Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: F7gQ0JPCps7gpH5kOgP/ACSEAsZPu/+3UrUNFmaXQsw=
Subject key identifier: CF:6C:AE:79:A1:1F:E7:79:95:97:A0:C1:6A:88:31:57:BA:E9:76:B6
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 019D38D36C0C3372C829B2DB4E8484B04DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0AD1
Signing time: Sun 29 Mar 2026 09:01:12 +0000
Manifest this update: Sun 29 Mar 2026 09:01:12 +0000
Manifest next update: Mon 30 Mar 2026 09:01:12 +0000
Files and hashes: 1: 8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa (hash: +cFHBDI2vSe8qYQNG7SSN4dtten2bWEf/OgE/4boopY=)
2: HscqlSP_T6jWomPIcWdE3IC4My4.roa (hash: /7wtYvtk4cUOoXmRq6scL7JJ5OG21YbveewB9o7fEHg=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: F15wneX0J1RwCoIkf07HAK29BfcFlVe17zRZwzI1kSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6c:0c:33:72:c8:29:b2:db:4e:84:84:b0:4d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Mar 29 09:01:12 2026 GMT
Not After : Mar 30 09:01:12 2026 GMT
Subject: CN=cf6cae79a11fe7799597a0c16a883157bae976b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:56:b0:ee:91:e9:a5:28:78:69:1d:3c:c3:e6:
f5:da:6c:7b:c4:80:a3:70:2d:61:db:3a:29:b0:00:
11:96:fd:f7:e9:54:4a:15:24:b8:bd:0d:87:36:49:
b4:26:47:c6:1e:04:84:fa:6b:c1:5c:14:c4:b6:b8:
20:3f:f9:43:d6:c6:93:fe:1d:14:0f:f3:b5:22:b0:
c2:24:ac:7c:2c:2e:2c:b2:e4:f8:e9:be:ee:d2:55:
bc:8f:15:a1:f8:e3:0b:9c:d6:b7:81:d6:1b:ba:74:
69:8b:1e:61:43:70:1c:e2:b7:dd:a2:e7:51:b2:fb:
ff:72:8a:61:11:66:05:0f:84:62:a4:d7:10:73:f7:
fd:7a:3f:45:ae:7c:c3:65:12:7c:71:61:01:5a:3f:
62:3c:74:df:e5:a4:38:bc:28:36:3b:03:a8:55:fa:
c7:7c:73:a8:f4:f3:3f:02:d8:c1:24:ec:e4:0e:be:
d0:50:93:c2:65:02:1d:ca:78:fa:ff:e9:61:bb:ee:
6b:14:fa:a8:26:35:3a:a4:83:e6:31:dc:79:a6:92:
8d:1b:9f:4c:42:48:9b:e6:3d:3f:f1:68:6d:b9:44:
b9:b8:3a:27:3a:5f:77:33:42:38:94:a6:d1:0a:13:
4b:c1:51:b9:1b:6e:9d:03:bb:e8:a3:2a:1b:4c:1e:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6C:AE:79:A1:1F:E7:79:95:97:A0:C1:6A:88:31:57:BA:E9:76:B6
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:bd:f0:57:b9:a8:da:5a:df:d4:1a:00:56:07:bd:d9:4c:89:
c1:58:29:e8:f9:6c:b0:b4:3d:60:cf:af:fb:36:ca:7f:0b:2c:
b8:6d:a4:57:a2:92:98:5e:3f:e7:6b:93:41:7f:4b:80:7d:12:
7f:e9:ce:71:4c:ad:fa:6e:2b:51:61:48:b8:9b:12:94:0e:65:
40:04:b2:29:bc:ca:e2:65:7e:cf:1a:07:2e:62:86:47:f0:31:
3a:1c:27:3e:4b:39:ad:a2:05:b3:10:83:22:d5:75:00:2a:bb:
1d:b8:4b:9f:ee:63:86:c0:ac:3e:7c:4e:0a:f5:12:63:d6:62:
c3:95:00:16:83:25:05:ca:c6:a9:a0:fb:b4:49:30:38:c9:3b:
0b:b7:b1:ac:ab:8f:ab:8f:36:80:3e:92:f9:80:fc:06:0c:0c:
9f:cb:01:43:73:0a:7c:46:79:3f:67:c1:fa:05:c4:65:d3:22:
04:5e:ed:05:85:05:09:a4:bc:a0:1c:14:a5:e7:87:ff:e3:9f:
ba:bb:ed:37:38:84:2c:d5:30:38:39:d3:32:68:35:90:0a:c8:
47:e7:8c:f6:67:a6:a0:f8:6f:0a:6d:a2:b0:8d:fd:bf:f5:f4:
c9:7b:24:46:6b:42:5c:30:03:1d:42:97:8e:aa:5a:c3:ed:f1:
d2:b6:d4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:42 2026 by rpki-client