Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: dT/PruhzZjuA4eLj1q4a/VnYUC6ey2/im8ZHL48AWNM=
Subject key identifier: 76:69:A8:30:E1:5F:AD:E2:44:70:DB:BC:FA:B7:36:53:05:5C:6C:4A
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 019D38D3CFB2F3D8A3C09BBB643B65AE35DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 0400
Signing time: Sun 29 Mar 2026 09:01:38 +0000
Manifest this update: Sun 29 Mar 2026 09:01:38 +0000
Manifest next update: Mon 30 Mar 2026 09:01:38 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: ITEs7sxhkFu3KmKA5mtFAw8exxkIwW258GbD5gFr5xw=)
2: qcRxwVaFJKZNZxKItMTgD_sHnKI.roa (hash: zSxjrYYqoeDrJlezU9Vi0F+/e6UNxqHigCDZbFFsf0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:cf:b2:f3:d8:a3:c0:9b:bb:64:3b:65:ae:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Mar 29 09:01:38 2026 GMT
Not After : Mar 30 09:01:38 2026 GMT
Subject: CN=7669a830e15fade24470dbbcfab73653055c6c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:6f:c2:50:c1:c0:92:1a:27:53:89:5e:8b:
58:7b:a1:cf:45:2a:0f:89:0e:d4:f5:9b:1f:32:5c:
15:ec:4c:6e:1c:7c:7c:24:c0:d3:09:1f:cd:ed:08:
37:f9:88:e3:3f:da:5e:c1:4a:48:cf:49:26:3d:c6:
16:1f:61:c5:55:66:b8:1e:f4:a7:63:0e:8d:4d:b4:
d2:d4:73:5d:79:01:d8:69:ed:dd:42:e3:f3:9e:08:
2d:e2:1d:de:ed:1e:c7:2b:ac:01:ff:89:06:18:15:
ae:15:f2:d6:77:f3:ec:3f:f6:18:f2:97:dd:1c:89:
a7:88:66:d4:13:2c:5d:fc:c2:ca:4e:db:64:32:30:
63:25:1d:bf:49:19:b6:e9:38:b7:56:82:ae:9b:a2:
6e:e3:af:10:19:8b:28:fe:13:70:e7:78:18:d0:92:
42:94:30:75:ff:32:f4:3c:cf:f5:e3:34:84:ad:8a:
a0:e2:73:d3:2f:01:4a:ad:9a:61:b1:62:b4:75:90:
d7:bb:9b:58:30:37:f6:49:cb:74:12:6e:42:6a:9c:
d3:bf:7a:a0:5b:c6:da:56:df:af:71:57:0e:16:e4:
1c:a4:d3:0f:95:89:16:54:ec:c5:a2:43:e1:3c:a1:
15:c8:d7:46:7d:24:80:d1:12:36:35:66:11:95:88:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:A8:30:E1:5F:AD:E2:44:70:DB:BC:FA:B7:36:53:05:5C:6C:4A
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:02:5a:e7:05:f3:f2:7c:5f:c0:d4:72:d4:9e:75:b8:b6:9b:
e9:a0:f1:0a:c7:04:f1:35:cc:39:ff:b5:5a:50:c8:be:be:b9:
cd:4e:5a:e7:c0:54:fc:50:8f:ce:cd:d0:ce:25:c9:61:33:15:
9a:60:b7:02:b1:d9:d8:72:2c:ea:5b:d5:37:98:39:8e:f3:ac:
61:b0:c2:86:01:41:35:19:ff:f6:ee:01:8d:7e:50:4b:77:7e:
0a:b5:23:f3:0d:ee:03:25:85:49:e3:30:1f:16:60:ec:42:17:
08:39:94:f2:4f:3c:d0:51:74:16:2b:b7:3e:44:f8:7e:98:59:
22:77:08:93:7a:2d:43:ca:7f:76:1c:62:f8:87:46:2d:09:57:
ff:15:ec:e6:1e:43:f3:db:31:f3:5e:f1:60:e1:30:c6:43:81:
e7:e3:13:b6:f2:d7:f6:6b:a8:fd:03:2a:36:8a:14:04:06:cb:
67:35:d4:43:fc:98:59:00:82:0b:b5:95:4e:10:1e:b7:29:ff:
90:16:56:4d:84:4e:e8:20:c1:9d:de:5f:cb:57:2a:e6:5e:f1:
d7:72:6b:60:b2:c2:55:cc:44:c8:1d:ee:3e:21:5d:43:5d:42:
2e:8d:87:b4:de:d3:de:ec:65:c6:46:96:bc:5b:38:e1:95:4a:
46:6b:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:53 2026 by rpki-client