
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier: EYtPoouDZmXQzdX7l1FAulXeiblh6/7z17OzDhzr6r0=
Subject key identifier: 3B:D4:9C:EC:BC:D6:7B:9B:75:0C:A3:E9:58:CB:98:DD:3C:A2:2C:C2
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial: 01A088D566A919E101ECCCECF6F2DEC983C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number: 1A45
Signing time: Thu 10 Sep 2026 01:01:21 +0000
Manifest this update: Thu 10 Sep 2026 01:01:21 +0000
Manifest next update: Fri 11 Sep 2026 01:01:21 +0000
Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: C8Y5JtFRJ9wgyg6+K86zgEibjsSPcOjt594L7/VGKrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:66:a9:19:e1:01:ec:cc:ec:f6:f2:de:c9:83:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Validity
Not Before: Sep 10 01:01:21 2026 GMT
Not After : Sep 11 01:01:21 2026 GMT
Subject: CN=3bd49cecbcd67b9b750ca3e958cb98dd3ca22cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6e:e6:81:5a:52:be:ae:d3:b7:06:7c:3a:27:
19:d5:7d:4e:c1:5a:fb:11:68:5e:76:06:91:7e:71:
14:3a:4e:13:45:f8:6c:50:c4:80:b4:f8:88:c4:8b:
ce:5f:3a:d9:b1:c6:02:b6:48:a5:9e:80:35:08:01:
f4:7e:6f:b7:82:64:e3:6a:d0:d3:07:a1:66:5c:ca:
54:c8:20:8e:f0:74:62:62:15:0d:bf:ca:f7:e3:87:
66:7c:17:b9:03:c9:99:12:ac:74:c4:ee:4c:f6:3d:
a9:cb:22:d5:61:6e:2f:7d:02:ee:32:43:fd:88:4a:
87:1d:1b:13:66:c1:d6:9a:2f:c5:0b:47:7f:6e:c0:
41:df:59:18:c4:b8:ae:44:c8:74:fd:c4:69:b7:08:
30:1a:fe:af:13:a6:00:f4:dc:06:79:22:f0:06:17:
d1:1d:3b:31:3b:e1:8f:bb:4d:c5:a6:79:8e:56:57:
ae:2c:b5:ef:a0:25:12:ea:c3:59:15:bc:6a:04:f7:
db:10:25:82:58:a2:30:20:9d:9f:9b:ba:e9:16:8d:
e7:ec:64:aa:08:64:db:cf:66:74:e0:99:60:14:58:
35:d2:9d:c1:9e:e6:4f:f7:8b:d8:c2:b3:a4:11:c5:
34:89:ba:47:91:45:52:92:38:db:ff:6f:9e:0f:07:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:9C:EC:BC:D6:7B:9B:75:0C:A3:E9:58:CB:98:DD:3C:A2:2C:C2
X509v3 Authority Key Identifier:
keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cd:1c:39:a1:35:6d:c0:db:8e:8d:69:2a:d0:aa:0e:63:fd:
3b:08:54:6c:2e:ce:88:63:ab:0c:04:86:53:55:5f:60:6a:ef:
51:e9:7d:a8:84:e6:cd:87:46:e4:ff:c1:89:ef:1e:51:bc:50:
e4:6e:a7:35:dc:4e:68:f8:40:9b:b7:30:89:3b:cb:36:b9:e7:
6e:b6:69:3a:bf:23:66:6f:b0:9e:42:27:d7:9c:bc:3c:22:18:
75:04:5c:1f:47:db:1c:46:df:d2:84:d8:95:a4:0a:8c:11:d5:
7d:6a:61:0c:43:8d:bd:4d:fa:ce:0f:49:6a:0a:49:9f:62:ca:
7a:84:01:74:6b:b9:e5:94:ba:77:e7:9a:f0:21:b1:bb:af:52:
08:79:e1:ad:54:86:af:fb:8d:4c:a7:eb:4d:25:4e:7f:32:10:
20:0c:0a:e6:c6:65:c1:8f:9c:09:d9:12:6a:0a:b6:3b:75:95:
7c:cf:03:fb:a4:0a:86:c7:c1:88:10:e9:61:2c:57:41:55:cc:
bd:90:f6:f6:dd:48:68:fe:81:f0:4a:fa:3a:b3:f0:1b:7a:95:
36:e0:a4:e7:2b:37:d2:ae:69:db:6a:66:06:92:44:64:0a:23:
48:5a:07:f4:61:2a:c9:ab:88:81:bb:ae:1f:8b:82:44:bc:3b:
01:ed:3c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:44:42 2026 by rpki-client