Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: m7kMnZzRytgXoODvnVgdOm3O7rrcG3hSwsHOO6C14PI=
Subject key identifier: 31:E2:8B:97:5C:FF:13:F6:03:5A:DB:27:35:31:89:00:62:06:B8:02
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 019D3909C83ECF2524302C6D1428C7CA5370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 152B
Signing time: Sun 29 Mar 2026 10:00:35 +0000
Manifest this update: Sun 29 Mar 2026 10:00:35 +0000
Manifest next update: Mon 30 Mar 2026 10:00:35 +0000
Files and hashes: 1: CFiA9ts48FJD7FxMXnq2yBPpxUo.roa (hash: 0N4k8Pu9Li9wdDzVVf7qsFKX5AusWq9aMPBrYyncX/Y=)
2: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: XD0/8J45WTlvuB2qOCS2xL4euRsRoZehMSQ48eKEzJM=)
3: sr8WeIRMBJ4bRfuf-lp3-tgD570.roa (hash: TnOmb2gICaHIuyc6o/5CaEP4UWNo++HGY655v8j+/yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c8:3e:cf:25:24:30:2c:6d:14:28:c7:ca:53:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Mar 29 10:00:35 2026 GMT
Not After : Mar 30 10:00:35 2026 GMT
Subject: CN=31e28b975cff13f6035adb27353189006206b802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:fd:54:34:99:34:f7:0b:ae:3f:88:c4:8e:
ac:e6:d7:27:56:9a:33:ce:9e:5c:08:ad:82:77:69:
94:2f:ba:18:37:5a:00:ec:3f:bb:61:a6:2c:11:ba:
26:96:e8:51:b7:54:35:87:27:04:b7:ce:ca:ef:75:
96:a8:7a:af:fd:9d:f5:ae:6d:5b:17:ba:fb:a1:68:
78:f2:b8:8e:3a:85:d4:f2:32:bb:1e:d0:ba:26:6f:
21:02:a1:6f:5e:25:c1:64:17:b5:03:31:77:1e:50:
89:ce:36:bd:76:33:03:26:97:ee:d0:79:a6:45:17:
ea:30:81:00:c1:9a:0b:7c:aa:ba:b4:cd:44:2c:08:
a4:9f:92:a4:81:0a:c7:79:bc:c1:ce:b2:d4:33:e3:
9c:9e:56:db:68:0d:29:12:f6:d0:f0:ae:ea:f7:5c:
05:24:dd:9b:1d:0d:56:8d:a4:dc:e5:8d:94:69:d9:
fd:12:cd:6f:d9:b6:6d:2f:fb:0b:10:ea:da:4e:2f:
21:c2:4f:b5:a4:3f:18:3d:df:6a:d4:3a:08:05:a6:
66:f2:cb:9b:7b:a7:41:ec:76:9b:47:93:b4:3b:8c:
d6:12:0e:85:72:56:37:97:b5:f3:cd:a3:81:41:a2:
cd:07:21:7a:be:b5:37:71:6e:71:68:40:b1:3d:ae:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:8B:97:5C:FF:13:F6:03:5A:DB:27:35:31:89:00:62:06:B8:02
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e2:f3:0b:75:0a:8c:c7:9b:cf:51:ff:e7:87:9e:92:23:ca:
b2:cc:38:a6:91:e6:23:c1:c6:31:ef:a0:70:e2:06:63:59:d8:
43:ee:91:74:81:10:85:fd:74:99:7d:e3:6c:c6:a6:74:bc:f3:
ed:96:dc:6c:9e:6e:86:dd:19:50:a7:37:4b:a2:0f:2e:2a:df:
c9:d3:46:25:37:8c:ad:2c:c9:2f:8a:a0:50:3c:8d:a6:3f:a6:
eb:fc:eb:30:5c:f7:8b:74:e8:1e:94:b1:59:6c:28:53:9b:9f:
9e:c0:e4:b2:52:1f:f6:30:48:80:28:8c:2c:c6:10:df:62:3f:
64:7b:2f:ff:b6:54:ab:27:d6:28:97:df:5f:4f:5a:73:cb:b9:
5e:3a:f3:bb:23:83:ba:c4:ce:31:50:6c:48:4b:d4:f2:4d:26:
3c:16:5f:da:ea:a3:36:ed:03:21:33:ab:29:1c:d8:bf:2f:ea:
65:7f:ac:46:16:9d:3d:26:a4:19:1d:6d:7f:66:8e:fc:dd:cb:
22:7a:71:65:56:f5:3d:94:8c:6f:17:13:4a:dc:06:de:b3:13:
fd:8f:21:9f:a8:0f:f0:ec:d6:84:17:ca:de:68:85:6d:22:e3:
36:87:85:d4:49:3c:fb:b5:6f:6f:90:08:8d:1b:85:5d:63:b4:
7d:bc:db:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:41 2026 by rpki-client