Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: uAVRAkGq4BZ5sceLkyvpZbFSijGrqob0i2k0UMGc8r4=
Subject key identifier: E8:5F:22:66:E6:72:0D:01:AA:89:B0:E9:3F:9E:81:7E:0E:31:36:43
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 019D3909D188EB8BCA745C21F7C99CC6E447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0D1F
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: NAWLn2JmIDnFs18yJqr1oS3wGGI.roa (hash: U8Bdx9Br8Djn05pZrQuUuhdCEFzcfGoUftoSy+juomM=)
2: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: E93F3LQI9QhnGKuAXrIVa3R/43XV/vvriIYfI9wuAWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d1:88:eb:8b:ca:74:5c:21:f7:c9:9c:c6:e4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=e85f2266e6720d01aa89b0e93f9e817e0e313643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:d7:dc:ee:9a:2f:44:d7:9e:ab:ba:69:bc:
a0:b2:be:c2:2c:bd:9c:2b:5b:b5:70:11:04:b9:e5:
68:d8:e1:ad:22:36:44:37:5c:5a:45:15:99:27:ab:
a4:a6:13:5b:a1:82:44:20:c3:23:1f:c3:99:f6:c7:
b7:46:63:79:97:52:48:00:09:65:e5:b1:fd:35:e9:
8e:6a:5f:22:25:67:4b:f6:27:d2:93:f0:e2:6d:54:
0e:c9:bb:9a:62:36:46:a5:ba:c8:92:d0:bf:87:80:
e1:49:b4:eb:35:3b:c1:87:a7:8e:92:b8:d4:e2:d5:
d0:36:bc:8f:19:11:d9:75:45:3c:ca:90:be:cf:df:
41:75:a0:1e:bc:a9:08:c1:38:56:ec:16:6d:eb:2a:
87:23:3e:51:cc:b1:6a:50:1d:05:bb:e7:37:f7:97:
03:d8:82:89:ee:a8:ef:a9:e2:b0:eb:aa:e3:1d:80:
17:2d:9b:bb:61:5e:c3:69:87:77:1b:69:8c:9f:52:
d6:20:52:23:a0:3a:8c:ab:85:14:be:27:89:02:af:
cf:8c:55:70:a9:c1:1a:96:fa:3d:04:ee:38:f9:45:
ae:de:4c:a6:5c:d3:61:83:f7:f6:3a:13:e1:6f:63:
67:32:08:7f:cf:dc:18:7e:71:0d:7f:0f:72:bd:73:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:22:66:E6:72:0D:01:AA:89:B0:E9:3F:9E:81:7E:0E:31:36:43
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2a:0f:e3:1c:bf:93:5b:e0:2d:cd:46:56:96:29:e7:73:c1:
66:dc:5c:2b:c0:b2:d2:d3:1f:f6:af:5c:9b:31:4a:af:81:28:
a0:45:7a:3a:64:46:5b:65:3e:19:6a:23:ff:20:51:47:29:01:
ec:b3:03:75:c6:d0:c0:64:00:1c:f0:97:e5:51:f0:8d:4b:67:
85:56:2f:ce:02:8a:ff:9a:f1:33:c9:ce:f6:b9:01:e2:a5:28:
a0:46:67:40:5d:2c:f0:05:e9:70:1d:62:9f:cc:aa:5b:c0:b1:
de:d8:51:15:25:c0:b9:29:75:a2:2f:73:ae:b5:2d:43:e3:e2:
73:c5:26:55:21:ca:c5:20:81:b2:2e:01:14:19:0c:4e:f3:1d:
82:e4:dd:55:89:ca:6a:a4:75:03:5a:4e:a1:1d:b9:41:5d:1d:
6a:1b:70:05:68:70:d4:5b:fd:48:db:17:ff:0a:2e:4e:a3:c7:
b7:e5:45:07:97:5c:43:e0:4d:8b:5d:78:9c:37:82:f8:b2:25:
a7:13:52:8e:93:4c:6b:98:0d:a0:05:50:4d:ae:be:da:31:e3:
ff:01:6c:20:da:e0:de:b2:86:48:24:d0:0a:6c:75:99:f8:4c:
ed:ad:f4:00:29:3b:a3:75:14:9b:cd:db:7c:06:87:09:16:de:
6b:23:a7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:46 2026 by rpki-client