Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier: vcT8CrCdiG7Lmth3Zbj/tUrQKX18HJaA/kyBdkHJ+cQ=
Subject key identifier: 06:40:89:3B:C3:33:7C:F5:9A:54:A6:74:41:3B:A7:E1:F1:29:96:9C
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 019CE22225C89EB93FD292C7A7DEE0E8CBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number: 1863
Signing time: Thu 12 Mar 2026 13:00:14 +0000
Manifest this update: Thu 12 Mar 2026 13:00:14 +0000
Manifest next update: Fri 13 Mar 2026 13:00:14 +0000
Files and hashes: 1: Dr3WDUpz6-xPqX9Onpmd9dBVP5Q.roa (hash: K0SdFptEazmOT46XEGng/FuWvVaWyGlgcNjhMXNpZ4c=)
2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: 40ka1Dpv272RgaYGceW4nF63ZgjAlGLClszCXDWpjGw=)
3: pMHI94DTtKKz8gzxhVKkHUjKag0.roa (hash: pFTxumvDB0SF9JNJ3IzVUzE5KL+TMh7qeatEKMQOnlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:25:c8:9e:b9:3f:d2:92:c7:a7:de:e0:e8:cb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Mar 12 13:00:14 2026 GMT
Not After : Mar 13 13:00:14 2026 GMT
Subject: CN=0640893bc3337cf59a54a674413ba7e1f129969c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:e5:81:57:a9:75:92:7c:2f:20:82:db:92:
fe:78:23:e2:d5:21:69:42:e5:32:e0:cb:94:8f:15:
5a:67:9d:d5:ff:ab:bd:93:c8:bb:64:7d:59:0e:03:
64:12:9f:71:60:6d:2f:1a:52:4f:f5:45:04:81:64:
19:b0:d9:3f:63:7e:09:b6:94:60:8c:27:a3:c1:42:
49:d5:72:8d:dc:44:64:8b:b3:d1:9c:c3:07:40:91:
08:96:5e:c9:23:96:ca:3e:b3:b4:63:fb:ce:57:b4:
d7:5b:1a:a5:51:8a:11:e4:14:b5:3f:70:28:f7:a3:
22:08:6d:e2:da:c2:e8:4a:a5:3e:c8:7a:b1:c6:97:
ed:c1:ab:8c:1f:06:d3:31:fe:20:b4:ef:ec:7a:0f:
aa:6b:3d:a6:48:72:33:22:2d:52:d2:5a:f0:47:4a:
99:33:7c:d5:9d:db:0f:77:b1:b0:16:cb:8c:06:99:
b4:e2:86:dd:3f:db:02:9b:f3:6a:a8:20:d5:2a:69:
31:93:5c:b1:ff:a8:e8:02:09:10:9f:1d:60:b4:46:
36:e0:d4:ab:0a:f9:cc:72:21:d1:6f:8b:30:42:57:
df:42:64:43:f1:1f:a0:a6:98:e9:b7:3b:41:1f:ad:
40:60:e3:71:32:75:4b:1e:3c:58:f8:e3:8b:e4:13:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:89:3B:C3:33:7C:F5:9A:54:A6:74:41:3B:A7:E1:F1:29:96:9C
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3d:db:bf:ff:8e:73:d0:29:49:0d:43:fe:5c:e5:08:e0:3c:
d9:f4:c6:cd:53:c5:8e:67:09:4d:69:8b:13:f8:2c:4c:1d:c3:
e5:a9:2d:82:d6:5f:ef:64:9a:e5:fe:c2:bb:5d:fe:1e:39:7e:
28:ee:36:c8:d8:27:27:c8:98:86:a5:ad:f4:26:80:fe:dd:50:
66:1f:d8:74:d0:d1:32:eb:85:70:2c:fa:d0:d6:cd:39:76:83:
9e:bd:69:5f:80:54:74:89:e7:a8:ea:64:4f:8b:96:19:e8:77:
50:83:cc:2a:68:d1:a3:dd:99:ef:4a:36:24:9e:46:8c:6c:f8:
2b:36:41:3c:29:99:a7:43:4a:50:64:08:d1:c4:7b:2a:81:3e:
b9:e6:e6:56:1c:60:ec:4d:0a:31:76:d3:bd:4e:ee:80:d5:f7:
b1:4b:e8:11:83:28:26:d3:74:ff:95:ed:cc:1e:4b:6d:f3:ca:
f9:68:7f:b8:95:b1:2f:cb:0f:0f:6e:36:20:6d:71:81:37:64:
28:6f:3c:07:32:52:6f:a5:1f:87:17:3e:d1:0c:b2:08:d2:fb:
eb:e3:b9:a3:97:a9:70:b3:64:0c:7a:c0:63:7c:fb:48:31:19:
59:d7:3b:84:11:18:dd:f1:e4:7f:30:28:dd:9c:c6:d2:dd:08:
33:99:64:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:56:22 2026 by rpki-client