Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File: o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier: bb6ke+WK6LiDT4DzyJ++e0SIEFxsP4iicrMUlTsAs1s=
Subject key identifier: 98:CF:6A:FE:5F:59:F2:74:E1:D2:A2:E7:A0:FC:CF:51:74:0D:20:D9
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer: /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial: 019D3865C6A6A1106434C7840CC2F6501E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number: 0F16
Signing time: Sun 29 Mar 2026 07:01:27 +0000
Manifest this update: Sun 29 Mar 2026 07:01:27 +0000
Manifest next update: Mon 30 Mar 2026 07:01:27 +0000
Files and hashes: 1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: bB921UHkmofm/caLpsmW4zS7V/dubAyBoTASYs5kdMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c6:a6:a1:10:64:34:c7:84:0c:c2:f6:50:1e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Validity
Not Before: Mar 29 07:01:27 2026 GMT
Not After : Mar 30 07:01:27 2026 GMT
Subject: CN=98cf6afe5f59f274e1d2a2e7a0fccf51740d20d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:b3:3e:4b:cf:8d:9d:5c:97:c6:81:d1:1b:
be:b4:dd:bc:eb:4e:ca:29:5f:1d:05:45:26:35:f7:
9c:73:cd:9b:65:89:f7:fc:aa:9e:63:5d:24:02:c6:
4b:3e:15:91:48:4e:94:4d:c6:60:38:4b:94:b0:27:
47:8e:b3:1b:59:d0:eb:8e:45:95:f1:7b:81:a0:15:
07:cd:1b:ca:b6:6d:17:2c:cf:d2:da:df:d2:b5:78:
0f:9b:55:8d:20:10:61:5d:07:ae:83:77:96:b6:48:
fb:54:4d:30:8c:79:a8:db:2a:36:1f:7b:f0:70:24:
e2:3f:b9:31:56:2d:3d:91:cc:98:b2:a0:fb:1a:ab:
83:b3:3a:d4:9e:67:74:53:3f:2a:8b:56:d9:70:5a:
d2:c5:8f:4d:b6:f2:4e:37:ba:43:00:a4:af:1f:66:
d1:4e:9b:11:b6:df:bd:8e:da:5b:8b:51:e1:be:11:
01:e0:a9:77:3a:ac:e1:e3:0a:d5:02:24:b7:8f:b5:
3b:99:89:27:a5:be:61:0f:31:b0:71:53:90:ec:04:
c4:b1:d3:7c:85:c3:0b:04:cc:e8:60:37:e3:19:53:
ae:33:3a:ab:99:2e:f5:38:0d:bb:6b:b4:16:ee:e3:
c7:b3:7d:5c:ee:90:a4:c0:1b:a3:f8:3e:e8:ed:b7:
be:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CF:6A:FE:5F:59:F2:74:E1:D2:A2:E7:A0:FC:CF:51:74:0D:20:D9
X509v3 Authority Key Identifier:
keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:28:90:c4:52:5d:af:43:bc:09:31:e6:a1:a6:6c:6b:56:08:
c9:c0:57:a9:9f:ef:ee:b9:3b:fc:30:87:0d:3a:76:a0:96:d6:
ed:85:79:1d:17:b7:1e:ed:d7:0e:46:5e:aa:9f:68:36:b8:02:
76:89:fc:70:d9:24:38:73:ac:97:92:c5:fe:79:4f:95:30:9e:
25:85:ce:70:6f:6e:9a:94:4d:90:09:6b:d5:14:22:c3:02:82:
31:fb:8a:84:73:f7:de:e8:df:34:22:a0:c7:85:c0:d2:8b:ff:
3c:d5:42:e1:07:50:4d:6c:37:87:8a:d5:fe:41:1a:b6:e0:0c:
7a:ad:54:1e:84:4f:98:40:1e:33:f9:21:aa:1e:50:fd:ee:04:
45:da:be:82:29:a3:46:b0:79:23:35:70:71:b5:ec:58:4c:a9:
b3:b8:20:9e:e4:c5:42:e2:0e:af:1f:eb:79:55:10:d0:b6:fe:
99:a6:16:76:83:46:51:00:55:f6:79:0b:57:11:9d:e9:a5:8e:
fa:34:eb:ee:25:ae:53:48:8e:1f:ae:58:2f:70:e8:4d:54:21:
6c:24:12:4c:89:49:b4:d5:6e:3e:8e:7a:11:55:30:33:d5:25:
9f:02:8e:97:40:c1:85:41:37:23:95:33:1b:cf:8c:11:3b:89:
33:99:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:39 2026 by rpki-client