Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: o8jnXXFWvf4/ZmDWvpYAQZHp6sIrBa35tVriJAfak/U=
Subject key identifier: 64:82:EE:0E:68:DE:87:F2:49:99:16:1E:07:86:53:2B:3C:65:87:87
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019D3752EE2BBCC8F71FE557186B99A86796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 02:01:14 +0000
Manifest this update: Sun 29 Mar 2026 02:01:14 +0000
Manifest next update: Mon 30 Mar 2026 02:01:14 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: WxqJ+TSnVBC/h/5AEkbCpwpbeuc0FTkwP+pNbIgYzR8=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ee:2b:bc:c8:f7:1f:e5:57:18:6b:99:a8:67:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Mar 29 02:01:14 2026 GMT
Not After : Mar 30 02:01:14 2026 GMT
Subject: CN=6482ee0e68de87f24999161e0786532b3c658787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:13:b1:ef:57:38:6a:36:e6:42:8c:57:63:
63:63:af:af:44:8f:b1:1b:c5:50:af:95:f6:ef:eb:
e8:e8:9b:98:a7:45:7f:d6:f8:88:3b:97:fb:89:9e:
1c:42:bd:fa:4a:e6:81:2a:79:f2:a1:44:bd:8d:dc:
00:14:6d:11:fc:78:ac:ba:b6:03:79:b4:60:ff:51:
34:98:9a:6a:98:5e:38:27:ec:3a:f6:21:61:95:bc:
1a:f0:f4:bc:15:78:77:09:d2:37:9f:df:84:d5:c5:
26:6e:40:d7:9f:62:e0:98:85:e5:e9:e9:29:91:10:
ab:ab:26:c3:e8:20:76:4b:17:f9:60:46:3e:32:7b:
6c:55:ba:b3:00:d5:1e:a6:2c:90:c4:09:a4:4e:19:
28:56:a0:4f:67:25:a5:d8:6b:b4:af:3f:46:22:fd:
c1:8e:28:c6:13:01:b4:72:e0:eb:ef:18:85:e3:58:
c7:48:4c:ef:8e:e6:38:f8:7c:6e:75:8c:ab:14:5d:
f1:bc:de:57:e2:3b:42:68:2b:0a:a6:e4:54:a1:f0:
0a:93:a1:24:8b:5c:69:fa:0a:e7:01:6f:c5:0b:79:
f0:d7:2b:df:70:64:74:bd:b9:a3:5a:c7:e3:25:00:
81:b6:cb:b6:3c:49:ef:e3:db:ef:c3:31:0e:b2:a6:
a4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:82:EE:0E:68:DE:87:F2:49:99:16:1E:07:86:53:2B:3C:65:87:87
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:39:40:09:b0:29:52:11:7d:3e:d9:7e:87:fc:cb:ee:19:6f:
96:75:b3:1d:17:70:18:9f:50:98:1b:cc:ab:38:86:29:81:34:
9a:d3:5e:88:8c:29:9d:2d:45:76:07:cc:d6:0d:8b:60:f9:7a:
cd:ac:bb:ec:f4:11:04:9a:d8:58:20:f7:48:29:e4:1a:93:4a:
7b:76:38:38:d8:c5:84:f0:14:52:5c:80:00:8b:df:8f:7d:78:
65:8d:9b:1a:44:52:96:72:2c:af:5c:d5:ba:da:25:3a:d6:1d:
d4:f7:23:c5:7d:c3:18:1a:f9:e6:85:3e:35:ea:63:af:5a:35:
39:b1:55:78:cc:4b:aa:19:83:54:74:23:8d:4f:ab:74:f7:0b:
19:e4:03:8c:01:ae:52:40:4c:56:11:ee:e0:c4:c6:65:65:d5:
b3:5f:52:1a:e8:26:b1:d6:70:82:4a:d0:eb:ee:ac:2c:3e:68:
99:38:1a:84:66:03:60:be:c5:6c:4e:2f:86:99:85:0a:65:7a:
de:2a:b2:9c:7a:14:d5:96:89:0e:5e:94:d5:5f:83:55:da:eb:
4e:d9:d7:09:be:36:5b:d3:ca:d6:b2:11:c8:ef:02:9a:54:80:
fa:c4:48:4f:6a:77:1a:62:88:06:3a:6f:48:2e:f6:df:6d:c3:
a4:a4:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:55 2026 by rpki-client