Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: voYYy/uO7Prmv2z9Jqi4sGPmvCQzL9NdkEZBrFPW+qg=
Subject key identifier: 98:D7:FC:AF:72:CE:89:01:EB:CA:12:F2:62:A3:78:C7:E2:9F:F6:46
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 019D38663544B0BA0679C22CF933102B9E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 06E6
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: mrO7jEU8yh8jgn3JvT+753O8WELh/xaDnnf3fp+4m6w=)
2: cJoSZCFXqDtUSGkR6NyIWGdWJ5c.roa (hash: +4bfJl1WilU4FwTMIun4/VtCPiBZ9GR88vkRCY6T3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:35:44:b0:ba:06:79:c2:2c:f9:33:10:2b:9e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=98d7fcaf72ce8901ebca12f262a378c7e29ff646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0c:de:49:40:59:fe:0e:99:61:cb:52:a8:00:
e8:6a:61:a2:d2:9f:de:5c:8c:0b:6c:97:f1:8c:29:
e7:6a:11:70:e4:77:89:96:f5:81:4a:be:5a:1d:e4:
53:fb:23:13:16:ea:cc:1e:b5:cf:1a:a3:b4:44:d6:
76:7a:8d:e6:9b:a3:6d:62:eb:d3:16:74:e2:b5:2b:
73:d9:3e:10:ce:c0:9f:23:ad:65:84:5c:e3:91:60:
f6:4f:6f:8b:e5:9f:12:44:66:75:7c:5a:4c:2b:66:
03:69:a1:f2:21:85:0b:e6:55:e2:b0:3d:21:81:a3:
08:2b:78:16:e5:18:91:f7:ff:d3:00:5b:1c:bb:7f:
2d:79:6f:49:bf:73:02:52:27:e3:91:3a:67:33:d8:
69:b4:c9:e5:5a:6f:d0:8d:af:0b:33:9f:e5:d3:69:
af:ab:cd:32:74:a0:9c:e7:7a:9e:1a:bd:6a:96:03:
3c:83:f4:22:d3:84:ef:4d:33:4e:03:42:a1:c0:4f:
13:7e:0f:d3:04:76:39:75:c3:1e:e6:1b:4b:62:fc:
11:43:9b:b6:6e:fb:04:3d:76:63:70:3f:71:6f:fe:
32:69:66:28:63:65:d8:2d:7c:c6:72:a1:4d:dd:7a:
5d:30:6e:3c:c3:53:6c:e2:c8:19:4c:08:9b:9e:d9:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D7:FC:AF:72:CE:89:01:EB:CA:12:F2:62:A3:78:C7:E2:9F:F6:46
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:84:19:90:ad:d7:4f:80:75:c4:89:d1:bc:1d:4e:1f:75:a2:
e7:78:34:2f:c6:25:b5:06:55:9a:f0:b0:0f:32:f5:88:8d:5d:
e8:c9:12:a3:aa:18:1e:1c:a1:fb:3c:3a:a2:d4:48:26:93:b0:
44:cf:bd:3a:44:6a:38:f1:fa:4a:34:a4:7f:eb:61:11:a0:c5:
99:42:64:ce:02:07:84:da:7b:62:d1:a0:64:39:ca:11:fd:04:
ed:bc:9e:f2:f1:7c:69:36:4a:87:18:8a:10:99:ef:a8:2d:3e:
07:15:fd:2b:a3:e0:83:6a:36:fd:d2:1c:2f:d5:31:5e:e0:a7:
5d:84:87:06:04:74:c5:77:fa:ff:e1:04:74:04:8c:aa:3b:fa:
d7:36:78:f6:b6:11:23:fb:63:5a:b7:ec:af:7c:cb:86:b1:45:
2e:60:e1:86:d0:91:e0:63:64:23:8f:29:ab:26:66:b9:6f:24:
e1:a3:91:5d:9c:0c:ea:b9:74:36:b0:f1:33:81:b6:13:c8:96:
6e:16:9f:e4:6d:35:98:68:3a:27:b7:2e:88:3d:ca:04:95:c9:
23:3c:93:3a:7a:ea:83:db:82:94:91:e4:aa:27:20:47:a4:30:
1f:e5:1f:c7:4c:cd:c3:62:83:60:a6:32:5e:ec:33:55:9f:e0:
9c:41:45:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:54 2026 by rpki-client