Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: z/ckNMvi7I+TDo4KxJVJGNxCDud4M4Vim+rIEL8xrGI=
Subject key identifier: 61:AC:A0:60:FA:F3:FF:09:44:D4:4E:96:5C:F2:AB:B0:DE:F8:88:EC
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 019D38D33C4AFC7124DB8916FF0CCD54B067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:01:00 +0000
Manifest this update: Sun 29 Mar 2026 09:01:00 +0000
Manifest next update: Mon 30 Mar 2026 09:01:00 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: 7UJbh/ScvV5+jTAKCwGz/BU7Lr8GRg8KQJmXuvPZnOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3c:4a:fc:71:24:db:89:16:ff:0c:cd:54:b0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Mar 29 09:01:00 2026 GMT
Not After : Mar 30 09:01:00 2026 GMT
Subject: CN=61aca060faf3ff0944d44e965cf2abb0def888ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:f1:36:2e:ce:ec:a7:ae:67:69:e6:dd:3d:
bb:5c:c6:27:47:7a:e3:07:0d:6f:19:97:cc:20:de:
ce:84:c1:21:73:78:2b:20:06:a4:0d:29:79:96:54:
34:06:ea:32:20:7b:70:8f:c8:35:04:e9:07:b1:d4:
01:8e:62:99:5d:bd:b9:50:91:86:9c:5d:5b:23:e7:
92:4b:86:79:89:cb:15:e8:44:94:ee:4d:6a:50:ec:
9d:a3:e9:ca:ac:8d:f7:ea:04:58:55:70:61:7d:22:
56:69:7c:d8:9a:d3:e4:d4:c5:05:f6:e7:bb:d1:11:
4e:7e:34:01:37:a4:71:47:df:52:92:c0:7e:32:d5:
7d:7a:f4:d9:ae:53:7d:01:33:f0:a1:07:8b:ac:1f:
94:0e:ef:19:73:c0:ee:63:52:30:3d:e5:92:3f:1f:
52:be:ce:28:36:4d:ab:33:b7:9e:a9:74:69:7b:4c:
0a:1e:9c:8a:5e:fa:d5:ab:d9:f7:93:fb:92:aa:6a:
b6:ee:11:b6:d8:26:98:90:c6:15:e4:e5:3a:db:b1:
ff:f8:c9:aa:93:e3:4a:13:2a:30:25:57:42:c0:fd:
d0:4f:f7:3f:0d:5e:84:49:63:3e:9c:69:83:d0:ec:
3c:5d:20:11:bd:25:9e:ed:77:2e:d7:c4:89:ed:91:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:AC:A0:60:FA:F3:FF:09:44:D4:4E:96:5C:F2:AB:B0:DE:F8:88:EC
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:48:3f:84:f0:15:a4:24:9c:bc:8c:d0:a5:93:e2:a7:6c:b8:
05:70:26:06:0c:9c:54:d0:9d:fd:6a:ba:6a:9a:17:52:1c:2c:
87:e8:65:b7:ca:d1:7d:8a:85:ef:6f:30:00:4b:70:2a:d2:d4:
e6:5b:b3:e9:a6:49:c3:98:8f:3a:12:b7:91:30:5f:bc:0c:a9:
6a:84:66:65:15:65:56:61:9e:a5:b0:fd:67:1b:7b:19:32:72:
8e:9f:f3:36:0c:d6:89:86:29:1a:12:9e:48:ae:a9:0d:55:00:
9a:cf:de:aa:6c:1d:89:ac:2a:ba:a2:50:dc:bd:31:f0:d5:a8:
d2:b7:0f:5c:53:42:f1:ba:d9:e4:0d:c0:05:f7:76:a3:7d:4c:
66:54:ea:a2:6c:89:22:89:56:4b:51:95:f9:4d:af:a9:99:76:
fe:b3:b3:b4:74:0c:30:f9:33:11:9f:4f:cd:73:24:c5:f0:9d:
06:1a:64:7a:96:2f:57:a8:1d:fc:8f:c9:a0:30:d8:31:bd:16:
4f:d7:fc:85:d0:ff:45:20:16:86:3f:b7:ec:10:81:24:90:a0:
7b:75:02:0a:55:22:d2:99:ca:b2:b0:48:3c:7d:c2:83:73:b2:
9d:a3:1a:a0:fe:82:bb:18:44:34:c6:b4:e4:7d:8a:66:16:0e:
04:50:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:55 2026 by rpki-client