Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: A5Tj4aMbVVD6rqKQXhiQUkNj9Oj4lSqUjQMmZruSaKo=
Subject key identifier: 02:95:94:F3:7E:B4:C1:F3:E8:38:A3:2D:7E:66:35:D6:84:85:1D:2A
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 019CC82BEB9B181FF12956AB8A24C3FB90BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 0346
Signing time: Sat 07 Mar 2026 12:00:47 +0000
Manifest this update: Sat 07 Mar 2026 12:00:47 +0000
Manifest next update: Sun 08 Mar 2026 12:00:47 +0000
Files and hashes: 1: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: zihfoZVKPvweXpVqvDfMFb5743ykQQddCP6Fp6LttHA=)
2: xZvTVsgAgTHbHn_16cZuYXn4mck.roa (hash: +oE3yDmB7hi9Ypi3E2o3IvseUAbSMG6NeT9277jObu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:2b:eb:9b:18:1f:f1:29:56:ab:8a:24:c3:fb:90:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Mar 7 12:00:47 2026 GMT
Not After : Mar 8 12:00:47 2026 GMT
Subject: CN=029594f37eb4c1f3e838a32d7e6635d684851d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:06:f9:b8:e4:c1:96:17:da:c4:2f:58:0f:
7e:39:51:b9:95:a8:49:a2:5a:ae:9c:e7:be:27:bd:
69:30:bf:cd:c1:cc:9a:7f:d7:d4:08:53:a3:aa:e9:
67:3e:8b:8a:14:2e:72:8b:a5:36:a0:20:7b:f7:e6:
21:ea:b5:b6:d3:cc:5e:f1:da:47:99:ef:be:b2:d7:
1a:b9:c7:53:80:58:fb:69:16:c0:12:1a:7a:74:bc:
3e:ca:63:3a:e4:5d:a8:3e:70:59:7a:4c:98:73:47:
5e:d7:44:08:bd:f3:09:63:b0:77:a3:3f:f8:25:55:
14:3f:f7:b0:0c:99:57:fb:15:c3:4e:58:58:12:9d:
a6:31:65:04:73:b5:e7:48:0c:3c:b8:ba:ca:0d:88:
ff:25:e2:e0:5e:f6:14:95:9d:b4:a9:e4:1c:1f:6e:
dd:ec:4d:fb:3a:c2:ee:db:0a:60:ee:88:70:ea:0d:
e7:ca:fd:41:8e:2f:6e:f0:9d:0e:ba:2f:7e:38:6e:
55:55:af:48:c2:a5:5a:d0:d1:be:35:ac:bb:fc:20:
82:d0:7f:72:55:bb:e2:cb:2c:34:79:8e:fd:10:31:
f1:eb:80:86:41:1d:13:7f:3b:5f:33:cc:8c:b7:d6:
67:f8:2c:03:ec:9e:e7:ea:0b:9c:ef:d8:83:3e:36:
f0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:95:94:F3:7E:B4:C1:F3:E8:38:A3:2D:7E:66:35:D6:84:85:1D:2A
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:96:a6:09:55:69:3f:76:7c:dd:2f:27:3e:f1:71:63:bb:37:
a0:9f:64:2f:50:4b:a1:42:5c:7e:7f:bf:ad:b6:b3:df:89:48:
ee:7a:8e:1c:8f:9b:fe:c0:43:cb:97:ee:e4:af:0f:04:9e:4c:
08:9c:d3:cd:f1:29:b8:f6:2d:f9:6d:c1:0e:01:d7:65:d1:8d:
ac:cf:64:d8:ac:9d:48:ba:cb:85:8e:8c:fa:8d:6f:02:ad:39:
3d:d6:ac:03:ae:68:97:a0:7b:9d:b1:1c:a9:a9:92:b0:9e:28:
7a:b3:4e:6d:b4:06:b3:c0:48:a9:bd:a7:e8:8f:f4:05:4a:59:
7f:c2:38:0c:9e:22:cb:97:a7:15:23:c8:6e:00:33:ab:65:7c:
59:35:bb:53:58:40:43:4f:ce:fb:9c:6c:41:2c:4a:46:6a:14:
b0:fc:16:cb:8f:38:17:55:b3:ef:75:c1:27:fa:cf:e3:bc:73:
29:bd:26:12:df:50:2c:0b:59:4c:c3:d1:0f:73:6b:d3:1a:10:
69:9b:8f:67:e5:50:04:19:18:bb:03:cd:7b:ae:4c:5d:ee:6f:
d4:32:50:14:8f:14:60:c9:27:8b:fd:4c:f1:df:02:60:da:f9:
0d:3f:7c:72:4e:d1:47:09:4e:7d:59:07:90:05:07:39:26:16:
8a:32:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 21:04:04 2026 by rpki-client