Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: z2GcrFHudLbJPmXccJWjHv97j31pPb42dj4Oi8vCqHA=
Subject key identifier: E9:AE:C5:5C:97:E5:84:9B:BD:F5:EB:32:08:18:F9:A0:B7:F9:AD:9A
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019D386678817C64D0D47A8A9C1BE65932FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:02:12 +0000
Manifest this update: Sun 29 Mar 2026 07:02:12 +0000
Manifest next update: Mon 30 Mar 2026 07:02:12 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: l7vF09ROsMAV9wulzq+kOuuL6+tpCiylpUFEO682fSo=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:78:81:7c:64:d0:d4:7a:8a:9c:1b:e6:59:32:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Mar 29 07:02:12 2026 GMT
Not After : Mar 30 07:02:12 2026 GMT
Subject: CN=e9aec55c97e5849bbdf5eb320818f9a0b7f9ad9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:5c:0c:e8:fe:ef:7d:39:bd:4c:97:75:af:
18:90:35:04:eb:33:5a:9c:82:26:48:4c:63:f1:3c:
73:26:c0:c1:c9:85:75:87:4c:dc:2e:42:76:2a:5e:
c8:39:7c:9d:c2:48:62:60:43:5e:59:fb:65:7a:11:
de:f3:b5:15:7b:de:f0:7b:d0:b8:77:d0:e9:a6:17:
80:1b:98:0a:c1:6a:17:81:f8:07:5a:9b:1a:39:9d:
10:cf:1c:52:14:ec:a8:3e:60:d1:e5:95:72:cd:b7:
11:d5:f4:14:f3:39:34:e9:17:00:2e:83:4c:b2:a4:
29:53:e3:51:c3:fe:77:18:df:c2:32:c1:9f:7d:0f:
82:da:11:ec:be:2f:3e:cf:67:45:f6:f5:06:7f:21:
be:61:aa:29:56:c7:1f:35:9f:16:36:27:dd:04:16:
3b:56:d0:da:45:17:83:61:88:ab:19:71:98:49:a9:
47:2b:68:bb:01:ed:1e:9e:24:1e:c4:bc:ef:61:46:
89:68:bc:92:d4:47:27:11:0e:cb:34:aa:93:2f:77:
51:f3:d1:13:36:f6:da:82:20:e9:51:54:b9:14:f3:
b5:2b:76:97:8a:4e:90:1c:56:96:9f:12:16:34:0c:
0c:5b:57:ee:f0:0e:d3:97:5b:fc:dc:8a:70:ec:ad:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:C5:5C:97:E5:84:9B:BD:F5:EB:32:08:18:F9:A0:B7:F9:AD:9A
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f6:37:ed:da:9e:53:58:bf:d3:0c:77:8e:bb:e1:88:fe:bb:
62:1f:b3:59:71:ba:75:2d:56:f1:d6:32:cb:ac:13:83:08:67:
cd:46:0d:ef:dd:20:3b:ad:9a:6c:78:6b:95:b1:46:e6:cd:b4:
d5:3b:a4:8e:f8:16:af:c2:f2:b2:e3:3d:65:7c:0e:cd:6f:d7:
64:b5:ec:33:42:3f:f5:0c:e0:e9:de:40:27:bb:49:6b:08:18:
b3:16:9f:ca:3a:66:f9:fb:25:f1:2c:83:8a:73:3c:90:48:9f:
13:1b:a7:27:37:71:24:da:ca:00:be:3b:9b:50:f8:b4:15:40:
54:04:4b:37:81:d2:96:97:f7:bc:04:59:38:3a:76:d7:61:01:
a2:1e:4f:6c:1a:c5:55:1a:b5:ed:c8:34:75:67:e0:f9:fa:cd:
5a:c2:10:65:1b:dd:10:67:76:7e:4c:6d:e3:2f:cf:50:b1:06:
82:77:32:51:5a:ac:c6:be:0f:ba:f6:64:b0:6d:fa:3b:89:81:
f6:1f:00:ce:89:0c:8c:d3:4e:a9:af:7d:33:f6:62:fb:79:08:
6e:01:fa:0f:9c:8a:e5:bb:a9:cd:ce:04:17:9a:d0:0a:e8:38:
dc:6c:6a:9b:58:7c:6f:27:53:fe:0d:5e:11:5c:7b:5f:16:16:
82:99:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:30 2026 by rpki-client