Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier: g+2rxxhAplWv44DzewbxgLSnksakAJjYy/JNXIhPI8A=
Subject key identifier: C1:0F:4A:16:D4:10:DA:42:71:5A:5B:E5:6C:E9:CE:B8:6C:E5:7D:02
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 019D3940CB9A83BA766B31CA8DCFFA12057E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number: 1594
Signing time: Sun 29 Mar 2026 11:00:40 +0000
Manifest this update: Sun 29 Mar 2026 11:00:40 +0000
Manifest next update: Mon 30 Mar 2026 11:00:40 +0000
Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: SKqNA1Wy8C6GP/e3HU5ic7/sT2DDSqbWog1dO3ofD7I=)
2: TIBIPgd0Nln-DuzUf3r64T4_MDg.roa (hash: Wc4+19rN5KfObjYjXDD+w/Qt81kPFgbecT9pFJ34v+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:cb:9a:83:ba:76:6b:31:ca:8d:cf:fa:12:05:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: Mar 29 11:00:40 2026 GMT
Not After : Mar 30 11:00:40 2026 GMT
Subject: CN=c10f4a16d410da42715a5be56ce9ceb86ce57d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:69:b0:be:1a:18:8c:dc:59:bf:30:0d:6f:e7:
0a:03:97:54:cc:79:f4:40:63:fb:34:39:fd:fd:e7:
e8:d8:49:cf:a7:31:7e:ba:16:88:af:73:24:c7:dc:
cc:7c:93:01:07:c6:ad:e3:ac:6d:41:dc:eb:d4:11:
c1:ed:90:56:13:fc:bd:d1:25:8a:94:a5:83:0b:24:
f1:e4:01:78:9d:1f:63:f1:c4:4b:7c:16:00:dc:81:
df:86:04:c5:04:8b:30:52:02:84:eb:ec:6c:08:02:
0f:d9:90:d0:5a:d8:a2:0b:12:80:75:37:57:f1:4e:
cb:90:f4:71:6d:bb:ce:39:89:4a:8b:73:89:5c:2c:
35:92:cb:78:81:32:11:62:b5:11:d3:77:32:56:b2:
9f:c9:9e:5f:33:93:90:76:3f:0e:24:ee:55:64:b9:
ac:52:6d:6e:07:0d:7a:6f:1a:1a:f3:2c:84:4a:3d:
fc:5d:dc:29:73:d7:ba:43:91:ce:b9:cf:6a:ea:71:
43:3b:9b:40:8b:38:34:1c:bf:6b:52:b3:db:4a:38:
51:dc:78:2a:8d:2c:bc:2f:75:ed:0a:05:f9:c5:79:
56:e4:07:cd:0b:e7:81:11:5d:16:a3:f9:73:ac:a7:
ea:b7:40:92:ea:36:34:64:15:76:90:2f:bf:b5:81:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0F:4A:16:D4:10:DA:42:71:5A:5B:E5:6C:E9:CE:B8:6C:E5:7D:02
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:95:b5:97:bb:81:05:a4:a8:be:b7:b0:4c:1d:90:66:05:ae:
6a:ba:e7:f7:58:e3:60:9d:93:69:82:70:0a:1a:4e:37:3f:eb:
5c:18:4f:0d:a8:81:ca:70:47:f5:e1:94:9f:bf:63:7e:c1:72:
73:02:42:15:5e:e8:4d:08:79:ec:59:cd:63:22:1e:5d:6e:0a:
4f:56:49:46:8e:b0:2f:40:b8:70:ef:96:1f:a4:7e:a9:6e:66:
73:2a:2e:89:f2:4e:eb:74:47:44:6e:92:34:4a:f8:4e:7a:3b:
0c:e9:72:4e:7b:ca:6d:c8:f8:b9:0e:ad:6d:8d:c0:5b:da:75:
bc:42:76:98:67:d1:ed:70:3c:de:39:6b:dc:94:5d:55:61:d2:
2c:f3:bb:f2:0f:82:ac:e8:a9:44:d1:a2:a7:e7:e1:68:8d:62:
30:34:a9:e4:08:52:8a:b5:92:9c:56:0a:14:9e:6b:49:f0:69:
34:a7:9d:49:25:46:5f:b4:39:75:7b:65:1b:e8:1a:3b:ea:2d:
0f:90:e4:73:0e:fa:d9:d7:59:98:4c:73:11:7e:9e:0b:6b:26:
f4:52:4f:cc:ac:05:88:28:3e:e8:a1:20:1f:c7:7c:dc:d9:b0:
14:0e:e5:f7:4b:e6:fb:ef:87:66:54:12:f7:cf:fd:49:70:8e:
de:02:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:57 2026 by rpki-client