Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: 1Tf27iULdCxYhnMUBUcV/luU5P8TbvSzUCIYirAky24=
Subject key identifier: E1:88:89:8B:64:3F:2F:FF:7C:46:F8:55:24:F5:7E:1B:C2:1E:1D:08
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 019D37F752CF26C8C32D2CB86CBC6D2A36AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 049A
Signing time: Sun 29 Mar 2026 05:00:48 +0000
Manifest this update: Sun 29 Mar 2026 05:00:48 +0000
Manifest next update: Mon 30 Mar 2026 05:00:48 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: wRMi6d3CyLqgr7E5c4Y8sS3Tgpc2sG25g+k4mdbve5I=)
2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:52:cf:26:c8:c3:2d:2c:b8:6c:bc:6d:2a:36:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Mar 29 05:00:48 2026 GMT
Not After : Mar 30 05:00:48 2026 GMT
Subject: CN=e188898b643f2fff7c46f85524f57e1bc21e1d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:b2:67:48:94:1d:41:cc:83:b5:ee:89:7e:
4d:ce:2a:18:4e:b0:5c:ce:42:74:c4:5a:56:df:d7:
1c:8b:b9:56:30:fd:b8:02:ef:57:b2:9b:84:7a:b4:
35:81:30:35:a2:08:aa:58:fa:2d:c5:03:1d:ea:6c:
c4:76:7b:5c:e2:7d:79:73:ba:80:2a:da:f5:3d:6c:
4e:82:c5:48:1e:36:43:21:42:f1:88:4d:21:0f:9d:
9c:ad:4a:08:36:07:ee:85:5a:03:7a:ad:6c:85:b3:
be:f7:e6:43:e3:3a:c9:8d:b5:b0:0d:28:91:b4:66:
fc:d0:a1:5c:55:76:b2:d8:47:b0:84:3d:5b:5e:a0:
08:08:bd:fc:e7:db:2b:7c:13:45:26:78:b0:a9:81:
96:b1:70:5f:fb:2b:67:d8:37:76:70:10:96:45:05:
a6:c8:df:66:a6:df:47:71:27:3e:25:9d:08:15:1e:
e7:a2:88:e4:6a:cf:31:d1:2d:76:03:9c:80:37:c2:
23:d0:03:bb:49:55:54:1a:d0:c1:27:ac:e2:74:7f:
5f:b0:4c:84:a0:0f:e5:9b:e2:4e:e7:de:a5:6f:f0:
b3:97:eb:2d:ad:59:4a:b8:7f:d3:e4:11:f8:75:f8:
ff:05:5b:ab:9e:34:e8:e6:a3:69:52:9b:d3:74:9f:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:88:89:8B:64:3F:2F:FF:7C:46:F8:55:24:F5:7E:1B:C2:1E:1D:08
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c0:17:6b:31:52:e5:fe:41:66:4b:ba:52:ec:9e:04:c4:5e:
c7:d8:d6:a9:a1:fe:48:ce:3e:8f:e2:a6:b2:6c:84:3c:d7:54:
35:e8:3b:e4:c6:00:cf:42:eb:4b:88:f8:4f:14:2c:67:91:19:
35:f8:9f:fa:2f:da:20:b2:39:89:bd:39:f7:d8:a0:92:6a:b7:
e3:7a:3c:ec:89:37:8d:93:33:22:cd:4b:96:c8:ea:ee:05:6a:
91:27:6c:5f:65:b1:9e:81:78:9b:47:86:2b:eb:06:14:c6:f1:
17:20:77:97:a7:6c:2b:78:ed:82:1e:55:18:d0:ea:59:cd:99:
22:a9:40:85:a2:36:68:46:dd:e1:9e:15:7b:35:12:1e:a4:dc:
a0:d7:8d:29:83:1d:c0:d7:7e:4f:d2:f7:f2:c4:5f:b8:a0:67:
0e:bc:82:4a:c4:f8:92:35:ea:95:b6:8d:f3:f2:73:6a:ad:2b:
97:cd:fb:f0:61:e6:05:d2:50:e8:57:71:ec:50:02:89:eb:de:
77:b4:1c:a1:a5:24:05:f4:d6:d4:c4:9f:ba:09:97:cd:5f:39:
ff:59:66:3b:0a:da:f3:a6:30:6f:45:85:d3:22:dc:8a:bd:da:
e1:04:ba:9a:e0:f2:5b:41:7e:0a:8c:dd:cd:23:79:55:3d:0b:
1e:07:7f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:07 2026 by rpki-client