Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: Qf9msZ0+UKItq4biwEuQFDxtwAGtmiNwcq4U2XIfDKQ=
Subject key identifier: D0:5E:E8:19:55:6D:7A:BF:6D:9A:66:FE:E1:33:FE:20:9F:1B:2F:0A
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 019D378969850AC3391A3C43D9E5C2790B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 15DE
Signing time: Sun 29 Mar 2026 03:00:45 +0000
Manifest this update: Sun 29 Mar 2026 03:00:45 +0000
Manifest next update: Mon 30 Mar 2026 03:00:45 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: fstv9NJnKC4lxoAUQWNWSkrW0RRdZpuGQs7s7y45X3c=)
2: Q3KsXzG_1owp4twp3h32beoBh9Q.roa (hash: 95YPdhWrEz7hBrK+p1i4JTgHUiXN7Vq6G7x0WIDZtrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:69:85:0a:c3:39:1a:3c:43:d9:e5:c2:79:0b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Mar 29 03:00:45 2026 GMT
Not After : Mar 30 03:00:45 2026 GMT
Subject: CN=d05ee819556d7abf6d9a66fee133fe209f1b2f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:59:f6:b1:06:01:33:6e:da:13:2d:4c:05:
a8:e1:61:25:7c:7a:87:26:92:97:35:96:93:f7:04:
51:d8:13:c4:f8:39:e7:a9:f3:7f:21:2a:ee:7b:a8:
d6:f4:b9:6a:d5:e4:b5:04:97:93:8b:28:f1:71:a6:
21:5d:e6:68:a6:fa:64:ef:dc:df:69:54:15:78:e9:
75:e9:b8:11:18:1d:a5:57:e5:e3:a3:81:91:f1:e9:
65:7e:ff:72:3b:2c:eb:88:dc:83:67:c8:39:a4:f8:
e4:d4:36:43:e3:09:ac:ab:7f:9a:ef:3e:d4:bc:26:
55:44:eb:14:b9:62:cc:a4:e7:ec:a8:33:6e:53:f8:
7a:00:f9:ac:23:15:3f:91:04:2c:13:6d:f5:9b:0d:
32:bb:a1:1a:ee:8c:9e:82:cc:f9:42:58:a0:f2:1d:
8b:9f:84:b1:70:15:be:77:48:23:11:bd:f2:a3:b7:
ca:a0:fd:36:10:2c:fb:d7:46:2f:76:80:3b:7e:33:
50:3f:87:e0:6b:64:f1:2d:cc:e1:de:7b:7e:40:f7:
c4:7b:9e:ed:fa:b9:be:50:71:48:75:94:5a:c4:88:
a9:58:cf:7e:b2:5f:f6:ab:12:85:6f:98:98:4c:e8:
fb:6d:c3:3f:0f:47:4f:e1:9c:e0:ed:93:20:55:d9:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:E8:19:55:6D:7A:BF:6D:9A:66:FE:E1:33:FE:20:9F:1B:2F:0A
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:62:77:aa:80:71:ec:68:27:70:67:96:97:0f:d7:db:4e:41:
d3:ca:b2:58:13:4d:a8:49:fe:36:81:c9:e2:46:87:68:af:f6:
de:c1:3c:64:9d:b5:6c:03:ed:81:cb:30:4e:cb:c5:41:8e:b9:
d3:f6:46:ec:dc:b5:98:b0:7a:04:cc:0d:e1:18:df:aa:68:4a:
b4:a2:4f:ad:1d:18:ea:2b:d2:fa:0c:46:67:95:f0:65:98:36:
df:3e:ad:a6:91:e6:19:7c:0f:83:27:e5:7d:d8:15:f6:3b:dd:
1a:91:0f:f7:26:63:f2:ee:be:49:51:73:fa:eb:da:b4:97:ca:
30:8f:63:e3:e4:6e:c3:ab:e5:61:22:b1:74:2c:f8:e4:2b:16:
ee:19:ad:36:84:4c:d8:2b:d0:e3:5f:b1:43:e5:37:09:60:5d:
b5:9d:f1:06:43:9b:44:31:ab:17:64:c3:ed:e5:f8:ae:af:3c:
ad:db:7a:53:3f:99:95:e6:46:5c:7b:1f:90:55:d5:a7:94:aa:
04:66:42:a5:a1:04:a8:3d:5b:93:69:7d:70:cf:2b:10:b2:69:
33:65:8b:1a:d8:6b:46:23:64:63:be:5e:49:39:ae:fd:24:19:
8d:ff:44:82:b9:20:43:51:1e:a5:2c:da:34:03:d3:ea:1e:d3:
22:8d:e1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:14 2026 by rpki-client