Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: xr9LCvY7KmcWV08BhwcNz6rwAnr8aoWlad+6vm/2E/c=
Subject key identifier: 4C:3D:FC:7D:2F:F1:97:33:B5:3F:CC:B7:A6:BA:86:6C:70:D5:9A:BC
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 019CE5C859183F5F75996BFD64BD50F1F783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 11E3
Signing time: Fri 13 Mar 2026 06:00:38 +0000
Manifest this update: Fri 13 Mar 2026 06:00:38 +0000
Manifest next update: Sat 14 Mar 2026 06:00:38 +0000
Files and hashes: 1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: SwLYdUd5WmBvAMzayC3W0jIDOxid8TwLiI4hho6I8lE=)
2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:59:18:3f:5f:75:99:6b:fd:64:bd:50:f1:f7:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Mar 13 06:00:38 2026 GMT
Not After : Mar 14 06:00:38 2026 GMT
Subject: CN=4c3dfc7d2ff19733b53fccb7a6ba866c70d59abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:44:2a:fa:e3:e7:2f:58:8e:75:91:1f:00:6c:
95:06:6e:b0:f8:70:5f:1e:80:ca:d2:e4:35:33:af:
a8:23:c3:92:db:23:89:cb:95:30:fa:60:58:37:2e:
ca:06:a6:c5:8b:92:e6:d4:25:f9:88:7d:79:bb:ad:
79:14:fb:e3:36:e9:e4:82:53:d5:e4:39:79:2d:0c:
89:31:4d:b2:31:93:ec:e1:8d:4f:aa:68:ce:77:0f:
c2:04:42:55:14:bb:53:da:49:08:f0:6b:94:c7:7b:
a9:39:2e:05:4b:69:84:d5:40:f1:e3:c8:6f:0e:35:
5b:ec:b4:08:c6:87:10:59:c3:ab:6b:9d:dd:23:b1:
c1:48:79:f4:fa:bc:0e:3b:76:7f:37:e8:77:f9:b1:
a1:b4:96:35:b4:80:87:ea:8c:73:50:18:a5:ab:cd:
66:12:f1:88:bb:ca:49:65:2e:5d:a7:be:71:a0:99:
23:39:5a:73:8f:ac:3a:fa:be:c1:15:40:3c:7b:05:
26:f9:69:c2:88:51:f1:7b:7c:9c:18:4a:f7:b9:e8:
13:6c:b8:39:60:2a:08:81:26:8d:cf:86:80:40:9c:
7f:b4:76:ae:59:ff:60:79:5c:f7:89:ae:ac:55:f6:
0d:08:1b:b0:cb:6c:21:49:2c:cf:6d:7b:5b:6e:a0:
34:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3D:FC:7D:2F:F1:97:33:B5:3F:CC:B7:A6:BA:86:6C:70:D5:9A:BC
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6d:5b:77:6e:8d:d4:6d:59:a0:2c:94:aa:df:35:e7:30:d6:
ab:b9:bb:55:ec:ef:65:fd:4c:d8:50:ab:4c:3e:9f:fe:45:2f:
02:ef:b1:bb:49:58:96:88:11:40:5e:83:af:2e:82:af:ce:a0:
e7:52:fd:95:ab:c3:55:6e:4e:67:13:43:8b:ed:30:af:23:e3:
45:60:96:18:7f:07:73:94:d9:04:0f:eb:57:40:ab:98:ed:d9:
a3:a3:b9:18:68:0f:34:fe:9c:b4:a3:6a:35:54:82:61:32:85:
24:77:7e:43:41:29:05:c5:ac:0c:3b:d7:81:43:d0:0f:56:ac:
5e:5a:5b:68:22:4f:32:78:a0:22:7c:fd:23:a5:d7:0c:0b:c7:
ef:bf:b7:10:7d:bb:86:7d:5e:05:94:db:2e:eb:79:c3:b0:2f:
c2:22:bc:cc:97:d9:a5:60:f0:07:ae:fa:1d:49:56:5d:5c:ce:
fc:de:86:1f:14:e4:1a:33:a9:c8:85:6a:2c:7c:0c:f5:09:aa:
94:4c:3c:d5:93:ad:54:56:31:04:43:79:01:c3:80:55:9e:25:
92:45:a8:11:d0:d2:5f:23:a1:66:1e:bc:ff:88:af:61:d6:2a:
02:a6:ac:f6:d7:7b:44:3e:f9:cd:99:29:99:77:80:85:60:1f:
2f:d3:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:39:59 2026 by rpki-client