Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: 4hfMLXg0YoTrxTZz+MfpHbz2k8arLYQQl502mHBmdGs=
Subject key identifier: 22:4A:A7:40:DD:A6:C9:07:73:3F:01:80:BB:89:B0:D5:EE:51:A9:61
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019F129C5B90B2C425496D9E0017EE614018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 09:01:04 +0000
Manifest this update: Mon 29 Jun 2026 09:01:04 +0000
Manifest next update: Tue 30 Jun 2026 09:01:04 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: VkoKHp1+LMc10p3SYzJju39nUmq8SbCjE3tPuFjfJD0=)
2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:5b:90:b2:c4:25:49:6d:9e:00:17:ee:61:40:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Jun 29 09:01:04 2026 GMT
Not After : Jun 30 09:01:04 2026 GMT
Subject: CN=224aa740dda6c907733f0180bb89b0d5ee51a961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:5f:73:e4:ef:10:73:b5:1b:43:7a:a5:97:
f0:2a:21:e7:c2:59:79:44:eb:7e:ef:1f:dc:6b:19:
43:a0:2c:fa:af:49:66:9d:b5:a9:7f:c2:04:e1:21:
d7:20:43:2c:aa:85:af:8a:99:c8:74:fe:cc:9e:6f:
c9:6b:92:4e:6c:73:67:1f:0a:1c:b3:4d:69:e5:e7:
42:6b:ab:69:79:73:0b:59:9f:39:f6:6b:47:25:84:
53:87:e1:96:a9:1c:70:52:bb:ca:bb:e9:54:55:b3:
f2:bf:ed:7a:b8:3a:3c:6c:b4:5e:10:8a:c9:cb:e1:
fc:86:8e:c0:7b:15:1e:65:12:f6:22:af:f9:10:4c:
27:48:b0:a0:c5:23:ad:62:b5:45:e1:a4:a4:ac:8a:
0f:2c:90:f0:fd:9e:8e:95:37:86:6c:b0:c1:cc:eb:
e6:89:9f:5c:50:ca:5d:9f:dd:aa:21:f2:f5:9d:94:
4e:95:88:64:fc:f8:e2:a4:b4:2a:56:3e:36:75:18:
66:73:8b:a0:bd:a7:c9:1a:c2:05:59:0a:30:86:29:
ec:55:db:c8:72:1e:b9:4c:9e:9f:5e:45:9b:ad:79:
89:b5:58:e1:eb:4a:b4:c0:39:ea:f8:62:87:7c:8a:
8f:2d:53:f9:50:84:41:9a:de:78:73:5e:d3:a8:f8:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4A:A7:40:DD:A6:C9:07:73:3F:01:80:BB:89:B0:D5:EE:51:A9:61
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:78:77:50:90:ec:19:a0:85:a1:38:11:24:41:e7:05:eb:0e:
0a:26:18:b1:02:b1:ca:b5:5e:06:0c:7c:0e:e5:5a:40:d6:a8:
16:52:57:3c:03:5c:f5:88:56:2c:15:43:7e:ab:5e:fe:ce:d3:
7e:01:49:ea:63:7e:f8:db:d3:39:de:bd:29:00:4a:19:a8:fa:
c3:2b:65:9d:fe:ba:83:24:e6:c7:7a:b5:da:12:ae:4f:24:e1:
f6:db:9b:b4:ff:57:2e:c0:16:b7:62:37:a1:eb:91:08:0f:6d:
d4:37:aa:6f:ae:26:3b:e3:26:a9:c2:cc:fe:1e:38:33:b9:ea:
9f:17:c9:ae:db:2b:e2:00:a8:b4:aa:42:d2:35:8d:ba:90:ca:
1e:01:39:1e:87:27:14:c7:c4:c3:5f:22:b9:3b:f5:44:67:86:
66:8e:03:21:be:be:77:e4:07:b3:ad:dd:6d:cf:22:f1:8b:dc:
a7:39:65:b1:85:74:cb:ec:51:29:af:3c:06:46:9a:9d:07:15:
d5:fc:7f:70:11:a1:2d:71:eb:ce:c5:90:3f:42:7b:be:89:04:
a7:56:ce:6f:b5:a2:b8:7f:b3:89:6b:56:82:a6:59:8d:00:d5:
42:11:ca:54:9f:22:4e:e9:b8:98:8e:da:17:9f:0f:a9:33:58:
61:31:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:46 2026 by rpki-client