d3:e1:56:9e:30:88:1f:45:
51:9b:08:13:e8:e3:28:c0:49:de:3c:cd:39:a3:7e:
57:42:03:7e:6b:07:b0:0d:1f:f3:dc:ce:c5:d3:aa:
2c:60:19:13:87:03:52:00:09:86:76:83:b5:e5:be:
9e:17:65:a8:c2:33:59:97:00:e2:e0:0a:6c:41:54:
25:2a:bc:9b:b2:b3:f2:6c:7a:16:a3:43:08:be:b6:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6C:EA:5B:8F:E9:3C:AA:18:01:E2:D6:BB:83:54:21:E8:CC:88:00
X509v3 Authority Key Identifier:
keyid:3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2f:27:28:27:6c:ef:25:52:9d:98:6f:d0:58:d8:8c:b0:9b:
64:33:3a:4f:24:78:db:c4:91:4c:d5:d8:e1:e6:69:ae:e8:6a:
79:04:99:f2:28:e9:e4:19:e5:96:ff:d3:0a:ad:71:2a:00:c0:
ae:26:56:68:02:8c:d6:c5:8b:5b:c4:7e:3a:73:0a:8c:c6:91:
00:ff:a6:af:d2:a0:34:92:af:f7:2c:f3:3a:82:99:b5:66:aa:
d9:56:be:3b:cf:ce:6b:73:0f:b6:72:e8:1b:b8:4b:44:4e:55:
8e:b4:75:83:23:bd:57:48:84:a2:c2:e4:6c:60:67:69:96:94:
93:4b:df:5c:5c:92:8a:67:f1:20:5d:d1:2e:0a:43:01:49:b4:
19:49:96:94:d3:26:35:35:6c:69:a7:1c:2a:b2:8d:05:b0:0d:
af:c7:5f:7b:bf:f9:53:7e:e3:f0:ab:e9:f1:11:cc:03:7f:21:
42:c0:3e:ce:f9:f5:42:ca:3f:c7:38:f9:9a:9d:88:45:1d:66:
7a:a6:b0:80:a2:a3:77:6f:f9:f0:55:1d:3d:35:ec:31:55:b2:
a5:1b:3f:ad:7c:cd:58:ee:ba:28:2a:ff:ed:27:5e:82:2a:27:
c6:e3:aa:63:99:98:85:b5:59:c7:91:46:27:09:97:13:fb:be:
44:75:a9:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LfM/wTeNlQSLitEYiFtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZWU2MDY2YmI2NTJjNjQ4YzdhODcwOTlkMGQ5MzU0NTQ2
MDYwZDMwHhcNMjYwMzI5MDYwMDI4WhcNMjYwMzMwMDYwMDI4WjAzMTEwLwYDVQQD
EyhmZTZjZWE1YjhmZTkzY2FhMTgwMWUyZDZiYjgzNTQyMWU4Y2M4ODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q1Xxm+Ite4ce6oyWjI4cieCa4Zc
7MOHIjxEcw9WY6i6EKdVRs2SkPjl7EAq4F9XRSJikptHplSs7m7B5Ac4jEC/y0hr
jiWurrHtIBWZH/PCPvOshae9KCtvevqebDnEXAfLAo3YePYkR+UFWsFGOf8VQwow
tBJlGSexdsQchOZeaTorLhCJIgt8cLah/A4V13ZSgdOSN2XC6rnB1eolS1VY1EKs
Jx6EwbWi0+FWnjCIH0VRmwgT6OMowEnePM05o35XQgN+awewDR/z3M7F06osYBkT
hwNSAAmGdoO15b6eF2WowjNZlwDi4ApsQVQlKrybsrPybHoWo0MIvrZp4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5s6luP6TyqGAHi1ruDVCHozIgAMB8GA1UdIwQY
MBaAFDvuYGa7ZSxkjHqHCZ0Nk1RUYGDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy01Z1pydGxMR1NNZW9jSm5RMlRWRlJnWU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kMjljZjAtNDA2NC00OThhLThkZTMt
MTE2NDZiZTE2NzIzLzEvTy01Z1pydGxMR1NNZW9jSm5RMlRWRlJnWU5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kMjljZjAtNDA2NC00OThhLThkZTMtMTE2NDZiZTE2NzIz
LzEvTy01Z1pydGxMR1NNZW9jSm5RMlRWRlJnWU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWi8nKCds
7yVSnZhv0FjYjLCbZDM6TyR428SRTNXY4eZpruhqeQSZ8ijp5Bnllv/TCq1xKgDA
riZWaAKM1sWLW8R+OnMKjMaRAP+mr9KgNJKv9yzzOoKZtWaq2Va+O8/Oa3MPtnLo
G7hLRE5VjrR1gyO9V0iEosLkbGBnaZaUk0vfXFySimfxIF3RLgpDAUm0GUmWlNMm
NTVsaaccKrKNBbANr8dfe7/5U37j8Kvp8RHMA38hQsA+zvn1Qso/xzj5mp2IRR1m
eqawgKKjd2/58FUdPTXsMVWypRs/rXzNWO66KCr/7SdegionxuOqY5mYhbVZx5FG
JwmXE/u+RHWpGw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:58 2026 by rpki-client