Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: qic50g6inFnEj3bFqccXh2Dy532twL96aB7kilMy13Y=
Subject key identifier: 8D:0A:6D:10:5F:27:F8:27:E4:DC:72:89:E5:EE:19:D7:56:2B:42:FC
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019D37895E4716C66FE737B9D3D596800E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:42 +0000
Manifest this update: Sun 29 Mar 2026 03:00:42 +0000
Manifest next update: Mon 30 Mar 2026 03:00:42 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: y6uV0mZ2/Dcz9lO+2AsMhvi6e5/QLhmssVF3O8pOZFw=)
2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5e:47:16:c6:6f:e7:37:b9:d3:d5:96:80:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Mar 29 03:00:42 2026 GMT
Not After : Mar 30 03:00:42 2026 GMT
Subject: CN=8d0a6d105f27f827e4dc7289e5ee19d7562b42fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:91:5a:c4:9c:3a:7f:19:72:68:a7:44:70:cd:
38:1d:7b:b7:14:54:b5:5c:ce:c5:e5:20:b5:52:69:
a9:d1:e8:df:00:ce:55:a6:1f:17:09:60:75:12:5f:
b8:87:11:90:3d:a7:c6:3e:1b:b0:bf:f1:6f:c8:e8:
73:3d:0c:89:db:b8:10:89:2a:9c:0b:04:bc:aa:9a:
5e:45:5c:8e:e7:59:37:99:49:38:66:e6:7c:ed:9d:
da:96:c8:a5:30:6c:af:02:9a:3e:7c:e1:6c:84:7b:
e7:e6:ec:a1:50:a8:f9:b8:8c:90:85:ba:29:46:03:
de:70:05:df:c6:e1:b7:8b:29:13:be:0e:c6:0f:cb:
bb:56:46:1a:a0:bb:8f:6d:88:2a:e7:de:b3:32:6d:
e2:f1:e2:80:8b:b5:b6:6b:47:ad:3a:f5:c5:d3:1f:
f2:04:5d:42:3a:b7:ee:f8:b2:3a:1e:63:f7:55:e0:
17:27:d7:9b:1c:a9:0a:3d:62:68:ef:15:b0:c9:ce:
09:a0:43:20:05:db:52:20:38:44:38:44:ad:91:87:
55:71:d1:be:51:17:d4:3e:08:f2:0b:8c:1e:d8:98:
68:5d:1d:32:e9:f0:29:49:dd:f2:4a:50:b5:2f:f4:
c0:f9:0c:7e:70:86:1a:b2:6f:9e:d1:0c:5c:0c:3b:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:6D:10:5F:27:F8:27:E4:DC:72:89:E5:EE:19:D7:56:2B:42:FC
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b6:69:bb:43:40:22:56:82:25:28:c8:5e:42:06:1d:1b:26:
f9:76:05:1e:14:29:d0:d2:a9:c4:de:c5:59:2d:df:93:5d:68:
c3:4f:db:19:8c:4b:ac:89:8b:9c:dc:de:b1:a2:2c:94:82:0f:
f6:6c:db:b3:ef:9a:a2:d9:3f:a3:b3:8a:da:b6:60:7a:66:17:
50:51:f1:56:bd:f1:13:64:49:bf:23:34:17:3b:41:0e:af:56:
20:88:6a:ea:09:09:c3:e2:9a:1e:a7:07:91:69:73:bf:88:5a:
9c:3a:13:c7:f2:ae:46:1f:69:2d:b1:d2:f3:dd:d4:98:48:02:
bd:ae:b2:fa:7e:0d:44:74:68:64:d8:b2:af:21:e5:90:ac:6b:
f6:0f:68:1a:31:8f:b5:06:c8:b7:65:8e:d7:f2:bf:59:83:49:
e1:35:db:7e:cb:2a:b2:c5:21:48:7c:df:1f:6f:01:e3:83:68:
43:ef:5b:3c:a0:3b:a4:cc:56:51:d6:46:32:0d:bf:6a:b4:14:
58:ea:41:ee:a2:45:cb:b1:8f:b3:60:40:78:13:58:b4:a1:91:
68:f5:dc:77:ca:3d:ec:fd:23:b9:5c:03:d5:28:14:ae:64:f2:
b8:86:01:84:59:c8:3c:29:ff:84:a9:9d:4a:04:8f:62:12:2f:
ee:ec:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:13 2026 by rpki-client