Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
File: O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json)
Hash identifier: ThZIID5xnSDqTy1xlWfISWId+SZ18jNpIN2qUX15va4=
Subject key identifier: 52:A0:79:86:A1:8E:C0:F2:55:DB:3E:F7:2D:B5:D5:2E:8C:E6:4D:31
Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Certificate serial: 019DEDEE3FFBD18B326A5B8D0F8CB10F20A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
Manifest number: 0588
Signing time: Sun 03 May 2026 13:01:47 +0000
Manifest this update: Sun 03 May 2026 13:01:47 +0000
Manifest next update: Mon 04 May 2026 13:01:47 +0000
Files and hashes: 1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: bZS8HxDiZMK7KeofsWR4dPkhuT4++se1OH5SST5vctM=)
2: VbL2QWZ9Kg8L1pE36SvfZYyr8Ts.roa (hash: sfB+nZS7Puz64duDQmVXVvH/Ydql31OyVDJAMGHxmwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:ee:3f:fb:d1:8b:32:6a:5b:8d:0f:8c:b1:0f:20:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Validity
Not Before: May 3 13:01:47 2026 GMT
Not After : May 4 13:01:47 2026 GMT
Subject: CN=52a07986a18ec0f255db3ef72db5d52e8ce64d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:fe:10:b3:f5:94:f0:0c:e6:1f:5d:26:11:
96:1f:53:c3:3d:26:71:4e:94:7b:2a:72:ac:56:e4:
43:c0:7b:69:43:e7:49:a3:70:0b:7b:d2:f1:de:14:
a7:d8:78:86:6d:01:37:4a:d5:3b:0b:11:c2:80:32:
08:88:5a:c6:84:57:77:6d:0e:a6:c1:32:20:68:1a:
85:b1:08:a5:5b:a1:54:9d:89:da:bb:56:61:f1:c1:
c3:82:c0:9b:78:e6:fb:97:98:50:04:fa:8a:8e:04:
38:e8:a7:7b:90:05:8a:b6:cd:26:4b:69:c4:e4:58:
b1:de:f8:b2:78:fe:2f:c6:bc:f8:4d:fd:8e:41:8f:
a0:bd:18:d0:d2:7e:7d:45:f0:e7:b9:b4:3f:29:78:
94:2b:e7:5f:da:6a:32:bf:dc:02:ce:d1:16:9b:dc:
17:5d:50:94:fa:fe:f1:07:8b:31:d3:29:a9:79:b8:
6d:1a:46:38:3b:6b:75:17:fa:c1:55:1f:81:66:e2:
1f:c4:6b:0e:84:8f:5d:16:bd:4b:1c:c1:fc:85:74:
92:71:72:56:d0:47:fe:ef:41:c4:b9:f1:f1:5d:a9:
78:17:b9:b1:9f:e8:ca:c9:fd:e3:6f:48:de:75:6d:
ae:b2:cc:fa:50:df:51:f6:b7:50:16:fa:7e:94:b3:
e3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A0:79:86:A1:8E:C0:F2:55:DB:3E:F7:2D:B5:D5:2E:8C:E6:4D:31
X509v3 Authority Key Identifier:
keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1f:b9:94:72:af:8e:43:4d:a3:78:1c:d5:11:83:27:71:41:
fc:b6:a9:41:73:aa:5c:89:f8:da:e0:85:41:0d:d3:4b:0b:84:
cf:33:e9:bd:96:fb:cb:44:ee:b5:2f:f5:30:8d:e7:28:e8:64:
9d:65:56:6f:43:77:70:6e:44:8d:c5:37:2c:aa:5a:6e:23:5d:
a9:45:27:f1:4c:e8:a3:ee:73:b3:b0:13:89:d1:f9:77:d2:f3:
22:3e:68:b7:a3:69:a5:18:4b:8c:7e:da:df:f8:2a:27:f4:48:
82:aa:63:83:13:3b:f5:15:de:01:09:24:e6:53:51:11:85:cf:
66:09:5b:38:b8:b7:42:62:81:d4:bd:5b:76:38:57:eb:15:c0:
ae:65:59:17:32:87:c1:e5:a9:21:57:7e:de:bc:19:09:07:12:
62:22:f8:0b:36:1f:19:06:08:6e:ae:e7:3f:25:79:60:e5:66:
97:d5:ab:82:f4:e3:ad:1e:10:11:9a:35:79:67:a4:a4:a4:96:
35:3c:87:0a:4c:03:97:f8:30:10:af:3c:f1:00:b8:3e:a6:69:
52:7e:cb:f3:ed:48:ad:51:c8:ec:63:1d:f6:8d:72:7d:85:d8:
43:65:1b:b6:dc:6a:d9:7a:ab:b0:03:16:d4:d3:33:7d:a5:33:
c1:66:cc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 20:59:23 2026 by rpki-client