Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
File: O4RSPDky4tGYBGI0uWLg3FGr9YY.mft (raw, json)
Hash identifier: n3niLNYtQCotoXAYqmDJ+1SA7KP+lI+czlsYwIkj0ro=
Subject key identifier: 8C:79:94:C1:CC:5D:B3:2F:2F:0C:2D:A6:47:E6:70:AF:85:A9:1F:91
Authority key identifier: 3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
Certificate issuer: /CN=3b84523c3932e2d198046234b962e0dc51abf586
Certificate serial: 019D386646C00B6D49253A20F9A7C1DA489A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:02:00 +0000
Manifest this update: Sun 29 Mar 2026 07:02:00 +0000
Manifest next update: Mon 30 Mar 2026 07:02:00 +0000
Files and hashes: 1: O4RSPDky4tGYBGI0uWLg3FGr9YY.crl (hash: 6yraIs05PaENbUGYTh+7k4ApSPTneLNJfp9PwEJDQp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:46:c0:0b:6d:49:25:3a:20:f9:a7:c1:da:48:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b84523c3932e2d198046234b962e0dc51abf586
Validity
Not Before: Mar 29 07:02:00 2026 GMT
Not After : Mar 30 07:02:00 2026 GMT
Subject: CN=8c7994c1cc5db32f2f0c2da647e670af85a91f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:61:d0:67:e6:68:f2:5d:a9:a9:39:bf:6f:
2b:a2:e7:aa:fb:6f:9a:06:a9:38:d2:5c:b6:17:79:
c0:f1:56:96:22:ec:08:c1:c1:0a:e9:ca:69:15:cd:
85:83:05:ce:4a:56:9a:49:9b:2c:69:e5:42:e8:b7:
64:c5:18:4a:f1:88:53:d7:85:f2:94:72:a1:5b:97:
e6:8c:7d:16:a1:7b:10:47:20:96:d7:f4:54:f9:bf:
8b:a4:61:42:05:78:6c:d9:d3:e9:94:a0:32:64:a5:
10:97:b3:86:db:17:ce:40:2a:be:b5:f6:32:03:06:
a2:c2:44:33:55:de:ea:bd:f5:4d:de:ab:3e:32:22:
9e:6c:d7:29:c1:e8:68:a8:dd:f7:90:b7:f2:fa:0e:
25:25:50:a3:fe:22:5d:db:27:ce:5a:d8:16:d6:89:
70:6e:3c:ee:bf:d3:4d:81:a0:28:4b:ae:b8:b7:16:
d2:7d:dd:0f:cf:63:38:00:b1:36:13:23:b3:2c:53:
c1:4f:f6:2e:6c:ac:1e:25:24:69:60:12:36:92:69:
ed:ed:58:3e:41:05:93:3d:40:18:b2:40:e0:91:f0:
01:57:b6:48:37:ee:c9:fb:a5:20:63:29:82:a3:57:
b8:64:db:f7:23:81:c9:02:e2:9b:1d:c5:ee:07:a8:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:94:C1:CC:5D:B3:2F:2F:0C:2D:A6:47:E6:70:AF:85:A9:1F:91
X509v3 Authority Key Identifier:
keyid:3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:03:3f:ad:97:0c:21:cb:26:49:14:87:5d:4f:b0:94:f4:36:
e7:54:25:93:2d:15:1b:61:95:a8:cd:34:7f:e4:dd:82:23:28:
a4:2b:d4:83:3b:87:f6:96:7c:d0:77:24:7b:0b:69:82:e1:70:
33:2c:14:15:d7:5b:ac:6c:18:27:bc:ad:93:db:69:ca:ca:eb:
09:84:15:f6:03:34:22:d1:79:2d:5b:e0:ca:eb:a6:b6:f7:be:
d9:19:ba:ba:be:2e:83:1b:25:bf:c9:ee:0a:a6:9f:fd:10:be:
7e:07:1a:3f:31:57:06:52:2d:f5:b8:cf:3e:c0:97:32:43:42:
bb:e7:aa:98:69:0f:9f:fb:8b:ae:e1:20:90:60:43:6d:70:80:
7c:20:95:2c:ef:ee:05:f1:a3:33:3b:9b:78:7a:e9:d6:e6:d4:
9f:40:30:36:46:bb:f9:a4:75:ab:cb:f7:7d:09:7e:01:24:26:
05:73:14:82:8c:d9:77:87:1c:23:42:f6:e4:2c:d9:32:05:4e:
0e:3a:5b:24:f4:e2:18:76:94:18:7d:60:1f:ef:c7:d3:27:ff:
31:22:27:34:c4:db:67:82:42:ca:df:1d:60:d8:da:1d:16:8f:
6f:3c:27:cd:a6:3c:74:30:10:6c:90:9b:ff:1a:a6:fd:c8:f5:
2a:62:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:04 2026 by rpki-client