Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier: 5jPDj3vr+C8vhMH3tmX5MQHCt6eQ8mq+2pRrS8jIob0=
Subject key identifier: CA:A8:5F:BD:27:88:D3:38:50:37:BA:98:A1:50:A2:C2:00:7F:D4:C6
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 019CB324FD89886483BFD2FAF01A2E8C1C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number: 0D44
Signing time: Tue 03 Mar 2026 10:01:11 +0000
Manifest this update: Tue 03 Mar 2026 10:01:11 +0000
Manifest next update: Wed 04 Mar 2026 10:01:11 +0000
Files and hashes: 1: E7N3AbX4XRe6TtepW4IKz_xhbuk.roa (hash: T0P6XuI3QLOIzu4AgydenL9szcYBu2vZyoMNm8nvA0Y=)
2: HglIl2BwTY2fpCe5GwP5ysjNj7Y.roa (hash: aHBtaErkZmaBHVd9P0AYZA/rEH87fSJk4r+cxPYL8Fk=)
3: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: HsobmTVviZW4UsbDTlp8k2Rc6E3UIX4o8G5h/V8+vMs=)
4: iTmeATvkhdaQSx1hi5nnHidew6A.roa (hash: IYi+E84wN5bo5fjg0rwOe7narncl8RETFzc0nw+a92c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:24:fd:89:88:64:83:bf:d2:fa:f0:1a:2e:8c:1c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Mar 3 10:01:11 2026 GMT
Not After : Mar 4 10:01:11 2026 GMT
Subject: CN=caa85fbd2788d3385037ba98a150a2c2007fd4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:40:25:80:59:c1:cd:80:c9:cc:4d:89:0c:
21:82:21:34:37:3b:21:fd:a4:ed:c3:62:74:95:72:
aa:d0:c8:9d:61:6a:1a:79:a2:45:83:1f:55:0d:24:
d5:2a:28:7f:9b:e4:2d:6d:fa:cd:8a:df:f3:a0:db:
58:0f:ab:e5:6a:62:31:ee:07:af:89:8e:d3:7d:da:
7a:90:60:1b:b1:eb:b5:c2:d0:86:c9:90:ed:1e:18:
6d:19:23:36:80:2e:61:ed:de:57:a4:5a:e8:d3:d7:
a8:b2:fc:94:3e:17:83:c7:e4:68:be:6a:50:1c:94:
15:bf:5c:97:b1:a9:b8:62:f2:b1:23:a2:d4:4b:d2:
9a:a1:0e:64:1b:4c:64:7c:34:5e:60:b9:05:55:b2:
86:33:86:a1:ff:2a:d5:39:8e:1a:1c:5c:0c:06:00:
d8:55:6f:7b:b2:d3:0c:dd:42:9b:8e:54:15:6d:32:
63:74:a0:db:20:a8:a1:63:c7:1d:22:8d:d8:dc:d1:
8d:98:cb:b8:b4:6e:34:cd:7f:2a:1d:9c:16:ac:7f:
8d:d4:5b:9e:e3:3c:ba:c5:fc:d6:5b:d0:e0:4e:0e:
44:e6:8f:d6:f0:dc:84:34:3f:2d:a5:ba:66:6e:26:
10:fe:02:ce:73:aa:6a:ac:9c:c3:f1:ef:fb:a2:28:
4e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:5F:BD:27:88:D3:38:50:37:BA:98:A1:50:A2:C2:00:7F:D4:C6
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ad:74:18:00:9f:d2:a7:dc:c6:c1:44:dd:63:6e:1d:00:97:
4c:43:6f:35:0d:ad:8b:05:36:35:96:2f:93:58:1b:e5:70:df:
83:9a:ec:3b:92:80:40:64:6d:6d:03:5f:28:e1:9b:a3:86:a8:
b5:23:85:0d:90:74:09:30:eb:ce:db:8f:35:29:92:9d:57:72:
e2:36:9d:52:b4:21:e9:d4:4a:be:d9:02:d4:40:24:5b:1e:4e:
37:03:98:d5:44:a3:cc:3f:18:c4:9f:58:40:91:d0:92:68:4f:
77:6e:e0:95:07:56:cb:ab:8b:23:fc:a0:63:58:5b:9b:73:67:
e8:23:22:20:24:18:ed:d6:4a:50:ba:8f:50:9a:bb:4b:00:b8:
92:34:e2:fb:55:d1:16:7e:f6:d7:53:1f:39:8e:7f:7d:31:ec:
20:9a:a7:55:0c:09:39:70:55:86:df:c6:41:94:b4:b3:b1:fa:
94:66:56:e9:7c:57:e8:26:b5:80:65:66:8f:c5:4a:68:fa:28:
6d:72:40:20:b4:93:d1:7a:77:d1:fd:08:02:6e:6a:32:68:fa:
c0:cb:35:53:48:8f:43:bc:be:3e:4f:ff:a4:ae:05:9b:d3:5f:
60:82:ee:b7:ac:5c:77:df:3b:8c:a6:28:0f:e5:4d:1f:76:fc:
f3:f6:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:55:17 2026 by rpki-client