
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
File: O-U4LPdsHE8EZFTfy45VXMlJXIA.mft (raw, json)
Hash identifier: 5u98z285TiBbQxo5RxeezeYCdaKF5V8oWSClEj2jJXY=
Subject key identifier: 6B:F6:F9:CA:5B:B9:0F:FE:83:94:09:B3:4D:BF:51:B4:82:B2:68:AE
Authority key identifier: 3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
Certificate issuer: /CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Certificate serial: 019D37897297F5FE4F6CEB78B2212D37009B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
Manifest number: E6
Signing time: Sun 29 Mar 2026 03:00:47 +0000
Manifest this update: Sun 29 Mar 2026 03:00:47 +0000
Manifest next update: Mon 30 Mar 2026 03:00:47 +0000
Files and hashes: 1: 0UiKB-W2Swet4yZkwt-cEISTHm8.roa (hash: 21qXUq6giXIzo60sm+LjiePUKIsWVBi36a4kVBUwoeE=)
2: O-U4LPdsHE8EZFTfy45VXMlJXIA.crl (hash: TG10UNKF3idD4iWwXRRmZg2EbloHlFmGa1KpapPbJG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:72:97:f5:fe:4f:6c:eb:78:b2:21:2d:37:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Validity
Not Before: Mar 29 03:00:47 2026 GMT
Not After : Mar 30 03:00:47 2026 GMT
Subject: CN=6bf6f9ca5bb90ffe839409b34dbf51b482b268ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:c7:d3:fd:e6:30:47:4a:bc:39:6c:7d:6f:
04:14:44:c9:37:0d:98:91:8c:31:32:b4:eb:6b:de:
22:d5:e2:ed:77:09:85:6e:70:80:fe:30:74:d4:50:
d9:19:d8:23:14:f4:1c:1f:0a:04:36:5f:93:1f:4b:
8d:bc:ed:6f:a6:3e:59:53:b6:cc:00:78:52:ee:49:
fa:87:bb:2c:36:5c:ae:7b:9a:0d:3d:64:0a:36:1b:
b9:f4:a4:a5:72:74:4f:0b:4f:28:6f:98:db:5c:ec:
b9:86:e2:7b:bb:bf:42:e4:db:a1:67:92:3d:72:4a:
38:55:6f:8a:1f:72:79:6a:e4:96:67:47:d8:b6:bd:
8b:b5:be:ad:67:12:9f:78:02:d8:8d:db:b7:6b:0e:
29:10:d7:1f:25:be:b6:02:f0:de:44:88:66:d9:60:
58:cd:11:67:9b:28:ab:9f:85:07:08:a3:ea:fb:66:
36:86:ce:ed:3f:62:79:ff:77:b4:38:1a:2e:ff:b3:
a2:da:61:47:3a:1e:40:75:9a:e1:82:85:58:3d:d8:
90:75:3d:ec:b1:60:69:5c:61:a0:fc:bf:dc:cd:a0:
20:13:fe:f9:48:e0:de:5a:24:c1:0f:14:e1:8c:9a:
19:8b:f9:16:6f:40:27:c4:93:7d:85:3c:9b:47:3b:
f0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F6:F9:CA:5B:B9:0F:FE:83:94:09:B3:4D:BF:51:B4:82:B2:68:AE
X509v3 Authority Key Identifier:
keyid:3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ba:0e:20:69:11:91:bf:f5:99:8c:7b:85:7c:7c:f2:1e:62:
c7:b9:f1:9c:f0:8c:1a:54:bf:23:e9:6b:90:4e:6b:38:24:01:
32:c6:89:fc:be:1c:b3:4a:87:51:00:8b:7d:df:94:59:37:26:
09:48:5f:c8:6f:5b:22:9d:f5:e5:b7:fd:3a:20:78:36:41:00:
a4:0f:ec:34:9a:80:92:d6:cf:56:97:14:f2:65:ea:16:f2:c5:
3f:7f:b6:c1:1f:17:14:eb:e0:aa:f7:8d:ff:ab:ad:92:51:71:
70:d1:09:68:c8:19:ec:c9:9d:53:81:30:c0:73:54:4b:2d:c3:
c4:5d:34:aa:58:0a:fc:51:1c:85:26:2f:64:c5:f4:c3:e7:a8:
9a:b4:68:3c:09:26:a6:69:cf:10:03:34:55:c0:23:e1:bc:43:
ab:3e:ea:3a:85:e6:8b:60:12:f5:c6:8f:c7:b0:c6:b7:07:4a:
ba:62:3a:1f:2c:72:9d:62:bc:25:6e:09:a2:86:7c:91:99:44:
f0:44:28:50:2a:4c:92:87:6c:f7:74:13:07:c6:3e:d1:7d:9b:
ad:be:fb:5f:92:1a:12:3a:7f:4c:d5:83:01:b3:1b:b8:d5:60:
eb:89:e0:14:2c:31:da:cd:64:71:79:31:67:c1:79:53:e8:a6:
2c:63:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:04 2026 by rpki-client