Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: wVMzuitMQmvFMIhnK7aiPkgkKeF0f/8kuhPhXR96em0=
Subject key identifier: 70:32:99:89:8A:62:E6:5A:D2:66:57:76:EA:A1:C8:DC:D3:C7:52:A2
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 019D39AE9A0438C3BCB8CA1ACAEBE696CBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 1112
Signing time: Sun 29 Mar 2026 13:00:37 +0000
Manifest this update: Sun 29 Mar 2026 13:00:37 +0000
Manifest next update: Mon 30 Mar 2026 13:00:37 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: eiaPJm6c8QYSH8JXnVgLBxF6uUZcucpVF9rlVN35CPw=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:9a:04:38:c3:bc:b8:ca:1a:ca:eb:e6:96:cb:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Mar 29 13:00:37 2026 GMT
Not After : Mar 30 13:00:37 2026 GMT
Subject: CN=703299898a62e65ad2665776eaa1c8dcd3c752a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:ab:8d:85:05:23:3d:88:b0:d9:74:46:69:
99:b7:85:74:52:a5:0b:45:b7:64:a8:7e:75:8d:ce:
6c:fd:9d:9e:3b:4d:9d:dd:d6:de:b0:84:40:0c:b5:
d9:14:a5:00:34:22:0d:5b:6b:c3:32:fe:39:25:6d:
04:bd:35:d7:58:06:8b:e8:e3:ab:c5:1b:ee:3c:95:
30:86:9f:eb:2c:10:4a:dd:39:05:7c:b2:9e:b5:31:
5a:87:02:7b:ee:28:0c:c0:b2:33:20:01:1b:76:14:
bb:56:f3:6a:d5:1a:13:fb:4c:29:4d:44:b6:93:06:
99:83:47:ec:b0:6a:e3:bc:0a:c0:16:a7:ca:78:1f:
ba:6d:df:f1:bb:18:f0:b2:a8:d8:03:be:e9:4a:a6:
96:27:99:c8:d9:b4:1f:50:dd:6b:53:ca:fb:44:2c:
6d:ae:e4:4d:85:a5:f9:41:00:a4:d8:60:03:d0:b8:
43:5f:53:70:eb:e5:c8:c2:fe:26:ca:8c:e5:c7:dc:
47:01:c5:3a:89:2e:eb:45:1a:2e:43:71:a5:9b:5b:
07:af:a6:2f:74:14:e2:b6:02:45:30:c7:3e:46:0b:
de:b8:3b:4c:42:69:3e:9d:8f:66:57:47:0e:14:0e:
34:b4:22:71:29:00:9a:9f:81:32:ec:ab:82:cf:38:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:99:89:8A:62:E6:5A:D2:66:57:76:EA:A1:C8:DC:D3:C7:52:A2
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:87:af:99:ec:3f:29:74:ee:32:2a:50:31:30:9f:1e:dd:b1:
cf:09:26:ed:ec:77:07:36:04:24:47:dd:c4:ff:5b:4e:f4:6c:
ad:53:b8:8a:51:98:7c:0d:8c:9d:f4:24:c4:39:b6:09:e9:a3:
45:a5:01:5c:60:18:84:f7:eb:20:b2:11:4a:c9:6d:fe:33:0f:
23:6f:23:98:87:4c:c1:ea:ea:5c:25:09:a5:35:50:a4:01:9b:
36:4a:6f:bd:1e:c6:61:a9:a3:53:00:a7:be:46:b1:55:fd:45:
dc:44:ee:cf:1a:5c:d1:59:3d:6c:a8:01:bd:c6:9c:a0:c5:18:
95:2d:aa:d3:98:d0:a7:70:9a:eb:b8:f0:e8:63:64:87:88:70:
c7:6e:62:e4:96:df:42:72:93:7b:2d:67:c3:6b:d0:2e:3e:9a:
42:86:7d:a1:33:3c:f2:a0:f5:b8:b8:4b:9c:e0:4f:4e:57:3b:
c4:a4:5e:0c:77:56:9e:e8:d3:a5:d9:b9:c6:f4:49:c1:65:51:
df:75:bd:39:82:d2:44:4b:c2:54:34:75:5b:2c:7c:1e:e4:a8:
25:cf:d0:3f:b1:88:c1:4a:ef:ce:2e:49:62:6e:be:dd:54:84:
be:9b:96:ee:82:99:86:a2:c8:ad:13:5f:5e:48:be:1a:92:d7:
3f:92:74:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:39 2026 by rpki-client