Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: M/n/MBSZl4uhdUPFZ6Dsc6lybJSg9FY7JjdISb528EY=
Subject key identifier: 4D:A0:26:68:BC:15:A3:05:C8:99:E5:73:B5:24:71:C4:86:ED:A3:19
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 019D38D30F035A4A56C7C364B991782EA3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 0C55
Signing time: Sun 29 Mar 2026 09:00:49 +0000
Manifest this update: Sun 29 Mar 2026 09:00:49 +0000
Manifest next update: Mon 30 Mar 2026 09:00:49 +0000
Files and hashes: 1: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: U+WyAB4sD68a3Lj6kXyaJC6mdWRfl6Rqo2gORoyr7mQ=)
2: _g97Og5G9vKazdZyvUt-VVIBpss.roa (hash: YuLCDVF+kjBYwqyUmxi84DtjJhA7vq/XSNvOonb9Y8Y=)
3: lpaC_L_3Kh3Us_J5PIM5IP-2MB0.roa (hash: 4WQbvnKdlS0s85jQle9ELQNyZdFgg7qqpkEdDrjdCZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0f:03:5a:4a:56:c7:c3:64:b9:91:78:2e:a3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Mar 29 09:00:49 2026 GMT
Not After : Mar 30 09:00:49 2026 GMT
Subject: CN=4da02668bc15a305c899e573b52471c486eda319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1e:13:27:d1:b3:10:2e:1a:34:2c:a6:6f:cf:
f3:4c:71:ce:a7:63:2a:ab:94:48:c3:8e:20:22:34:
34:34:13:8c:83:48:49:48:39:95:ae:c5:45:dd:b2:
8a:04:b3:e3:41:4f:01:45:56:ae:6f:97:ff:e6:ae:
f9:7b:11:42:a7:0c:45:92:9c:7e:18:71:99:45:fb:
ed:32:f0:55:c9:d3:cf:e3:94:69:be:44:0a:8d:bd:
00:5a:af:c9:8b:f9:1d:41:2a:cf:b9:dc:17:c4:b3:
28:49:39:59:3f:90:5a:94:68:ae:14:7d:ab:bc:20:
fe:f8:1e:15:07:47:41:24:a6:c5:4e:09:06:42:e1:
78:53:84:aa:e8:f1:91:9d:9f:dd:32:99:2d:dd:ff:
69:0a:f4:6d:38:62:d0:13:f8:32:74:fc:fb:df:5b:
fc:5f:88:fb:93:81:a6:21:cd:4b:e9:b8:d9:a2:1f:
1d:fe:24:65:95:73:5e:b6:45:5f:b6:b1:0b:1e:69:
d2:f0:31:8a:d0:35:b7:e4:15:1e:aa:cf:d6:ce:54:
26:7b:c2:b2:22:b4:2f:2d:3e:85:ec:58:ad:b4:17:
4f:66:15:87:ed:5b:38:33:72:86:7f:47:e6:3d:90:
fc:46:2c:ee:d3:c9:51:f8:dc:e9:b9:bb:c8:35:6b:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:26:68:BC:15:A3:05:C8:99:E5:73:B5:24:71:C4:86:ED:A3:19
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a6:c4:79:f5:df:21:fe:c6:3b:f8:4b:ca:ed:70:19:f9:00:
31:51:67:cb:ad:df:1e:d7:b5:af:73:5f:5b:56:f3:94:b6:7f:
51:0a:44:c2:38:8f:ce:9f:28:9e:33:fb:c1:6d:5a:ab:11:5f:
21:63:9f:71:d6:10:75:1c:0f:c5:03:52:71:55:3c:5c:35:7b:
a8:c5:f5:7f:98:65:72:b8:dd:46:02:64:e7:2d:b8:11:60:91:
59:34:e8:49:91:3b:ee:29:76:28:d6:90:4c:fc:17:38:62:4f:
5c:9e:4f:3d:7d:b5:69:bb:a5:43:1b:96:58:50:e1:1f:b4:d0:
58:e3:70:ca:42:f9:1b:fc:6f:42:cb:e0:78:39:fd:c7:44:4e:
24:15:85:4d:b7:82:50:29:93:67:5d:2d:5b:63:0f:08:22:4f:
b8:cd:ae:0f:b7:02:21:ac:af:e8:e6:43:6f:0d:25:b8:c2:9d:
0f:d7:0b:0f:2f:a3:59:30:0f:e4:d4:08:8c:79:43:bc:5f:1d:
65:4c:1e:f8:46:48:62:d3:be:d4:aa:22:e4:55:2a:ee:09:f8:
29:df:0d:67:49:aa:74:ab:ce:da:c3:ce:b2:f3:f0:0a:e0:c6:
13:86:31:89:4d:6e:8d:4c:9f:b2:be:cb:35:e8:4c:a8:c8:9f:
ec:cd:4a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:54 2026 by rpki-client