Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
File: O3S5CBUT135Tof8iWzNAD7s5E1U.mft (raw, json)
Hash identifier: X2h56hUe+smAHceRDEGH2EM7uR250I3GeWTCkv0tTxo=
Subject key identifier: 23:34:68:FB:74:79:63:CE:05:ED:34:01:FA:F1:EF:B2:D0:A8:75:9C
Authority key identifier: 3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
Certificate issuer: /CN=3b74b9081513d77e53a1ff225b33400fbb391355
Certificate serial: 019FF07C6CC81D45ED57B80EEB1F02136DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
Manifest number: 4C
Signing time: Tue 11 Aug 2026 11:01:53 +0000
Manifest this update: Tue 11 Aug 2026 11:01:53 +0000
Manifest next update: Wed 12 Aug 2026 11:01:53 +0000
Files and hashes: 1: O3S5CBUT135Tof8iWzNAD7s5E1U.crl (hash: tYss0Cg5N5NR5b14UhcQ5oTz3Ogu8DgVJxHPTk/3eOw=)
2: TVGvt-GV-3EVfMvtoUH4tHH1zlI.asa (hash: V32WZ60pl0CbZiR2Xww+WSeiolXx8sZ4RQF4hMAGck8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:7c:6c:c8:1d:45:ed:57:b8:0e:eb:1f:02:13:6d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b74b9081513d77e53a1ff225b33400fbb391355
Validity
Not Before: Aug 11 11:01:53 2026 GMT
Not After : Aug 12 11:01:53 2026 GMT
Subject: CN=233468fb747963ce05ed3401faf1efb2d0a8759c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:16:2f:f3:23:99:48:ed:af:90:a2:62:fe:ed:
d4:6c:77:af:77:d2:59:2a:98:61:58:e5:ea:21:2d:
51:34:1c:39:bd:63:a8:36:b8:4d:5d:14:3f:e5:e8:
ff:a4:f0:01:c1:e6:7f:8e:f0:83:f8:4e:d9:f7:45:
13:c6:b4:53:ad:fd:f2:6a:45:9e:3d:1f:08:78:e4:
3e:0d:31:bc:44:45:b0:3e:15:d7:9b:64:7f:ea:f0:
c6:4a:cc:e2:26:86:3a:3b:e0:f3:75:4f:c3:93:94:
69:87:26:8f:86:a2:38:12:03:73:18:f2:80:17:0e:
20:73:5e:01:78:5e:2a:cf:d5:9e:ce:44:26:10:3d:
de:ad:cb:c3:1b:3a:fe:18:a0:06:47:e0:99:4e:f0:
74:a7:ab:9a:f1:66:04:4f:7b:25:83:00:33:8f:f1:
72:c8:c8:3b:66:17:71:18:d2:30:88:63:ec:92:4e:
68:95:a5:ec:2f:01:cb:29:6a:6c:bc:ee:4f:f9:0b:
86:72:f0:a0:8c:f1:3f:38:94:cf:cf:fa:6a:8d:88:
8d:33:f3:c6:99:41:f7:d8:88:e3:05:56:9d:1f:b9:
2c:e8:14:16:ca:03:93:22:09:82:2f:21:d2:63:76:
e7:df:01:a4:72:73:69:bb:45:08:a5:a2:c6:02:8b:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:34:68:FB:74:79:63:CE:05:ED:34:01:FA:F1:EF:B2:D0:A8:75:9C
X509v3 Authority Key Identifier:
keyid:3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:0b:4e:da:02:92:5e:41:e1:67:34:a0:4f:4b:26:d4:fe:23:
08:a5:28:42:17:eb:68:d8:6b:e3:89:7b:23:28:42:c9:27:1c:
fa:27:1b:8f:fc:e9:10:19:27:74:74:b8:be:0e:25:6d:c6:1c:
60:7a:88:88:f8:e5:ae:87:f8:fb:17:a6:61:55:e1:bd:a0:77:
5a:b2:72:32:0e:03:d8:dd:62:32:4d:57:0f:64:bf:f8:d7:82:
f2:8e:b1:d4:d6:75:0e:a4:09:77:19:19:bb:04:26:2b:62:77:
19:19:ff:9d:2c:cb:2b:ae:62:bd:d0:da:97:11:2d:de:1d:49:
d5:ce:8c:60:05:8b:30:7f:99:9e:49:f8:2e:97:3f:b6:57:c4:
22:32:0e:65:b9:4f:55:76:21:55:b2:d8:ca:ed:15:cc:d8:a9:
5f:a8:c4:e3:35:15:2b:69:3d:c8:31:bb:d7:ad:85:60:25:83:
7e:89:c0:71:d2:5e:f2:29:33:3c:12:0f:2c:75:f0:f6:b3:87:
0f:d3:23:0a:eb:3a:ed:5a:d6:4a:5f:1a:99:36:36:f9:23:46:
42:4b:08:cd:9d:45:cd:68:74:69:80:9e:2a:2a:53:6a:6b:de:
9b:3f:37:de:c3:3e:32:12:91:71:06:74:5b:92:5b:0a:cb:31:
d9:22:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 12:58:45 2026 by rpki-client