Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: Z5KdgArSl1VirGobBGk1YHie3KgIIKOhdSJF9k5TPEo=
Subject key identifier: C7:B6:79:81:B6:F1:EB:0F:79:FC:6E:07:4D:E9:E8:95:91:B8:52:E2
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019CE7EDCF21EC742BD176812EABBF4ED812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 16:00:47 +0000
Manifest this update: Fri 13 Mar 2026 16:00:47 +0000
Manifest next update: Sat 14 Mar 2026 16:00:47 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: N169pHCz+YN751BBnUIfdK0vKgUTq0V8GgDKVdkBZAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:ed:cf:21:ec:74:2b:d1:76:81:2e:ab:bf:4e:d8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Mar 13 16:00:47 2026 GMT
Not After : Mar 14 16:00:47 2026 GMT
Subject: CN=c7b67981b6f1eb0f79fc6e074de9e89591b852e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:71:9c:2f:c6:10:f5:2f:32:5f:f7:5d:9a:
eb:ed:bd:bc:a4:96:25:01:57:94:18:eb:26:ec:15:
07:95:92:6a:b0:de:1a:88:96:99:d9:cf:67:f7:56:
2f:ae:00:81:c4:1b:f5:1f:2c:48:d8:a7:1a:3c:00:
1e:25:7c:bf:8c:05:32:c2:21:be:ac:c0:73:7c:b0:
91:1c:fa:4d:c0:57:a9:4e:08:3c:f2:da:96:82:0c:
98:d2:fe:0d:73:ef:d2:24:b8:2e:02:73:39:15:1a:
d7:1d:38:9c:c2:ed:7f:64:75:6e:89:6d:a0:db:8b:
8f:8a:8d:59:9a:ce:36:fd:0b:3d:69:64:05:88:f3:
76:a5:c6:21:6c:fb:a6:9b:40:e6:0e:5e:6a:35:59:
f3:98:06:7f:5a:c2:ac:5f:4a:bf:b1:10:a9:a0:c4:
0e:69:77:c5:f2:62:34:f0:07:31:4a:63:77:6e:49:
71:cf:49:c8:0e:45:b6:d8:a1:bf:74:5f:60:81:0b:
f5:ca:1e:78:3e:f8:6b:a4:31:33:cf:77:dc:89:5b:
58:18:ad:ff:03:87:c6:a0:c1:5c:fd:42:82:b3:da:
56:e1:5f:ea:e5:ce:73:f5:86:34:53:6b:c3:51:81:
c5:07:89:b8:22:a0:5e:17:8a:22:ca:d6:3a:54:8f:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B6:79:81:B6:F1:EB:0F:79:FC:6E:07:4D:E9:E8:95:91:B8:52:E2
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:72:cf:4d:da:b0:db:71:e3:14:ea:98:de:e5:db:e2:62:ae:
3b:33:cb:3c:95:a0:7b:e0:34:8a:d1:c4:05:c9:07:1a:39:c5:
36:ce:9e:50:d3:e3:98:0e:43:8e:9b:d6:00:42:a0:01:1e:87:
80:91:df:2a:18:58:ff:76:09:c6:7f:7d:1a:fa:0a:6d:9e:75:
a4:3c:91:2a:a9:11:32:c5:57:d6:d1:c6:7f:69:2f:2c:a5:a3:
1d:35:2a:a8:8f:46:23:f8:7f:5e:d4:51:25:72:c7:df:8c:4f:
4f:9a:2e:0a:36:33:77:0b:7b:c6:cb:4a:63:21:12:70:24:01:
59:0f:f2:bb:a0:e2:0e:fa:00:4e:ea:bb:48:d7:bf:40:22:4f:
8e:d4:45:2f:6a:8b:8f:de:6b:75:0b:8d:7f:63:d8:8b:d8:fc:
2c:1d:30:62:e2:e0:01:40:59:5d:39:8b:8e:87:4d:9e:29:92:
36:27:c9:d3:32:99:f6:d5:8a:96:e2:35:e3:eb:e9:5a:ad:53:
91:17:85:9f:58:15:e1:ef:77:5d:0f:b2:32:6b:65:0f:d4:b9:
e8:8e:29:40:20:e6:6f:52:73:62:1e:d2:42:0f:26:b7:f8:48:
ae:df:77:93:71:a0:86:9e:fc:99:5d:b8:4e:9f:42:f7:94:aa:
a8:c9:1b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:50:08 2026 by rpki-client