Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: BwbKptbHPipFeiKO8PtIctHNIFMUNFfQdsfXRG7y68U=
Subject key identifier: 5F:06:9A:A0:2C:AE:A0:E5:CD:73:FE:93:61:6A:62:F3:C9:D9:B1:54
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 019D394165DD18E57307D623050A59EC02C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0BA4
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: GbMgngzItY4uIndF-XcuFLKJhR4.roa (hash: wGyJex/ofBYcPy2R1/ePo/0rQqidiA5P6cvt53DFaE4=)
2: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: mxQ12iQsnvTGMdEethctgWg6rmhw9+BU2NweLX5vQt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:65:dd:18:e5:73:07:d6:23:05:0a:59:ec:02:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=5f069aa02caea0e5cd73fe93616a62f3c9d9b154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:53:45:1c:b0:ba:a2:d9:73:8d:ae:5c:3a:c8:
d2:22:25:61:b7:5e:5a:4c:18:2b:44:39:99:6c:8f:
db:37:45:8e:dd:33:5c:a6:43:da:5e:1e:f0:1c:61:
22:a6:b7:95:4c:35:7b:f2:18:f1:41:89:fa:0e:85:
06:bb:96:78:75:31:a7:99:0f:83:95:33:16:8c:06:
ef:35:2a:fc:3c:a5:bd:2e:ae:fb:95:32:c4:36:57:
86:31:84:4b:be:7e:d9:aa:0b:9e:ae:c3:4f:2b:ac:
1b:97:87:8c:4d:b4:5f:03:56:70:0e:6b:1d:dd:ee:
9a:d4:e3:49:7d:2f:69:18:29:b6:23:ff:2a:da:9b:
0a:5e:0c:86:02:13:4c:e1:b8:f3:89:30:e0:20:58:
e4:38:af:6c:89:7b:07:72:91:50:9f:2f:ca:e5:de:
f9:75:82:13:28:e0:b7:74:e5:bc:e1:f0:34:55:ec:
6e:d5:6d:fa:8f:cc:dc:e2:84:3b:7c:61:d7:5c:2a:
46:7a:5d:2c:be:80:e9:16:58:00:05:c3:14:73:4a:
cf:26:1b:a8:fa:81:db:5c:85:09:61:e1:9e:72:1b:
54:60:81:95:12:4f:bf:39:e0:d1:54:db:7d:8d:19:
c9:c0:3a:32:3b:3d:51:fa:39:e7:31:25:be:be:97:
07:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:9A:A0:2C:AE:A0:E5:CD:73:FE:93:61:6A:62:F3:C9:D9:B1:54
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:32:26:69:53:8e:f0:a0:82:7c:61:1f:d9:7e:1b:64:d8:b1:
ab:b7:e2:91:44:c3:c3:55:fa:ed:e0:14:0c:4b:f7:ff:96:a1:
e2:29:18:4b:6e:1a:d5:bf:f3:4e:b3:aa:24:ef:b4:4f:79:5f:
b1:26:77:62:91:cf:53:3a:2f:55:71:22:41:b3:4e:3b:0b:35:
79:2c:ed:92:24:7a:9e:34:a0:f7:7b:63:ee:b4:0a:9a:7a:8b:
e5:86:35:d4:8d:cd:5b:2b:ae:b8:cb:54:e4:12:74:4f:87:44:
f1:16:10:cd:7c:12:25:07:c0:67:bc:d1:e7:73:5c:c3:d1:ae:
03:f9:73:d6:31:16:46:2e:95:90:c6:5f:6c:73:c8:9a:22:6b:
2f:fd:c9:9b:8f:7a:80:c6:06:8f:35:24:57:51:43:59:5f:03:
73:93:f9:08:66:81:95:73:8e:c3:0b:29:10:4a:ec:77:64:bf:
6e:25:27:9a:0f:99:c2:a8:d6:3a:65:5e:e8:3d:91:2b:5e:e7:
7a:80:1e:b8:42:1d:14:c9:8f:bd:43:a9:84:a4:5c:5f:37:05:
12:b9:57:b4:42:c7:8d:fc:01:57:bc:4c:dc:6d:e7:4b:f7:06:
e3:45:cc:da:58:51:4c:29:e6:89:5c:12:c2:f2:2e:c1:cc:db:
83:cd:d6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:59 2026 by rpki-client