Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: l8KS1CicpWNiDHj4AYsZ2AIauQPrJ6eMwzmpujhjN0o=
Subject key identifier: 35:79:3D:94:84:DD:48:2B:09:24:F2:62:03:C5:0A:DE:21:42:26:9D
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 019EB76A4864D2C43CE4BBE28D0979AF3722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0DE5
Signing time: Thu 11 Jun 2026 16:00:56 +0000
Manifest this update: Thu 11 Jun 2026 16:00:56 +0000
Manifest next update: Fri 12 Jun 2026 16:00:56 +0000
Files and hashes: 1: NAWLn2JmIDnFs18yJqr1oS3wGGI.roa (hash: U8Bdx9Br8Djn05pZrQuUuhdCEFzcfGoUftoSy+juomM=)
2: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: D51VnQlqCbkPBBBp16J42oToFWHSScHzTawltn13Eqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:48:64:d2:c4:3c:e4:bb:e2:8d:09:79:af:37:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Jun 11 16:00:56 2026 GMT
Not After : Jun 12 16:00:56 2026 GMT
Subject: CN=35793d9484dd482b0924f26203c50ade2142269d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:ca:58:77:6b:ee:38:23:ec:c9:a7:ea:e8:
1d:51:d8:b4:ed:42:41:51:0f:04:92:72:0e:5a:8d:
44:e4:22:d2:35:e6:af:a9:2d:b9:2c:e3:f1:2b:02:
9c:3d:01:48:5e:75:7e:f5:d4:8f:58:bc:71:63:01:
b2:6b:54:0a:82:a1:dd:1d:5f:ff:ff:f0:4a:fc:d0:
a6:f1:1a:96:60:f4:1b:a4:31:93:cb:3a:e9:a7:e6:
3d:c7:cd:c7:d3:51:ca:78:dd:f7:ab:a3:aa:dd:11:
52:d2:d5:9e:c7:19:e9:c0:b8:ae:46:31:5c:ae:6a:
82:f9:f6:e4:30:81:38:e8:5b:54:9c:55:d8:49:5d:
8c:29:19:3c:a2:ae:ba:d5:26:88:e0:33:48:2d:b2:
09:82:02:e7:4f:00:17:4a:4e:42:a0:92:27:67:5d:
94:8c:f7:eb:b8:98:8f:4a:75:17:16:d2:de:b5:7b:
2d:ba:70:fd:07:82:cd:33:51:65:4c:1d:e0:00:f3:
9a:db:0d:8b:2b:53:24:98:16:88:00:e3:f1:fa:f3:
17:13:72:47:f3:bd:3e:ab:04:9d:32:83:a7:db:2f:
19:d8:dd:b3:ac:b0:d7:5c:1b:ce:11:1a:f9:a0:e0:
40:bb:ca:af:9b:0e:a9:68:e2:c2:a3:1f:6c:02:f2:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:3D:94:84:DD:48:2B:09:24:F2:62:03:C5:0A:DE:21:42:26:9D
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:13:5c:24:da:06:ac:1f:9f:62:c9:b0:6b:d5:49:4f:c5:6a:
ff:9a:13:97:0f:cf:06:8b:15:4c:ec:cb:7c:06:42:2d:7a:03:
ff:f3:64:b1:39:58:a1:80:8b:3b:b7:67:42:4e:41:98:76:05:
2d:e7:01:55:90:63:6e:95:3d:03:6b:0d:c7:4d:35:9a:11:38:
72:2c:df:50:31:51:49:b8:9b:3f:76:17:61:5b:c1:5e:7e:74:
57:0c:5a:9f:2f:1f:86:2d:0b:c4:6a:53:b4:9a:a1:58:49:80:
e8:5e:6e:56:20:b2:3f:7b:ee:f0:76:bf:04:44:d9:ca:2f:cd:
e7:e8:31:b6:8e:f7:e6:d7:6a:28:31:e3:c7:b6:57:f0:ce:18:
18:b5:ca:59:99:a0:e3:2b:4f:d2:b6:22:e5:a6:47:24:97:3d:
79:85:e2:69:02:0d:a3:05:5b:9d:b1:97:8c:19:e0:8a:b7:30:
06:46:98:0f:68:bb:1a:91:ae:f0:79:92:e7:f2:43:7c:9e:74:
de:79:2e:75:d3:63:b0:bb:fc:90:f9:cb:5c:20:d4:36:aa:80:
85:49:ad:72:0b:6e:7f:5c:ee:a7:b2:43:80:bf:db:ec:45:90:
55:9b:15:5e:6f:f1:32:1f:d1:d0:3c:d5:9b:a5:79:20:24:25:
b3:b3:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:22:47 2026 by rpki-client