Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
File: r-o5b03jVdqNwHmh6IXgwzdezjI.mft (raw, json)
Hash identifier: hhEfrfLBYNFxOUCzmeel0cXDryL4YCDesuxkDa1ZWkA=
Subject key identifier: 3D:6C:52:87:3B:7D:1F:77:0D:A5:BD:62:73:89:06:18:79:90:95:72
Authority key identifier: AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
Certificate issuer: /CN=afea396f4de355da8dc079a1e885e0c3375ece32
Certificate serial: 019D3977A6F9BF6C4E0AFF7F61E22E41AF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 12:00:35 +0000
Manifest this update: Sun 29 Mar 2026 12:00:35 +0000
Manifest next update: Mon 30 Mar 2026 12:00:35 +0000
Files and hashes: 1: r-o5b03jVdqNwHmh6IXgwzdezjI.crl (hash: mG7AS8YThtPb3QEO1kElfgrf2ZtAImCtE3sNn7p9qRI=)
2: z5rFxgnCnaPJH1a7LD5FL2zaGs8.roa (hash: GmD2v7t0pIsrh27JBf/zFN4lRzjdZKNMPUUOE0IIN3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:a6:f9:bf:6c:4e:0a:ff:7f:61:e2:2e:41:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afea396f4de355da8dc079a1e885e0c3375ece32
Validity
Not Before: Mar 29 12:00:35 2026 GMT
Not After : Mar 30 12:00:35 2026 GMT
Subject: CN=3d6c52873b7d1f770da5bd627389061879909572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e6:9e:98:07:14:19:7e:8a:b1:07:ef:ea:d9:
af:26:ad:e9:5f:06:ef:ae:09:15:ae:5b:ae:61:9f:
9d:02:c7:87:61:2b:39:24:29:8e:ec:7e:16:25:e3:
85:53:a0:82:45:92:d9:80:d2:c7:6f:8d:5b:4d:4d:
84:ee:4e:ef:f2:f4:f8:ae:13:c7:17:1c:ed:f1:a8:
14:e8:f6:a3:cb:f4:9c:46:4e:15:f5:c1:3c:79:a1:
c7:74:ec:00:fb:71:82:0c:dc:f3:5f:af:11:ad:d6:
c5:ca:7b:db:7b:d7:d1:ad:5e:03:ac:50:42:2d:0e:
f9:9d:8f:3a:1c:29:df:bc:8f:79:5a:6d:bc:c1:48:
c3:db:23:89:72:97:11:99:a6:db:f7:19:fe:aa:b4:
16:07:52:31:d6:fd:d1:f2:f7:0e:4b:5d:d7:e4:bc:
3b:36:81:9f:a3:06:d4:ad:eb:88:6e:bf:5d:d9:e6:
30:4f:b8:9a:65:d0:46:5e:a9:b6:d3:75:a8:87:ed:
0c:c1:a7:19:4f:83:f8:7c:b4:d6:df:97:91:df:bb:
47:4c:3a:d5:90:f8:3d:d1:90:d4:2d:6d:0b:88:8d:
9f:7a:ff:ea:41:f4:93:91:ab:4f:c6:41:4b:d2:5e:
3a:cc:44:3c:8b:a1:35:4d:5e:55:84:4c:00:c1:40:
36:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6C:52:87:3B:7D:1F:77:0D:A5:BD:62:73:89:06:18:79:90:95:72
X509v3 Authority Key Identifier:
keyid:AF:EA:39:6F:4D:E3:55:DA:8D:C0:79:A1:E8:85:E0:C3:37:5E:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-o5b03jVdqNwHmh6IXgwzdezjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8e3f7b-c78f-4663-bf1d-f5dbdf722f5d/1/r-o5b03jVdqNwHmh6IXgwzdezjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:98:85:43:2d:f1:21:2d:3a:4f:56:77:8f:33:b4:3b:dd:7c:
90:df:a5:e3:11:f4:d5:70:05:b3:8f:e2:a1:52:17:62:01:78:
49:e0:3e:d5:b2:69:b4:9f:82:63:5d:2a:9a:3a:d0:2b:be:64:
63:ed:99:96:8f:a1:6a:e5:f5:32:4e:5b:14:8f:eb:6f:89:52:
47:37:7e:d7:a6:26:5a:d4:cb:74:4c:99:e1:32:13:87:4f:69:
6d:2b:de:10:0a:e1:7b:89:62:b9:ed:ea:3b:90:02:b3:84:24:
1a:23:61:2f:93:39:16:a5:c8:5b:08:ef:d8:24:71:b9:37:02:
5d:59:2f:f4:6b:f0:66:ac:6a:e5:8c:aa:31:a3:fe:01:6a:44:
1e:53:f2:59:ea:65:4c:00:c8:84:a2:66:70:43:df:1e:81:04:
a5:ff:71:38:c3:f0:ed:bb:1a:55:b5:31:3d:4c:8a:8a:66:55:
fa:fa:c7:0e:39:ab:f4:a9:bc:a8:95:76:49:8b:9b:aa:b9:be:
62:b0:f6:34:89:f5:fd:a3:a0:d9:6d:56:49:ae:16:a0:34:8c:
aa:3e:50:82:01:32:3e:c6:3a:68:57:fb:e5:6f:04:85:bf:5e:
9f:d3:20:ac:46:88:f4:07:58:8b:cd:18:e8:bb:fc:e2:c5:80:
77:ea:34:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:25 2026 by rpki-client