Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
File: OQW37By46JWiW9SsZ7wxZmFdi2I.mft (raw, json)
Hash identifier: j5LPkufJgdXPYJJv36aWzT69W6tLVqxQaF3yvR1UVDU=
Subject key identifier: 3F:CF:CC:AF:0F:8A:18:5F:40:37:01:4C:CA:57:18:75:DD:44:9C:1D
Authority key identifier: 39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
Certificate issuer: /CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Certificate serial: 019D37C053630A10DDD85FC883A5CBE7D20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
Manifest number: 0973
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: OQW37By46JWiW9SsZ7wxZmFdi2I.crl (hash: Ls6IEaF6MHf37kP2ILq0LR8uXBHwHzU1VOyt3j6yTAg=)
2: Z4v6ZlvI7omARbhcez6_NDTJQb8.roa (hash: UHj01S+GeMVO8OMw4/2M24W4FzNlf+cf+5/o/Mm/j6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:53:63:0a:10:dd:d8:5f:c8:83:a5:cb:e7:d2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3905b7ec1cb8e895a25bd4ac67bc3166615d8b62
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=3fcfccaf0f8a185f4037014cca571875dd449c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:57:ce:9c:a7:cc:2d:64:93:d6:49:9b:e5:
ed:79:75:ab:88:12:5a:09:79:23:d9:72:4c:f5:90:
38:5a:b7:c2:c8:8a:a8:ef:89:80:80:e5:61:e9:6b:
70:f1:b8:37:9f:c0:b0:0f:db:40:1f:87:5c:7a:51:
88:62:84:95:fe:b0:de:d0:d9:c0:cb:79:f6:f2:4c:
37:6e:96:1e:06:7b:a0:44:74:9e:54:c2:00:58:2b:
a6:2f:5e:95:7a:ee:4d:7f:6b:a3:f7:d9:95:99:55:
f4:d2:c4:fc:3d:34:9e:f9:79:c1:79:f2:53:87:2f:
fd:7e:9f:15:e4:4e:84:12:06:c1:06:43:7f:3d:be:
f0:e1:ef:02:74:90:ad:d5:df:a7:ce:8d:ff:fc:f1:
a6:ab:8e:5d:6b:5d:db:74:f6:9a:2b:48:85:19:aa:
21:30:1d:4f:c6:43:c0:d0:e1:19:fc:cf:87:8d:4f:
4f:2f:70:f5:10:24:16:55:7a:6a:11:41:d7:f7:59:
10:9e:62:80:f3:8c:33:8c:29:bb:86:90:e3:f4:33:
25:d0:7b:70:3a:7d:d7:93:9c:fa:4f:38:2f:b1:a0:
a5:0f:51:79:eb:81:ec:c4:2e:a6:d8:05:c2:8a:7f:
fd:24:b8:ca:93:58:e6:19:a9:a6:81:47:d1:b9:b8:
3b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:CC:AF:0F:8A:18:5F:40:37:01:4C:CA:57:18:75:DD:44:9C:1D
X509v3 Authority Key Identifier:
keyid:39:05:B7:EC:1C:B8:E8:95:A2:5B:D4:AC:67:BC:31:66:61:5D:8B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQW37By46JWiW9SsZ7wxZmFdi2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4e6b43-13d7-4d3b-92ed-d9aebe43ef42/1/OQW37By46JWiW9SsZ7wxZmFdi2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4e:0d:5a:5b:a8:ed:c3:47:7f:a7:03:d5:14:18:91:f1:3f:
ef:71:ad:9b:d1:12:c0:d1:96:14:ea:78:e1:28:a7:5c:64:03:
94:e1:75:4c:ec:b6:d2:d9:4a:a4:39:3b:fa:e7:1a:a5:ae:81:
7d:2e:cb:13:22:37:b2:c5:d3:b9:88:a5:28:46:92:11:25:ae:
28:fa:2b:a6:3c:c9:58:6c:e8:cf:ab:8b:9d:9b:c3:40:4c:49:
8a:65:f0:0a:cb:b3:a0:4e:1d:7f:22:eb:43:12:19:90:69:d4:
62:a7:b7:0f:3b:b2:5e:06:da:f1:52:04:95:02:d6:76:18:38:
44:51:99:2d:9f:f0:fa:cb:5f:93:bb:b8:b1:a3:88:bb:ec:68:
35:06:2d:47:eb:fa:5e:16:7f:10:91:89:cc:13:9a:c3:9d:0f:
70:39:26:d0:e1:ab:2a:aa:71:20:e0:44:20:60:f9:ae:5c:fb:
0b:57:28:8a:3c:a0:24:b2:9c:b2:3b:73:15:d3:28:e1:b1:3d:
6b:b6:c2:4f:7b:6f:d6:a2:3c:a6:d1:c5:8d:8f:b2:26:72:25:
8e:03:7e:db:ab:5b:a7:7d:1d:76:e1:6a:7e:ad:13:c4:21:de:
fe:07:77:aa:22:c3:05:7a:e4:75:0c:d3:14:c8:45:70:71:8c:
b9:e3:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:27 2026 by rpki-client