Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
File: O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json)
Hash identifier: 1DF47xGQeNF6ZgKxwntQ/HgDd1Jhd8tMtMUPSrxvtYc=
Subject key identifier: E8:AE:4D:80:E3:25:A4:14:DB:52:AB:B0:76:A6:8C:EB:1C:D0:5A:CB
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Certificate issuer: /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial: 019D390A40019787D5926CBFE957770F3B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
Manifest number: 08B9
Signing time: Sun 29 Mar 2026 10:01:05 +0000
Manifest this update: Sun 29 Mar 2026 10:01:05 +0000
Manifest next update: Mon 30 Mar 2026 10:01:05 +0000
Files and hashes: 1: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: 2nJ1BBCiLTslhCOXu0FY2fRNBsKvkDw07Q3p4nxVK5k=)
2: vt7DyLKUCf23QQLyZIR7DPMJBBk.roa (hash: 4cTJ4u2lPUjyZpzC/qN04ASg0UBqt7RnpnKm2l9uNP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:40:01:97:87:d5:92:6c:bf:e9:57:77:0f:3b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Validity
Not Before: Mar 29 10:01:05 2026 GMT
Not After : Mar 30 10:01:05 2026 GMT
Subject: CN=e8ae4d80e325a414db52abb076a68ceb1cd05acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:c0:c7:a5:6d:7f:5a:53:0f:41:7d:70:57:
a7:06:e1:4b:8f:1b:f2:35:1b:22:b4:6b:fa:b5:72:
62:b3:36:de:2f:e2:35:93:ed:15:06:69:3e:86:52:
ec:e2:ea:7a:3c:59:b2:37:76:4c:bb:8d:81:43:0a:
80:33:ff:6e:14:24:a4:0f:ea:32:48:23:39:8d:60:
a1:24:0b:7b:2c:ee:d2:9f:36:ba:9b:80:0f:51:e5:
63:f9:a8:b4:b6:57:19:3a:c6:73:fb:ad:9b:bf:a2:
73:82:99:d8:e0:3a:15:7f:61:3f:4e:fb:14:21:9d:
a2:0d:fe:c6:ab:e1:67:a2:2c:1e:aa:9d:88:2a:9c:
97:e4:89:e4:73:e7:c8:66:66:5f:47:0e:42:74:50:
fb:27:7b:ce:ac:8a:ca:24:3d:27:cb:69:f0:e2:d1:
7e:9d:6e:43:85:fa:b1:ae:a6:31:77:cc:bb:67:3c:
03:04:8d:c1:5d:13:c3:50:32:69:a7:96:d2:cd:eb:
dd:ae:4a:53:e8:bb:9c:ae:4f:85:02:e8:4a:a4:93:
85:b6:9e:bd:1a:f8:43:01:7b:4f:d3:db:d5:1a:ce:
19:1d:f8:3e:34:58:da:cd:14:39:f0:29:6d:ce:c7:
de:b6:29:7e:a0:5f:6e:e7:a3:a3:06:da:42:e8:3e:
bf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AE:4D:80:E3:25:A4:14:DB:52:AB:B0:76:A6:8C:EB:1C:D0:5A:CB
X509v3 Authority Key Identifier:
keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:df:9f:9c:7d:7f:57:f1:10:7a:9b:6e:69:63:46:d9:21:
92:10:b7:f6:2b:e7:ce:6d:1e:44:ff:b1:55:e2:b2:26:97:7f:
bb:4d:7d:38:67:48:17:c3:6e:db:3c:1b:b4:e6:24:94:20:72:
36:94:10:bd:1d:6c:72:55:07:ee:df:fe:d7:c2:40:77:d6:8d:
a5:83:f7:cf:12:2a:cc:d2:ac:f0:8b:52:08:9d:3c:70:38:c7:
34:a5:6a:38:77:d1:68:94:81:10:07:43:34:ac:92:58:56:75:
02:68:a7:bb:df:1c:7b:e5:96:a5:c2:a6:1a:30:7f:0a:b3:d0:
be:48:74:03:77:90:d8:98:88:7d:d5:da:cf:e2:34:a3:d5:1f:
00:81:94:db:52:98:74:2e:a4:56:f2:74:45:15:bc:21:d3:23:
cf:99:5e:fa:9b:61:1b:b8:2b:67:60:ca:8e:65:bb:02:00:56:
49:1e:8f:fe:31:a2:12:b5:86:24:72:eb:e6:b5:35:a1:3e:69:
e7:b7:b8:8e:ab:58:bd:be:66:73:f0:2e:58:32:17:34:a0:a7:
b3:39:68:b3:a4:c6:f3:e0:4a:0c:c6:e8:18:6a:6b:4c:e4:ef:
78:3d:02:79:d7:f1:03:3e:85:f7:4c:e9:38:16:22:4c:f8:d3:
3d:fb:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:21 2026 by rpki-client