Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: 5WomulGy7s6IbZVUML1srjLyNSWOU3kQ4vX8jhuyTWg=
Subject key identifier: FC:93:40:27:F3:89:63:0E:37:91:00:1D:27:0B:87:73:22:53:FB:F6
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019CE6A3F0FD1DAF3748E46EAD270BA02DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 186D
Signing time: Fri 13 Mar 2026 10:00:29 +0000
Manifest this update: Fri 13 Mar 2026 10:00:29 +0000
Manifest next update: Sat 14 Mar 2026 10:00:29 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: wT17oVsLT/JHpKNY9g2O3gHE2X/NkVu12JueFCxWs+s=)
2: QqdbypBpxrcLYznZBUaAaDr_z-o.roa (hash: SckJVSoL8gUL5QOdfT/4r5cTNoKe863XSPeR8+BnWmM=)
3: avaEnMlL7981ZoHlCmFBVvkLBCM.roa (hash: 62norVZ5aOhRAssdJbDmNAm3FE+gQIMFJ2pokt5w/9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a3:f0:fd:1d:af:37:48:e4:6e:ad:27:0b:a0:2d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Mar 13 10:00:29 2026 GMT
Not After : Mar 14 10:00:29 2026 GMT
Subject: CN=fc934027f389630e3791001d270b87732253fbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:55:f9:70:91:17:4b:d6:fc:c9:41:d8:34:
67:5e:c0:5b:d6:ae:7c:0e:2d:10:da:76:ad:a5:22:
5a:1d:af:a1:a1:dd:e1:59:04:32:0a:14:50:f9:2b:
79:56:04:bd:25:84:69:ff:b2:67:a2:19:bd:95:8a:
7f:8b:17:3a:df:3d:0c:0f:d6:88:ec:81:e0:56:46:
1f:79:21:e1:6c:31:b0:67:b8:d6:ee:91:55:6f:bd:
3b:a8:8b:20:68:90:1a:04:c6:47:39:1d:eb:5d:4d:
d6:8c:9b:ff:db:ac:75:91:90:ae:6c:43:80:ac:a0:
21:07:f9:c0:2b:16:6f:a3:d5:aa:a8:f4:1b:8e:1e:
5b:e3:52:cd:d9:79:92:94:2b:e1:c2:2f:63:e2:dc:
50:11:44:ad:4a:76:6a:38:d2:24:a6:9c:a6:da:8d:
87:4a:81:bd:bc:92:76:a7:d4:0a:0f:3e:25:b5:9f:
74:b5:8b:2b:8d:48:f5:4d:0e:61:cc:22:83:9a:2b:
4d:cb:3a:92:e3:31:9c:5f:99:c5:fb:fb:57:de:f1:
d8:0f:d9:00:ef:03:fe:ed:f9:5c:bc:af:ce:2b:61:
cf:ee:95:47:e5:07:7b:32:b2:85:a5:27:f1:df:a8:
0b:28:a8:54:9b:e5:8e:50:b2:ae:51:46:ac:1b:44:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:93:40:27:F3:89:63:0E:37:91:00:1D:27:0B:87:73:22:53:FB:F6
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1a:71:6e:18:e6:97:eb:13:85:cb:0f:60:f6:26:3a:65:af:
6c:a6:ca:a2:7e:4a:4a:36:6b:66:8d:45:0e:3b:19:95:20:24:
11:83:03:4f:0a:79:b8:75:40:81:77:5b:8b:53:b0:6b:6d:85:
cf:45:f0:3b:47:c2:cc:f6:26:82:00:5c:f6:45:42:c5:ef:b9:
79:aa:74:ee:d9:a9:f4:dd:55:d5:8a:96:45:46:38:85:e7:82:
ae:12:c3:7f:1a:c9:60:ba:da:a3:fc:3c:96:3b:3f:e9:db:8d:
ea:08:18:cf:96:2d:8a:02:1c:9b:ca:13:9f:28:b9:43:74:4e:
45:b0:4f:b0:f0:8c:02:8a:5b:a0:0a:af:fa:f1:9e:12:86:63:
2b:18:3a:bf:85:90:6c:bf:22:c5:8b:8f:ab:9b:97:0b:52:56:
f4:4a:0d:ff:42:4f:42:42:24:40:8d:fa:4d:9f:59:7a:48:f0:
2f:5d:81:db:f4:9d:31:ba:99:7f:02:88:bf:70:57:7c:a4:9f:
a9:d5:4d:e9:a3:f8:cc:e9:69:c2:1b:c2:c2:23:29:1a:72:f3:
1f:13:93:9c:d9:a9:5a:ad:b9:76:99:1c:a3:95:28:50:54:f2:
41:72:a0:45:91:49:ca:b9:a3:7b:8f:66:08:31:87:94:c1:b9:
af:f6:4c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:26 2026 by rpki-client