Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: 7HEig+G59V/mB4TruBIlLgPmJAH343AL8nDBuNNOv3g=
Subject key identifier: 37:68:2B:11:B2:6F:AF:1A:1B:E4:A4:35:35:4B:8A:F8:D4:D4:A1:19
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019E28EFE5E197BC0B7BA7253B49FD831C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 190D
Signing time: Fri 15 May 2026 00:01:10 +0000
Manifest this update: Fri 15 May 2026 00:01:10 +0000
Manifest next update: Sat 16 May 2026 00:01:10 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: XSL7qsU0CHf+Q457yyx9iKxejT9Vc/TSs7kA+pOCvuI=)
2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:e5:e1:97:bc:0b:7b:a7:25:3b:49:fd:83:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: May 15 00:01:10 2026 GMT
Not After : May 16 00:01:10 2026 GMT
Subject: CN=37682b11b26faf1a1be4a435354b8af8d4d4a119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:9c:5d:11:c1:d7:e6:64:a8:c5:b7:f5:dc:
0f:f7:ac:4f:97:4e:47:9f:e2:a1:5d:4b:f3:44:ac:
0a:11:73:0a:8b:ad:35:ac:68:b9:7b:62:ce:c3:98:
85:9a:1a:5e:d1:2a:5a:63:a2:8f:5f:b8:b5:0d:e3:
e8:e9:c8:ed:ca:bf:00:61:d9:13:7b:7b:f8:33:f8:
25:0d:5d:ee:f1:bf:68:64:4e:4e:c6:e7:e5:7a:f6:
3e:d2:a9:0d:6f:2b:28:67:c1:7c:20:24:e1:68:6d:
f3:7d:d8:30:7b:6b:ea:e2:ab:0f:60:d5:e2:70:d5:
af:ea:78:7b:9f:d2:71:2e:14:b0:20:1e:24:f8:9b:
ed:b5:67:07:bc:72:73:49:4c:09:c8:02:53:db:86:
99:72:38:a8:47:99:42:54:10:0b:6d:91:48:f5:de:
65:06:4a:b5:89:36:e8:85:82:a8:74:9f:28:6d:7f:
f7:15:28:3e:7e:50:9d:10:8b:26:53:a5:87:9c:aa:
e6:88:4c:74:6a:44:55:e4:d7:42:65:88:4d:be:40:
7f:c5:d0:8d:3c:6d:a2:62:a1:bf:82:b8:f3:a7:4c:
8e:a8:37:b6:e3:ac:c0:40:c8:9d:d9:56:15:0e:0f:
95:7e:68:53:c6:be:0e:77:59:07:4e:cc:45:bf:54:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:68:2B:11:B2:6F:AF:1A:1B:E4:A4:35:35:4B:8A:F8:D4:D4:A1:19
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:74:59:37:ff:b5:52:33:00:ff:c5:67:85:2e:f7:ee:9d:74:
b3:87:f0:d9:cf:13:55:80:c6:8d:df:07:2f:17:1d:29:3e:3d:
5f:ea:cf:33:bb:4f:0d:f9:a7:00:d0:48:bc:8b:89:cb:b4:7d:
6a:51:f7:a6:9d:e9:42:75:c0:17:03:61:0d:f3:76:37:54:d4:
d3:c1:e4:6d:43:32:92:3f:d3:f1:dd:8b:8a:19:01:92:02:ad:
34:20:4a:57:91:e9:fb:d3:b8:3a:94:ff:8d:9c:f0:84:df:43:
e2:ac:2a:34:ee:72:16:52:a7:1c:29:8a:c3:a4:f9:6b:b9:eb:
b4:2f:3e:91:97:a0:5b:7b:72:9d:aa:ee:05:7d:c6:9c:50:1b:
bf:94:a5:14:05:66:a1:5a:62:0f:0b:85:f7:4d:a5:45:9a:2d:
91:8a:db:0b:2a:68:83:fc:a1:c0:ac:25:7c:e1:cb:f5:52:fc:
10:63:2f:4b:f4:49:91:5e:30:a6:bc:d9:31:c2:6a:5a:8e:15:
de:64:c6:16:ef:e5:14:f0:56:b4:12:9e:3d:5b:c8:83:f8:37:
2c:3e:a1:c1:95:c1:bb:e9:14:e2:14:25:05:d2:9b:4d:1d:4d:
1f:c8:73:b1:40:70:0d:3d:a4:bc:91:39:a2:36:60:81:03:13:
80:28:15:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:42 2026 by rpki-client