Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: SXzGv26k7a80JJ5kIjNU9YlUNPOD16sfNcbCF9dU85Y=
Subject key identifier: 56:95:11:77:18:82:A0:5B:F4:7B:28:C2:2F:72:0A:2C:B8:D8:5C:C5
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 019D3865DB9E1881E626A9B6125FE5016080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 14DE
Signing time: Sun 29 Mar 2026 07:01:32 +0000
Manifest this update: Sun 29 Mar 2026 07:01:32 +0000
Manifest next update: Mon 30 Mar 2026 07:01:32 +0000
Files and hashes: 1: OFa8deirJ8mX7gRn79xlLJ8oDFY.roa (hash: N+xsE/A93Q5FiilxuvU4PImtKOjqeD0giFP8OnmhGl0=)
2: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: 9dvz/WD0Fl0uBho93XEUrz7eRHxRPwUuB9XI02cxJ5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:db:9e:18:81:e6:26:a9:b6:12:5f:e5:01:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Mar 29 07:01:32 2026 GMT
Not After : Mar 30 07:01:32 2026 GMT
Subject: CN=569511771882a05bf47b28c22f720a2cb8d85cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a2:ef:66:6f:51:ee:29:80:47:81:c5:e3:ca:
43:1d:2a:67:e0:88:49:f7:fe:4f:35:10:97:1f:ce:
b3:62:85:26:ce:3e:b6:53:eb:5e:fa:8a:21:0c:3f:
bd:a1:68:c4:0c:cd:a8:79:4f:6a:72:99:27:f4:6b:
fe:90:eb:95:31:b3:31:52:ce:dc:3a:2b:57:5f:7e:
d6:70:47:9d:db:2d:d9:c2:90:5e:c3:fe:cb:bd:25:
cb:3e:3c:83:19:ff:4a:90:0b:c8:d3:2f:fd:4b:82:
82:28:ac:ab:e2:3b:a3:43:31:d3:89:2e:5f:59:30:
7c:56:83:9b:d4:9c:ea:33:c5:c9:1a:1e:d7:13:f7:
9c:37:af:3d:14:92:02:5a:71:34:92:21:90:e8:d2:
0d:6e:82:9d:a2:e5:d5:ca:0c:22:93:fd:64:96:ff:
95:a3:ee:f0:7c:75:95:4b:e6:80:dc:7d:3d:6b:6a:
6e:60:5a:7b:ea:80:31:b8:17:92:df:44:33:63:a6:
5a:8e:5b:b9:25:94:a5:a0:3c:23:6d:ae:55:a7:f0:
2a:ed:4f:ca:36:04:58:08:25:ea:77:69:b1:0c:83:
a6:c6:94:53:66:b3:b5:76:fd:80:12:f9:e5:c4:d3:
18:e3:a3:af:b8:93:55:1b:87:aa:f3:ce:fa:87:57:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:11:77:18:82:A0:5B:F4:7B:28:C2:2F:72:0A:2C:B8:D8:5C:C5
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ca:a3:79:30:b6:d6:56:7d:ea:8b:c5:09:9e:ea:39:8f:65:
4b:3e:6f:9c:ed:be:8c:d0:77:d2:16:46:d6:b0:91:b5:0e:38:
ee:60:3b:03:8e:f8:12:26:e8:89:df:79:4d:c4:cd:1b:29:fe:
4b:0f:9d:93:10:ca:b6:4f:2e:38:9c:88:1f:a0:d7:21:46:91:
7b:c2:35:93:86:8b:b5:2b:da:f4:aa:3b:ca:54:62:c6:32:39:
10:21:e2:7c:16:d8:32:6c:d2:ca:e0:31:8b:50:55:8c:a7:f9:
59:f2:0e:49:c8:f8:04:72:46:63:fb:89:10:cb:9c:de:a9:17:
98:02:64:21:25:ce:17:fd:fa:94:3c:be:75:09:7b:09:25:83:
7f:c5:37:c2:40:7b:48:df:e0:7d:75:60:85:d8:bc:a5:80:f6:
f8:6a:64:e9:88:20:52:36:ab:67:ed:57:73:ab:57:5d:f7:3d:
dc:59:a6:a2:33:04:b2:10:75:72:73:d8:e8:b8:cb:4d:93:b1:
08:bb:54:46:63:3c:84:ec:71:25:4e:37:b5:3b:0c:ee:04:1f:
c9:90:09:77:41:43:6b:e0:3c:02:1d:e4:7b:e7:61:95:da:c2:
22:e0:9f:0b:9f:9c:a4:b4:04:7e:cd:48:a1:8a:d7:ca:8d:79:
e6:57:d5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:07 2026 by rpki-client