Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier: hECB7JhJfHeolgAznfsE9JSM0PAPVgTX1A4t8dZaFqk=
Subject key identifier: 23:95:41:74:2A:18:01:14:99:81:E6:69:EA:3B:27:10:D4:E3:94:18
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial: 019D3909CD3B2AC06FF57B4F7AA1C71AF709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: vr9n5wNnJpHtcwRHZP/8g41DH1GK7q2M6z8bG4ZVNAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cd:3b:2a:c0:6f:f5:7b:4f:7a:a1:c7:1a:f7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=239541742a1801149981e669ea3b2710d4e39418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:1b:97:cb:72:98:29:b1:3a:0a:95:0b:79:
29:5e:16:d5:75:00:ad:53:f7:cf:c7:1a:15:a0:a4:
1e:39:35:62:3f:4d:e3:52:8b:0e:c9:2c:a3:93:84:
7a:4b:a4:3e:55:26:a0:25:d7:d3:d6:58:17:bf:61:
ed:62:7b:02:2c:cc:1c:be:92:51:91:74:cd:21:18:
7b:07:e9:5d:77:bc:4c:ef:73:92:c4:a5:c5:e6:69:
65:dc:82:f6:60:01:aa:44:ad:69:c7:7c:83:7c:69:
e2:c8:b9:9c:ba:37:01:e4:d8:4b:70:00:23:43:00:
a2:91:1e:da:26:d8:38:69:c7:73:08:5b:af:b5:7a:
53:29:94:aa:fe:f3:47:d7:2d:db:af:80:60:bc:c9:
53:4f:59:fe:d5:46:04:d6:25:8d:84:fc:69:f6:9c:
30:47:59:a8:ed:89:63:d8:0f:85:8b:0a:4f:f0:9d:
fb:e3:21:03:8f:cb:91:a6:2e:d1:70:6a:b4:7c:8b:
19:41:a1:d5:32:93:f5:4e:f2:6d:81:e8:0a:73:d8:
bb:80:51:a0:6c:cf:d9:59:be:b7:eb:4a:0f:7c:d9:
75:9b:c6:b6:01:55:2d:b5:39:50:d3:09:82:9b:f2:
54:38:30:29:60:40:cc:12:b2:74:e5:76:72:3a:d7:
56:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:95:41:74:2A:18:01:14:99:81:E6:69:EA:3B:27:10:D4:E3:94:18
X509v3 Authority Key Identifier:
keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:da:48:98:62:3e:d3:15:57:c9:f7:b2:0c:8e:c3:97:ff:64:
64:cd:11:5d:3d:ea:67:44:43:93:e3:13:10:04:65:b0:17:5b:
82:aa:22:5e:ea:f4:0d:14:21:ba:af:be:eb:5e:e9:c7:1c:ae:
72:b8:2e:b4:17:d1:3a:ab:59:d4:c4:e3:50:c7:17:e9:7c:39:
b3:6c:54:fa:7c:cf:fd:90:14:2d:d8:bf:30:0a:25:8b:65:91:
98:e1:21:c3:ee:0f:a0:d2:39:06:35:2b:1d:f6:0a:01:ec:b0:
a7:62:79:02:80:d5:5a:69:5e:96:f1:73:03:7e:6c:ca:cb:ba:
16:91:48:b6:3e:96:3a:74:3b:ef:9c:2b:41:8b:94:d7:60:65:
f5:2d:b9:df:f3:7f:d4:fa:26:5f:c6:fc:d6:f9:d4:53:0c:47:
44:fe:53:af:c3:18:98:35:de:10:b4:1f:fd:e3:11:57:63:fa:
8f:7f:d4:13:d1:38:1d:03:6f:ba:6b:61:29:2c:3d:c8:a5:50:
62:a9:36:64:38:9b:97:95:f7:94:8b:18:40:5d:da:86:83:1f:
23:7a:fe:19:5e:08:66:93:11:6a:2e:9c:b3:65:6d:6b:76:8c:
e9:dc:1b:5e:d6:10:6d:cc:f9:14:80:58:8e:4d:9f:53:cc:5c:
1f:b0:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:14 2026 by rpki-client