Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: ApjTWCG1xKNeqIKrapCgi1i6RBdXptThAVZWAWGB6tc=
Subject key identifier: F8:E6:45:10:28:32:89:46:FF:9E:FA:0C:A4:E7:47:82:71:D2:9F:32
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019C7D804CBD59008643910E13D6473BE404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0DBB
Signing time: Sat 21 Feb 2026 00:01:26 +0000
Manifest this update: Sat 21 Feb 2026 00:01:26 +0000
Manifest next update: Sun 22 Feb 2026 00:01:26 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: AuNyUBsAoyY7YoVNKiuEmx/DXK8h1Vql0XBgnb3EVHQ=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7d:80:4c:bd:59:00:86:43:91:0e:13:d6:47:3b:e4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Feb 21 00:01:26 2026 GMT
Not After : Feb 22 00:01:26 2026 GMT
Subject: CN=f8e6451028328946ff9efa0ca4e7478271d29f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:13:28:bc:c2:2e:ac:25:c2:d9:ab:65:78:
cd:f1:78:90:b5:06:0d:cd:7d:7a:f2:ef:43:7e:ce:
1e:23:92:a0:8b:04:b8:ac:e2:29:1a:e3:5e:b6:0e:
62:6d:b6:79:67:5a:d4:13:65:39:5d:a5:99:2c:2e:
e0:ce:4d:fd:58:10:bd:7d:5a:15:7b:02:ec:8e:99:
ec:52:cd:8e:e3:bc:35:f4:58:b7:cb:c0:17:98:e7:
39:40:4f:44:00:54:9d:2b:bc:cd:88:ce:c0:7d:6f:
50:d6:3d:b5:6b:95:43:ec:f0:a7:06:3e:f9:0a:9c:
3d:72:31:bb:30:4c:c1:c3:e9:a4:f4:a5:43:d0:8c:
1a:3e:9a:08:9e:37:12:21:bc:c2:a2:99:32:3e:80:
70:bf:f7:d0:eb:01:8f:25:32:da:ea:51:7e:cf:0c:
ea:1e:bf:01:71:a5:11:9f:58:4f:b4:fc:89:a9:0a:
e7:81:ae:66:1e:b8:4a:d5:05:fc:b6:0c:30:f3:37:
67:1f:c4:9f:74:ee:36:57:7a:19:e5:81:0f:f5:d6:
bc:71:22:6d:70:39:6e:20:87:d4:62:5e:11:a5:72:
4a:57:ba:d5:ec:27:e1:f2:a2:c3:79:53:94:1a:c2:
cd:32:5a:83:32:69:79:da:4d:65:43:2b:d8:e9:c2:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E6:45:10:28:32:89:46:FF:9E:FA:0C:A4:E7:47:82:71:D2:9F:32
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d8:19:69:03:fe:2c:30:19:72:7d:a1:03:68:c7:8c:8b:f9:
8c:a2:00:0d:5e:48:c3:88:ad:bd:c0:84:7d:88:67:94:c8:a3:
05:cc:d5:c3:9f:e6:6c:5d:c2:de:03:20:ec:51:ef:41:11:5d:
ae:5c:bc:6a:fd:35:00:79:28:5f:26:73:08:73:62:33:23:cc:
d7:45:ed:f0:ae:91:87:2c:8a:b2:57:b4:75:2e:a4:3f:6a:66:
6f:7d:c6:dd:59:eb:54:d3:13:84:fb:77:9b:c0:d7:02:60:17:
f2:be:86:0c:0b:64:8b:58:7d:9d:34:cc:f1:dc:00:fc:f6:84:
96:c5:6d:3a:e4:c7:93:6d:60:fc:57:fd:88:52:2f:d6:8d:a0:
d1:48:44:0b:d4:cd:e8:7a:3a:c9:68:a5:56:b3:e8:20:3b:e8:
03:e1:b8:c4:49:fb:a1:b6:1a:70:f4:28:55:77:cb:44:bc:22:
5e:90:6d:99:47:03:dc:13:52:40:68:d2:29:ff:6f:66:2b:e3:
81:18:88:e3:f1:05:1a:69:25:e8:d6:34:36:a1:cf:f5:f7:45:
4e:1f:85:3a:50:ff:06:cd:ed:ac:b8:1f:6c:ac:a0:a4:1c:92:
58:23:47:e8:60:3a:e6:9d:e3:6a:90:e3:8d:7b:59:56:e7:52:
02:01:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 06:07:49 2026 by rpki-client