Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: lb1GOjiq+Cf7X87ZIzMBQKQS4uLjX4EMScaECIaz3SA=
Subject key identifier: 7C:5B:28:48:69:6A:BD:A2:C4:04:24:20:EF:5C:6E:2A:58:E7:C8:4C
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 019D3752DB7A9162E6B030233FAAC3A491F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 0754
Signing time: Sun 29 Mar 2026 02:01:09 +0000
Manifest this update: Sun 29 Mar 2026 02:01:09 +0000
Manifest next update: Mon 30 Mar 2026 02:01:09 +0000
Files and hashes: 1: IK0e8QDmHj3hNcr3qlL6Dq22OBU.roa (hash: rjt1GPioTzLz/WmxHMW/A6JbnHN5M/Apy60NB3OPgNY=)
2: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: PHGNs/ZrFKW6Axnuan27pK1v3JLplIvqcZhAjA5EHIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:db:7a:91:62:e6:b0:30:23:3f:aa:c3:a4:91:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Mar 29 02:01:09 2026 GMT
Not After : Mar 30 02:01:09 2026 GMT
Subject: CN=7c5b2848696abda2c4042420ef5c6e2a58e7c84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:75:66:f1:cf:1e:e2:22:5c:a2:fa:bd:45:9e:
d4:3e:f5:c7:71:7d:a1:ce:b0:9d:34:11:d6:1c:c5:
71:53:33:e0:fc:d6:d6:c2:b4:20:ba:70:2c:01:db:
f8:ff:fe:19:c1:e6:2f:08:75:62:e4:99:ba:b6:b0:
2f:45:0a:c9:c6:ab:47:59:e4:94:47:77:57:60:09:
2d:8f:e9:81:5a:55:6f:91:65:dc:48:07:1e:7b:87:
7b:72:8f:a6:ad:07:7a:5a:fc:7b:7b:f2:0b:8f:d6:
b8:23:23:94:fe:ef:fe:29:7e:2b:05:4b:91:d2:72:
6a:69:23:8c:c2:79:59:41:80:54:9f:6c:ec:e9:a4:
10:31:b7:71:d3:fa:9d:12:7e:f0:e5:95:61:07:7d:
cf:46:76:4f:e6:00:3e:dc:d3:6c:22:ff:c8:bb:e3:
14:92:ea:25:d1:f2:26:28:92:04:b6:43:ec:9b:24:
27:c9:a4:3b:50:df:a1:fe:03:8d:8b:19:6c:11:0e:
83:1f:60:6a:f8:b4:21:21:8d:12:19:dd:37:4b:d1:
f1:64:6d:94:71:c8:74:79:93:eb:64:0d:45:41:3d:
c7:f8:8e:47:c0:a3:62:96:4b:de:c4:b5:43:d1:1f:
c7:e5:b7:30:17:43:7b:09:fc:b2:ca:83:0c:38:6a:
78:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5B:28:48:69:6A:BD:A2:C4:04:24:20:EF:5C:6E:2A:58:E7:C8:4C
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ab:ae:75:48:2c:30:6f:6b:60:9f:45:9f:69:bc:c5:16:2e:
a9:35:28:30:3f:84:68:24:5e:ad:70:42:26:ad:67:21:66:be:
d8:61:4c:68:45:2a:e0:7d:28:fc:c7:c9:ad:cc:03:b0:f7:e3:
8f:e2:2b:7a:90:ec:23:70:4c:91:49:5e:7c:d9:f5:68:91:78:
2a:d6:bb:c6:7b:e3:71:81:23:2d:8a:ff:3a:a9:2f:ac:02:f9:
14:21:ee:9e:92:f8:d9:d7:3a:3f:3c:39:2c:7c:b0:34:90:83:
2a:b0:77:3b:67:b0:a6:c5:70:66:8c:0b:99:ef:24:ba:07:b3:
af:86:de:03:95:c6:b4:9e:0e:04:da:d6:f0:97:1d:c0:6b:0a:
3a:76:c0:90:56:a5:2d:d0:7f:9b:4b:49:01:d2:dd:5e:bf:48:
81:8a:09:c4:26:d5:0f:9e:9b:b0:b1:f3:33:fa:c3:26:12:fe:
09:4d:5e:30:ed:c7:b8:15:79:67:f3:ae:77:5b:9b:03:03:5a:
04:64:c3:77:30:39:60:6a:23:2b:36:68:c1:99:7e:2a:8e:13:
0c:da:7b:e8:39:62:e5:1d:8e:d6:b8:16:b6:a1:bc:1a:0f:0b:
94:2f:20:a8:86:49:45:d1:f5:97:cf:6b:3e:08:c1:e9:27:a8:
83:63:4f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:56 2026 by rpki-client