Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File: o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier: 5rQWjlVsI+8S/SMh9jTuE9ziyZh0auGwU1zZ6+GCPnA=
Subject key identifier: 4E:36:B6:53:5C:29:CF:CB:28:3D:AA:C6:22:E8:1F:27:FC:84:A2:C0
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 019D378999DF3AA43738B088584D867C3BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number: 17D2
Signing time: Sun 29 Mar 2026 03:00:57 +0000
Manifest this update: Sun 29 Mar 2026 03:00:57 +0000
Manifest next update: Mon 30 Mar 2026 03:00:57 +0000
Files and hashes: 1: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: onHWdVv3mSl3ZaFt1QED3JakVIKRdUWe0GRjTdkylbc=)
2: sWZCCJ9mYF4x-AZV9gqyKfwmtqw.roa (hash: ENzKV46vc1yAkS1qAwIAJTRoo8u9W0tkvlFZn62IWoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:99:df:3a:a4:37:38:b0:88:58:4d:86:7c:3b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: Mar 29 03:00:57 2026 GMT
Not After : Mar 30 03:00:57 2026 GMT
Subject: CN=4e36b6535c29cfcb283daac622e81f27fc84a2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:16:b4:c3:61:36:5c:2b:f7:e4:76:cd:41:1e:
8e:00:88:5f:3f:28:16:34:50:a2:c7:fd:6e:30:b8:
63:79:c8:c9:a1:72:35:f5:3d:74:27:06:fd:85:29:
e1:23:3c:2b:f8:71:7e:6b:5f:08:33:34:96:92:12:
18:49:2c:ec:e6:1c:2f:57:04:a1:05:89:6b:92:c2:
56:0c:25:82:03:9a:ed:13:75:23:a0:3e:bc:2f:c7:
a7:41:9f:00:4e:c0:df:b7:23:20:36:e6:56:a8:b2:
3d:bc:e7:dc:7a:43:39:e7:f9:61:3f:00:06:59:27:
41:af:df:89:21:a1:21:c2:a7:d7:1e:a4:08:ee:0c:
d1:80:00:b6:a9:92:9d:cd:d7:c4:64:d3:fa:43:cb:
01:b7:64:2a:f5:69:ca:68:bc:1d:37:5a:49:f5:c9:
02:9a:52:e9:20:1a:5f:1a:1f:f2:88:a2:b7:f5:94:
d2:89:a1:03:81:eb:ac:28:33:aa:d3:c5:c9:37:77:
6c:02:71:bc:37:ec:32:96:cd:5d:03:14:5d:4e:8d:
31:c5:7c:8b:2c:91:c1:15:47:c6:71:d2:d3:7d:84:
aa:ff:36:50:f6:49:ee:af:29:22:f9:d8:1f:a5:9a:
f0:4e:db:b8:e9:55:ff:c3:fb:80:aa:72:eb:12:22:
ca:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:36:B6:53:5C:29:CF:CB:28:3D:AA:C6:22:E8:1F:27:FC:84:A2:C0
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b8:78:58:92:28:b9:e2:3b:65:4d:3f:07:74:9f:54:6e:97:
e5:17:a7:de:a5:70:7e:95:ff:35:54:19:80:d2:d1:44:7a:c8:
c7:ea:f6:4d:c0:d8:12:f2:34:48:30:8f:0c:69:74:67:de:58:
9b:96:bd:87:7d:be:30:b2:b0:6b:63:95:16:96:9e:a2:51:eb:
e0:0b:c0:35:52:5d:25:6e:b3:cd:72:79:3d:47:88:55:1d:5f:
a3:39:75:11:f4:19:4d:d7:39:e3:b3:18:03:0c:ba:3d:a1:0f:
3e:ec:6b:6d:83:14:5d:44:c0:a9:0d:94:7d:97:31:28:c7:4e:
17:27:e4:31:03:89:f6:be:32:dd:70:3e:89:ff:60:31:80:57:
af:d8:68:aa:d7:e8:db:21:f3:8f:c7:25:c1:9a:5b:37:ff:ac:
0f:e4:df:e2:e6:27:2c:81:77:1a:9b:79:4e:c6:58:04:70:29:
24:c4:e4:12:27:0b:61:2b:35:7d:3b:4a:84:f6:ec:2d:2d:d3:
8a:9a:a8:dd:66:ef:46:76:5f:6f:0f:f0:fb:97:29:41:bb:79:
51:ab:37:cb:3f:ea:97:83:ab:43:c2:80:8a:0b:c9:74:e8:16:
2c:71:ee:4d:a0:4c:65:e5:53:d1:cd:95:6c:9d:8f:23:a5:b5:
a8:97:43:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:30 2026 by rpki-client