Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier: OlrjRUVSYrzP1O6biH8DNUiBzw9KYo58eqjzjUH2jPM=
Subject key identifier: 4E:A0:A3:28:C4:08:83:D4:C3:82:84:B3:A7:5D:5D:5F:39:A0:42:1F
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial: 019D386686D89F6CD9B1426E68F1DFE22086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number: 0DE7
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: vH6mNshCnE2D59nknPzCU1vd08799gnwFK9JdJEC8Y0=)
2: haiqd0uROE9igzZ6U-8DLmT0_wo.roa (hash: zy3b1gRK2HZuT5n0a04wvFSWWQ7+eD23DEYn7FkuZuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:86:d8:9f:6c:d9:b1:42:6e:68:f1:df:e2:20:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=4ea0a328c40883d4c38284b3a75d5d5f39a0421f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:76:7a:b2:da:28:32:86:4f:8b:8f:d8:f3:
50:ad:1a:66:93:91:dd:fa:fa:cf:47:5b:ef:79:96:
91:87:17:30:b0:37:8f:2f:94:ec:2e:81:bf:1f:cc:
fb:ee:51:01:90:dc:d1:ca:95:23:6f:0c:b6:4d:e8:
e1:07:6f:96:83:ba:10:41:e1:0f:0d:77:19:1d:59:
b9:dc:f0:13:46:c0:02:dd:92:29:2b:69:7d:48:c8:
59:6a:b8:b4:32:de:1a:2f:e8:db:74:ca:4a:de:e1:
f4:10:cd:31:6c:56:d6:85:0d:09:7d:51:4f:fc:55:
5c:ae:6d:3e:5f:4a:5f:88:e5:f3:ce:4b:34:61:08:
e5:5b:2c:1e:e2:41:a1:1e:4e:d2:dd:4b:73:71:ac:
41:cf:4b:70:3e:70:af:30:8a:51:62:cd:ee:95:d9:
5a:00:0f:98:da:e5:70:a0:d3:05:01:f4:ba:88:5e:
5a:34:58:6f:fa:ea:27:eb:ff:bf:5b:02:cb:d0:2b:
0d:5b:eb:02:26:de:75:c2:35:34:5b:fc:3c:f8:8b:
cc:99:3d:24:1c:a2:f5:03:1d:19:c4:db:51:0c:6b:
09:70:1c:94:d8:c5:b1:51:94:c4:90:dc:e7:c5:5a:
91:13:9a:67:3c:44:b9:63:0c:17:55:9a:98:f2:d5:
81:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A0:A3:28:C4:08:83:D4:C3:82:84:B3:A7:5D:5D:5F:39:A0:42:1F
X509v3 Authority Key Identifier:
keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:27:08:bb:01:55:4a:69:f8:24:e7:51:83:80:f5:e8:d0:85:
56:d4:c9:9e:bc:19:69:38:ba:30:f2:93:d6:7a:04:8c:6c:3b:
da:cc:cf:6c:c0:71:4d:bc:73:b7:3f:5d:93:0a:14:25:e4:25:
e6:9f:9c:9d:64:09:b7:2e:2e:d9:51:ff:ad:9c:cf:79:d1:77:
e7:4e:46:a4:e4:17:4b:f3:d5:99:72:4d:ff:bc:7e:ec:f2:59:
42:bc:bd:8d:89:c0:44:4c:e7:8b:8d:aa:84:50:2a:d3:62:66:
1c:a7:76:15:1f:39:46:ef:b6:8f:15:7e:e6:32:a0:80:35:b2:
62:9b:1f:dc:18:dc:d1:85:48:f6:46:c7:d5:b1:e4:8e:6d:ee:
11:a3:05:c7:be:c8:41:3d:37:84:24:3a:43:4f:31:29:d9:7e:
24:4e:c3:10:91:f3:10:0f:6e:e1:7f:1e:21:9c:56:a5:64:7d:
07:8e:10:2a:7e:a8:28:2d:0a:e0:c1:a0:49:ae:fc:f6:c6:b8:
5e:7a:80:f2:15:81:6e:2e:7d:40:4d:3b:4b:b6:fa:8b:93:a0:
fa:05:47:82:af:d9:a0:a2:da:a5:1a:f4:a2:2b:1f:b8:2a:49:
0c:05:86:77:ad:0b:30:61:e9:a9:2d:0e:2a:94:da:89:32:c8:
0a:38:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:23 2026 by rpki-client