Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: xgbUQA88BHrtUyz8E2tVHBcILzE2rQYF6qYJksanBWM=
Subject key identifier: AC:6B:A1:A2:11:6C:50:76:EC:D5:83:7E:EA:6E:89:10:AC:53:A8:4A
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 019D389BEFE6501EBBB3B29B96AD6694C538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 08:00:36 +0000
Manifest this update: Sun 29 Mar 2026 08:00:36 +0000
Manifest next update: Mon 30 Mar 2026 08:00:36 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: UVDdLkoIY5O+EVPmQMFc3xhtJZ7vZZLOHN2FIsyC50Q=)
2: ihgnIXHoUMYh-WaWeIPaPydWbUk.roa (hash: iBsCj7b0mjUZuRLfwoBEpzWhtX6/cZQAGCmkWVKeq/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ef:e6:50:1e:bb:b3:b2:9b:96:ad:66:94:c5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Mar 29 08:00:36 2026 GMT
Not After : Mar 30 08:00:36 2026 GMT
Subject: CN=ac6ba1a2116c5076ecd5837eea6e8910ac53a84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:b8:8a:4c:05:c4:c8:fc:a9:13:91:c9:32:
22:4f:d8:4c:8d:3d:2b:2f:2a:d2:5d:25:9f:6d:b0:
f6:b8:7b:d5:d1:90:94:07:07:51:7f:f5:30:2d:3f:
c7:64:bb:c9:31:95:ba:50:26:b7:07:8d:1a:4a:2c:
5a:ed:a1:ee:01:04:34:82:49:e1:18:e4:57:51:2f:
20:21:19:ec:69:bb:e3:da:54:5c:0c:38:96:23:4d:
1f:67:25:3c:e1:00:dc:ce:c8:fb:f3:95:81:cc:22:
1a:6b:9c:2e:fd:1b:34:c0:52:2e:83:e6:e1:80:2f:
fe:35:94:3e:a9:32:ca:05:5d:61:03:d4:57:59:bf:
0c:ea:6e:c3:ad:2c:33:74:08:d5:e6:21:f9:40:78:
a4:65:93:2f:00:37:55:8f:d3:37:6e:60:2d:a9:d8:
dc:7b:c2:f9:8f:08:00:ec:8d:65:08:3c:96:c7:46:
2e:74:15:cc:0e:61:20:8c:cb:c6:a5:8f:ce:98:9c:
52:da:16:2f:67:b2:50:44:cb:a1:d2:22:c1:85:43:
be:59:ff:b8:ba:04:be:ff:0c:1a:d3:97:44:1c:14:
19:82:2e:17:50:01:08:1f:dc:1d:cf:50:fa:88:91:
87:e9:08:2d:95:ad:e8:72:54:38:ba:61:26:25:a8:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6B:A1:A2:11:6C:50:76:EC:D5:83:7E:EA:6E:89:10:AC:53:A8:4A
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:56:2e:c7:f3:a1:c3:f0:c4:3d:56:73:4a:77:d9:23:83:65:
74:67:20:35:94:50:f2:06:5b:c6:b8:56:f9:75:56:c6:81:1f:
15:d8:0b:83:56:04:11:fe:1e:ed:8b:fe:f6:c8:d8:aa:02:fd:
3d:c0:c2:ca:d2:b1:dc:42:09:1a:31:0a:d5:09:ab:57:f7:20:
8f:fb:00:69:d7:95:2d:bf:2a:9a:8c:25:0b:51:db:a5:7c:6e:
9d:58:c5:ef:72:11:84:ec:43:45:9e:8b:6e:a7:23:54:6a:1e:
98:85:ba:2f:f4:50:ed:f7:6b:d4:68:50:cf:d3:3a:e5:82:7e:
97:a8:27:10:ca:07:be:9f:3a:f0:05:de:0f:18:4b:e1:58:d5:
00:b2:31:97:4a:8f:2f:74:37:9d:b3:88:fe:c4:20:a2:64:3e:
3f:a6:01:a1:fd:eb:ec:cc:5d:0f:ee:6f:ce:56:40:b8:ce:3c:
11:18:ed:9e:63:8a:57:b4:de:8d:67:83:ef:af:2f:1f:8b:98:
00:46:6d:0f:f9:c6:e3:32:64:7d:23:8c:f7:0b:ef:ee:d9:bb:
a3:6c:a5:46:e0:f5:ee:78:1a:7d:8c:58:9a:24:97:95:d7:f2:
69:c8:08:51:f5:cf:c5:85:e0:e2:27:23:cf:d8:48:dd:cd:d1:
d6:6f:18:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:23 2026 by rpki-client