Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
File: o3CyP1wNuomxV_gcnDgQlRGLep8.mft (raw, json)
Hash identifier: 8hxdZlQnMbcT9F2/Cp5S2a+a4ccVqJQbjkCN9tdscNg=
Subject key identifier: 69:53:68:AC:C5:11:6F:C6:33:53:E6:AF:44:D9:27:CF:EF:C0:B7:84
Authority key identifier: A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
Certificate issuer: /CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Certificate serial: 019D37C0923789E20C194E6B55C06B41FC45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
Manifest number: 0272
Signing time: Sun 29 Mar 2026 04:01:00 +0000
Manifest this update: Sun 29 Mar 2026 04:01:00 +0000
Manifest next update: Mon 30 Mar 2026 04:01:00 +0000
Files and hashes: 1: 1U7EBT8Fi6D3Q__JEXiDpKxMjzQ.roa (hash: +lVH2wb0fkjDTS8EyuydWpsQpASkrXPOrZFtBXu1rO4=)
2: o3CyP1wNuomxV_gcnDgQlRGLep8.crl (hash: rkArSzNFJVR5S+9sNlfnQt181EtTTPcTv5xMClLIqrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:92:37:89:e2:0c:19:4e:6b:55:c0:6b:41:fc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Validity
Not Before: Mar 29 04:01:00 2026 GMT
Not After : Mar 30 04:01:00 2026 GMT
Subject: CN=695368acc5116fc63353e6af44d927cfefc0b784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:0b:30:76:e2:02:38:dc:8f:80:07:ce:7b:
ba:2f:f0:80:dc:95:d0:95:37:dd:03:12:7f:b3:3b:
db:83:c4:13:77:74:f5:3c:17:b5:3b:d0:82:28:2a:
3a:67:69:6b:21:74:a0:e2:18:11:66:32:9a:bb:93:
6a:4c:cd:d4:1a:59:e7:a2:83:81:bc:6c:f2:56:00:
d9:58:2c:e5:34:22:bd:e9:f2:f0:2f:fb:4b:99:ef:
28:91:c3:70:ac:75:41:30:49:f1:4f:f7:d3:f7:f1:
f0:fc:97:87:2f:f6:b2:b4:fd:19:d3:b1:d1:d3:c5:
7c:62:e3:68:ac:2c:ba:64:bb:38:94:a2:11:de:1a:
f4:db:e5:31:a2:03:ce:d9:79:f4:b2:42:78:70:71:
61:b2:5a:e7:62:36:a9:85:58:d1:6d:67:29:06:c6:
c1:72:b5:9f:35:62:a9:62:52:30:07:19:0b:f6:29:
43:7e:9c:45:33:be:c1:5e:fb:b0:5c:37:0d:6c:5b:
74:63:a2:e0:65:1d:e4:87:37:ac:27:5c:8b:46:e7:
66:3f:7e:45:8e:db:64:81:76:c2:49:cf:3d:4b:a8:
b8:67:78:0e:04:4d:a4:91:dc:1b:25:42:22:41:df:
6b:f4:a3:e0:61:aa:36:1c:d9:74:e9:ce:f8:99:d3:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:68:AC:C5:11:6F:C6:33:53:E6:AF:44:D9:27:CF:EF:C0:B7:84
X509v3 Authority Key Identifier:
keyid:A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:53:39:04:e4:96:ba:46:c5:c9:de:86:4c:ca:fa:fe:29:fd:
e8:4c:3c:46:24:71:78:aa:22:84:fc:76:43:7a:f5:f1:e3:4a:
58:05:9d:f4:5b:3a:56:c5:a9:36:37:36:19:e5:db:2a:d7:52:
28:be:c9:0b:62:18:0a:6b:fc:15:42:98:8c:4d:a3:d6:cb:ac:
90:52:34:34:c4:9b:22:30:64:5d:e4:f7:3a:18:90:a3:ac:23:
25:f8:6f:d0:8f:84:df:2f:f9:87:bb:d7:c0:94:c1:09:2f:b2:
bc:eb:39:d4:4c:f1:1a:d5:b9:c4:ab:8e:bc:c4:41:9b:cb:19:
ec:90:39:e2:bb:63:42:75:e7:3b:d8:70:78:6d:d8:16:c2:94:
5e:26:a3:26:aa:ee:32:af:51:69:69:48:bb:1a:b9:42:bd:a8:
4d:6a:6e:93:e9:26:85:6b:70:31:42:43:14:78:b0:6c:f2:dd:
1a:7f:b1:bd:3c:3e:4c:53:f2:6c:d7:cf:ce:8d:6c:8a:0c:69:
95:36:d0:29:ba:07:ca:6b:00:bf:91:24:d0:9e:45:72:e0:42:
a5:d3:76:88:e6:38:3f:ce:f4:c8:1c:00:65:39:65:f9:c3:d9:
d6:9d:9d:df:51:be:04:c5:33:05:9c:09:d0:82:3a:11:e8:f6:
8f:bb:67:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wJI3ieIMGU5rVcBrQfxFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzBiMjNmNWMwZGJhODliMTU3ZjgxYzljMzgxMDk1MTE4
YjdhOWYwHhcNMjYwMzI5MDQwMTAwWhcNMjYwMzMwMDQwMTAwWjAzMTEwLwYDVQQD
Eyg2OTUzNjhhY2M1MTE2ZmM2MzM1M2U2YWY0NGQ5MjdjZmVmYzBiNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFULMHbiAjjcj4AHznu6L/CA3JXQ
lTfdAxJ/szvbg8QTd3T1PBe1O9CCKCo6Z2lrIXSg4hgRZjKau5NqTM3UGlnnooOB
vGzyVgDZWCzlNCK96fLwL/tLme8okcNwrHVBMEnxT/fT9/Hw/JeHL/aytP0Z07HR
08V8YuNorCy6ZLs4lKIR3hr02+UxogPO2Xn0skJ4cHFhslrnYjaphVjRbWcpBsbB
crWfNWKpYlIwBxkL9ilDfpxFM77BXvuwXDcNbFt0Y6LgZR3khzesJ1yLRudmP35F
jttkgXbCSc89S6i4Z3gOBE2kkdwbJUIiQd9r9KPgYao2HNl06c74mdPePwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlTaKzFEW/GM1Pmr0TZJ8/vwLeEMB8GA1UdIwQY
MBaAFKNwsj9cDbqJsVf4HJw4EJURi3qfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNDeVAxd051b214Vl9nY25EZ1FsUkdMZXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zMTU0YjQtNWJkNC00YWM5LWIwYzgt
MWIyNWFlNDIyOWRiLzEvbzNDeVAxd051b214Vl9nY25EZ1FsUkdMZXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8zMTU0YjQtNWJkNC00YWM5LWIwYzgtMWIyNWFlNDIyOWRi
LzEvbzNDeVAxd051b214Vl9nY25EZ1FsUkdMZXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFM5BOSW
ukbFyd6GTMr6/in96Ew8RiRxeKoihPx2Q3r18eNKWAWd9Fs6VsWpNjc2GeXbKtdS
KL7JC2IYCmv8FUKYjE2j1suskFI0NMSbIjBkXeT3OhiQo6wjJfhv0I+E3y/5h7vX
wJTBCS+yvOs51EzxGtW5xKuOvMRBm8sZ7JA54rtjQnXnO9hweG3YFsKUXiajJqru
Mq9RaWlIuxq5Qr2oTWpuk+kmhWtwMUJDFHiwbPLdGn+xvTw+TFPybNfPzo1sigxp
lTbQKboHymsAv5Ek0J5FcuBCpdN2iOY4P870yBwAZTll+cPZ1p2d31G+BMUzBZwJ
0II6Eej2j7tnag==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:34 2026 by rpki-client