Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: CLaEm0MqM+H3Ker2/gu2LD34Qb5gvmSaA/yscuP3STQ=
Subject key identifier: 52:17:26:35:D9:DB:88:E1:8A:43:E5:65:E8:80:D7:0C:38:7C:A4:2D
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 019D2E187CA96F3853397FDF723BF3456979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 0D0B
Signing time: Fri 27 Mar 2026 07:00:49 +0000
Manifest this update: Fri 27 Mar 2026 07:00:49 +0000
Manifest next update: Sat 28 Mar 2026 07:00:49 +0000
Files and hashes: 1: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: EC4CdtnhKLZfYqzaxdnYIO55mAjx96E2slz+WOVguIM=)
2: sn3WdCt5cOff3eRSoyZ6m4C8YHk.roa (hash: cE5dlzPj8uIWRQ0h42WBrGLO+X2WE9nV3RUnSZAY1yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2e:18:7c:a9:6f:38:53:39:7f:df:72:3b:f3:45:69:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Mar 27 07:00:49 2026 GMT
Not After : Mar 28 07:00:49 2026 GMT
Subject: CN=52172635d9db88e18a43e565e880d70c387ca42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3a:80:2a:61:50:fd:42:da:43:33:92:cc:07:
ae:49:a2:82:61:3c:ef:9a:ce:98:9e:a2:74:eb:23:
7d:04:ac:50:77:5a:17:7e:d6:14:81:53:b1:c1:da:
b7:04:81:ad:4b:e9:c7:40:c6:f4:7f:45:13:6e:33:
29:46:d0:4b:31:08:27:20:3d:cf:67:df:34:25:17:
3d:99:07:38:79:8f:03:ed:d9:06:b3:c7:5b:a2:97:
98:19:d0:19:be:34:c5:19:48:34:86:6e:3d:dc:a7:
16:65:33:ab:64:68:ad:25:63:4b:38:5a:81:e1:00:
f7:36:ee:62:d5:98:38:0f:a5:e4:a5:f6:ed:54:bc:
49:4f:cd:dd:75:7d:01:83:e1:7d:43:f4:4d:00:16:
63:3e:31:58:60:76:41:45:01:a0:a9:00:ee:dd:2b:
b0:38:cc:1b:12:68:5b:76:6f:91:09:dd:8c:fd:74:
34:38:de:df:1d:3f:04:63:d5:c0:e6:31:fd:55:1e:
b2:e4:6e:3c:0c:67:e3:ae:e9:a9:54:a6:02:41:a4:
b3:1b:2e:cd:eb:33:c2:39:5f:da:a6:91:04:66:63:
01:1a:a3:02:34:c2:4a:2c:3e:39:03:15:5e:44:d1:
94:d1:4e:98:74:0a:10:c9:91:d8:fa:55:cd:00:e2:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:17:26:35:D9:DB:88:E1:8A:43:E5:65:E8:80:D7:0C:38:7C:A4:2D
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dc:10:6f:b6:d0:91:0f:95:4f:1d:ef:0a:ff:26:23:22:41:
d4:c6:1b:50:09:94:60:75:59:30:43:a0:aa:36:ac:c6:ac:11:
43:5f:fa:7d:99:e3:ad:75:86:5f:2e:ae:c4:ba:b6:e5:2a:28:
bf:1a:5b:00:6a:f3:b2:cb:54:06:41:56:76:ca:b4:76:db:f5:
44:68:25:ed:2e:31:92:b8:69:8a:ee:f7:41:0e:ff:8a:78:9f:
ee:13:4c:7a:b6:b2:e7:16:79:4d:91:8e:35:fb:48:e7:2b:06:
0f:02:6f:88:07:3f:fa:79:82:7d:fa:97:73:dc:41:40:56:fa:
4d:c0:30:b5:5c:ef:4f:a8:80:d8:c6:0d:49:41:0f:45:cf:1e:
e3:7b:a3:8d:4d:8c:a8:04:e1:32:44:5c:2d:19:f0:1b:a4:2e:
85:a8:cb:64:5e:6e:e9:35:b5:f0:f1:97:0a:c0:8c:f9:53:8c:
9f:bf:97:99:72:bd:b0:c3:15:7a:55:70:d0:fd:f8:b6:71:da:
ec:fb:28:af:f6:7b:e9:77:8a:56:e1:45:8f:8e:37:b5:34:d0:
e5:bc:68:11:4f:f8:e9:a3:54:64:0b:52:70:f3:70:22:ad:ca:
38:a9:34:95:45:71:a8:28:33:96:1f:a3:1a:e9:6e:5a:3c:d1:
bf:0f:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:44:33 2026 by rpki-client