Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
File: O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json)
Hash identifier: rW+lJrxtW5IGTVtN5q1PivmKf9fDNAWa9nuttV0KTgE=
Subject key identifier: B5:CC:8A:80:AB:1A:F3:A1:39:54:D6:71:C9:D1:80:0B:B1:71:41:B5
Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
Certificate issuer: /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Certificate serial: 019D3AC1AAE5A77F210B7FFD4A98CD4E1415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
Manifest number: 103B
Signing time: Sun 29 Mar 2026 18:01:03 +0000
Manifest this update: Sun 29 Mar 2026 18:01:03 +0000
Manifest next update: Mon 30 Mar 2026 18:01:03 +0000
Files and hashes: 1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: yg7Wv7eaFAo5qdT5rlvjm9EEV5g49OLaEjqKoCGDWD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:aa:e5:a7:7f:21:0b:7f:fd:4a:98:cd:4e:14:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Validity
Not Before: Mar 29 18:01:03 2026 GMT
Not After : Mar 30 18:01:03 2026 GMT
Subject: CN=b5cc8a80ab1af3a13954d671c9d1800bb17141b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:b2:12:74:e9:ea:91:73:c6:d2:a7:f5:5a:
80:cd:4e:83:18:e2:d9:f2:0a:5b:4e:b8:8b:bb:c0:
e8:4b:36:ce:f3:18:03:76:5a:cc:84:17:39:62:c9:
e6:d6:85:97:6f:eb:fe:1d:b2:8f:9b:06:80:8c:e4:
61:40:29:05:6b:5b:9a:33:aa:d0:e0:7e:be:5b:1a:
4b:b9:ff:34:b1:17:36:13:70:52:c8:f5:a5:ba:07:
38:99:5c:96:a2:3a:13:b6:bc:cd:41:3a:16:56:a5:
04:70:b6:34:58:aa:fa:09:0d:7b:31:0e:48:53:f9:
ed:ac:83:74:32:85:83:ba:70:c9:8a:26:2e:a3:8b:
47:a9:f5:04:6a:e1:78:4e:f0:76:e6:cf:45:28:fc:
3a:57:4d:50:83:fe:ba:6c:35:e4:e7:f9:75:ad:f4:
68:45:c4:78:1f:30:92:c9:59:e8:bf:c3:79:42:4c:
9e:58:a5:bd:cb:fd:49:fb:bf:8c:25:47:db:44:65:
b7:31:9c:cd:06:df:d0:9f:82:60:43:6c:6e:9c:74:
73:a8:32:89:8d:4c:12:d7:fd:49:f3:a7:e9:ae:9d:
1f:ff:d9:a0:bd:de:c5:dc:f2:cd:60:fc:98:ba:35:
ae:3b:e3:9f:3f:f7:1c:05:c7:b2:0d:a3:fb:25:ff:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CC:8A:80:AB:1A:F3:A1:39:54:D6:71:C9:D1:80:0B:B1:71:41:B5
X509v3 Authority Key Identifier:
keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7a:65:1a:22:82:f0:9b:9c:e0:c4:b7:78:0a:89:c9:6d:6a:
fb:10:43:09:99:c9:5a:44:fc:dd:62:8c:87:5d:5e:c8:18:8e:
4f:79:10:de:e4:e2:3e:bf:c9:56:d1:a8:4c:fe:dc:06:53:6e:
bf:08:f9:8a:62:17:65:24:98:37:26:7a:d1:a2:46:2c:c6:07:
3c:a5:ba:d4:27:10:a0:cd:5c:42:60:cf:01:7f:4d:23:77:70:
95:54:5a:74:fc:ba:46:5c:71:f3:f0:8b:01:e0:05:63:2c:b6:
78:de:04:6e:22:5b:b7:75:2f:c3:34:08:26:89:18:7e:d3:f1:
76:ff:85:02:77:f5:5a:68:cb:c7:47:a6:e5:bf:d3:42:7b:4a:
54:e0:07:cb:4c:5f:1e:d1:ac:22:46:97:a6:d1:ad:b0:39:23:
d0:b8:94:aa:b8:0c:1f:87:b7:59:08:ea:84:0f:0d:09:fb:eb:
bc:64:35:f8:46:9b:75:04:24:97:e8:b0:41:1e:3d:34:b3:a2:
3d:29:30:74:46:5f:60:2d:b6:46:66:e4:c2:86:e5:60:a2:ab:
74:5d:8e:87:89:3f:1d:dd:8b:ce:39:83:84:23:fb:3d:d6:4d:
3f:78:14:5c:09:3f:68:09:2e:e6:f0:ea:7a:59:68:20:b9:4c:
02:77:2f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:32 2026 by rpki-client