Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
File: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft (raw, json)
Hash identifier: gQ4r3f02Ix2u92MzcvpiBFUuL+apu+ffImURsKsmGjs=
Subject key identifier: 35:16:49:10:DD:DE:25:91:91:F6:05:16:FD:D1:6F:15:26:CF:E7:79
Authority key identifier: FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
Certificate issuer: /CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Certificate serial: 019D3909A5122A4D366B4276C18E2090A77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:26 +0000
Manifest this update: Sun 29 Mar 2026 10:00:26 +0000
Manifest next update: Mon 30 Mar 2026 10:00:26 +0000
Files and hashes: 1: DO0j4v3mEz3qd5IvdV_Cnx8CXlg.roa (hash: utTjxlZWKu9J3DkdZuLkviiFIN8/pSjqYt+kL5WYAx4=)
2: _O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl (hash: db5zJYo9nk18/mhCXCl84p/bWT9vY2fqp3TwVjYUzpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:a5:12:2a:4d:36:6b:42:76:c1:8e:20:90:a7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcee32279c16dacdb5349f1b87c57d74c50ea539
Validity
Not Before: Mar 29 10:00:26 2026 GMT
Not After : Mar 30 10:00:26 2026 GMT
Subject: CN=35164910ddde259191f60516fdd16f1526cfe779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0d:7a:30:3c:39:92:53:43:90:50:2c:dd:9f:
51:08:b5:d4:e0:ac:93:c1:4f:7b:c6:45:a3:8a:1d:
4f:62:d2:e5:14:90:54:b4:41:9a:bd:8c:54:a9:bc:
51:a3:03:83:71:9a:cd:db:1a:13:c6:72:09:fc:e5:
27:3d:9a:83:cc:b2:f5:e8:17:59:79:23:4c:63:6e:
50:5c:79:ff:71:21:73:41:01:dc:8e:e9:8b:d5:34:
4b:c3:de:d7:29:20:79:ad:15:42:55:30:97:6c:14:
5d:84:2e:53:b0:62:d6:40:53:5b:34:02:a6:dc:48:
1c:be:07:7d:51:45:ef:ca:4b:6d:c8:a8:0b:66:71:
f8:4e:cf:49:62:58:41:99:10:0f:39:ae:15:8e:fa:
12:11:71:59:16:94:6b:b5:39:cc:7a:f5:00:36:7c:
5c:38:d8:e8:b3:0c:d8:58:26:c6:4a:f2:77:24:d3:
0f:79:76:f2:18:77:56:1e:78:55:13:b0:72:91:b1:
bf:ff:ec:75:44:15:eb:d9:b1:0d:d3:a6:43:01:35:
3a:8f:77:f9:d6:cb:1a:9d:24:c9:59:45:b7:2b:43:
34:ad:fa:3e:57:6a:4a:c0:33:76:73:31:0b:98:31:
21:7b:ee:64:39:ac:b2:58:4c:11:7b:ef:88:42:e1:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:49:10:DD:DE:25:91:91:F6:05:16:FD:D1:6F:15:26:CF:E7:79
X509v3 Authority Key Identifier:
keyid:FC:EE:32:27:9C:16:DA:CD:B5:34:9F:1B:87:C5:7D:74:C5:0E:A5:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f60502-2704-4834-9d68-30466dec3905/1/_O4yJ5wW2s21NJ8bh8V9dMUOpTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f3:bd:05:1c:6b:62:39:e4:2d:9b:79:c5:10:70:93:36:e4:
bd:53:94:b9:5f:4a:93:cf:5a:f0:56:5e:eb:67:ff:27:b9:74:
33:17:ff:f2:ba:71:7e:09:db:c6:1f:99:8d:26:2f:c1:62:08:
aa:2d:31:dc:6c:86:80:ee:b9:5d:6b:51:bd:f3:66:f7:b8:5c:
a9:f5:6b:d6:cf:4b:f9:0f:eb:11:29:70:1e:5f:7f:4e:6d:9c:
61:91:8e:c8:ea:16:c5:7e:c0:7f:fd:e9:ec:3c:94:26:31:96:
0f:02:48:a4:03:c9:be:5d:ac:83:05:b2:72:9d:71:7d:8c:32:
d6:3f:a8:3f:b4:f1:45:51:e3:f8:92:30:01:cb:df:4d:8f:11:
6a:d1:4c:11:68:70:c9:c0:07:90:82:d1:ea:f1:25:82:00:22:
12:5a:e2:42:c2:f8:c2:c8:95:70:26:e1:fe:11:b8:aa:33:73:
24:56:29:a6:1d:00:97:19:2a:b4:e5:44:05:5d:02:1f:2e:c1:
4e:1b:7a:53:4c:47:9d:f1:d5:b8:8e:05:9f:4c:9e:4e:73:a3:
58:54:c1:f1:53:91:5e:7a:03:1c:3f:03:72:5b:8f:e6:e9:e3:
39:a7:2c:79:3c:0b:ea:03:fd:d1:fb:a4:0e:e2:ea:d2:88:6e:
66:66:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:45 2026 by rpki-client