Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: cNziiHia4RU7tZVS1G0wIDc8d1dWMr9jm7x9McXAoyc=
Subject key identifier: 91:A7:45:D9:84:AB:C7:F7:CF:A9:85:C5:A4:27:A5:52:C0:D0:AC:47
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019CE411200E26AA9F135C3C0E384D41B7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1874
Signing time: Thu 12 Mar 2026 22:00:53 +0000
Manifest this update: Thu 12 Mar 2026 22:00:53 +0000
Manifest next update: Fri 13 Mar 2026 22:00:53 +0000
Files and hashes: 1: 3rcL1tlw3pK63ayAo53imjyL-no.roa (hash: SVu1M1//nBXFLsHAcTb2G4Z6NIGEa6PRIz6sU6yKha8=)
2: 4ZGNJqUJGxDQ-JDLSgjyKGfqQW8.roa (hash: HdNBs/3VfDOQkzfrG5FPF/W8U9fZWOacY1hI7bXdJa8=)
3: 6gcDsJpxsKX0PxtnBH4T97xLx9M.roa (hash: hIekIZFh7o66l7NKTjbYJTeEDYrlWcQFjp4xOD1i0cs=)
4: LVPO8JZfNdJa2U5Ik8I34YcEOUA.roa (hash: p6JxXEEX7qFpTZe35bHvc23RUvTVNt4iONQ/5P6VF/A=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: Btdcd7nfyZUtN7Xy1fOhSlelvbri9tPUUZaVlrfRDTA=)
6: tXrrUP_TFy0LZMX_c9DSBUiK_1g.roa (hash: IqdNMmp5ttOJAyhkpsC/dBhKLWgRCKvww/+kSgvGp08=)
7: vXfLmPKQvq8Xsk8o-7vsGcFAvdA.roa (hash: JskXRzeILl7MbBJ3/C+4HYyn6osGgL+SJwbO/w3txgs=)
8: zIwXYCF_qQZomhHz-X85FuBZGIA.roa (hash: RZTxg5aQOBFbSjJwS0t1zHG9UjIHCREaOssi1fvfsZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:11:20:0e:26:aa:9f:13:5c:3c:0e:38:4d:41:b7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Mar 12 22:00:53 2026 GMT
Not After : Mar 13 22:00:53 2026 GMT
Subject: CN=91a745d984abc7f7cfa985c5a427a552c0d0ac47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:40:ba:34:c3:65:f2:69:f4:00:19:6f:7a:
cb:3d:1e:19:4f:86:69:b9:7e:e4:7d:62:60:43:1f:
19:e4:02:a7:2e:0b:ca:a7:95:e4:31:10:0d:b2:31:
0f:62:33:52:24:2b:19:1f:7b:13:88:f6:31:d6:0c:
17:e9:e9:51:30:cb:ec:50:72:fe:a0:51:82:19:3f:
c6:c3:bc:2c:12:f6:ec:c5:53:0a:8d:2e:35:c3:57:
00:36:8a:f4:25:6b:62:49:b6:55:7d:44:7a:5f:ba:
03:f3:a2:cd:44:4e:43:ff:18:c2:af:37:42:0e:76:
f9:03:e3:3b:cb:3f:59:9c:ef:70:3d:29:59:81:bf:
79:6f:3c:6d:c8:fe:63:c8:ed:cb:7c:ba:47:fc:69:
66:ce:d3:dc:44:b1:52:6d:66:ee:9d:b5:f2:12:f0:
b7:fe:8c:41:56:aa:44:42:a4:b7:e3:b9:9e:9b:5b:
c1:dc:20:2c:7c:ee:da:e5:5b:96:5f:2a:fb:47:d3:
b9:f7:29:83:47:87:9b:f9:3f:04:3c:5d:e5:58:44:
e3:0f:45:9d:bb:aa:ce:33:f6:46:d5:cb:23:1d:14:
33:9d:26:ef:65:66:ba:05:4d:19:68:de:77:75:68:
3f:dc:30:c4:c9:9d:7e:ba:41:69:58:64:49:d3:60:
fe:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A7:45:D9:84:AB:C7:F7:CF:A9:85:C5:A4:27:A5:52:C0:D0:AC:47
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:dd:2e:2a:8f:5c:06:f6:ee:64:e8:fa:5d:ce:7d:f8:82:fd:
84:1e:ff:a8:2b:b6:62:1a:f6:f9:57:7e:44:6c:81:38:d1:17:
2a:33:8d:4b:40:a0:18:fc:93:a3:6a:c1:76:57:97:5e:7d:32:
43:b6:47:0a:2f:fe:34:14:e8:ac:30:72:ea:67:4b:b7:94:ec:
44:5b:71:fc:7f:8e:63:36:7d:af:a2:c9:1c:8b:0b:8e:1c:31:
df:85:9f:a6:fc:a0:c9:78:a6:51:20:79:8f:e9:78:71:2e:fd:
40:d7:5c:2f:bb:3f:68:64:7e:85:7d:87:45:63:15:fe:0c:34:
fc:7c:ea:d1:fa:1c:cb:51:0f:93:ce:85:cf:12:49:f9:b4:94:
1b:60:1b:dc:f9:6f:cd:11:84:e3:c7:b0:0d:60:63:c6:76:15:
46:fc:94:a0:66:a3:5c:c7:f5:f3:c7:01:50:81:0b:c5:df:d9:
56:79:67:9f:b7:7c:a9:c3:e7:e2:56:f5:8c:10:89:5a:8f:93:
84:f6:4e:b7:71:be:c8:51:d9:af:6a:e8:a4:90:cd:f9:48:a4:
31:f7:5d:fa:b1:ff:72:96:87:41:4c:8d:a0:63:92:8e:d9:b2:
6f:77:e5:a7:4a:47:57:6a:cd:ce:e2:b2:30:dd:25:1b:87:be:
f6:45:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:29:52 2026 by rpki-client