Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier: k353S9gHOF6MNgv5bl1PMxg5pCqMxkyQtiibHWrlCKA=
Subject key identifier: 3F:6A:F5:EE:0C:EC:FF:BD:88:70:F4:B5:31:7C:3F:9A:E5:C3:84:B3
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 019D292947C8F1D9BBADEDA6ACF4A7E4E8B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number: 1158
Signing time: Thu 26 Mar 2026 08:01:04 +0000
Manifest this update: Thu 26 Mar 2026 08:01:04 +0000
Manifest next update: Fri 27 Mar 2026 08:01:04 +0000
Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: v11EZHrWsqH/Ts5pvghXPn3lvT/blpjRS/b1oPpIvnE=)
2: VKdoGfLRpSy-iS0ByTtLZ3OIUZI.roa (hash: GLPIQNk9SF4ckQrOTlAnl4nPM7oMaUINPgb3JIgnuFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:47:c8:f1:d9:bb:ad:ed:a6:ac:f4:a7:e4:e8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Mar 26 08:01:04 2026 GMT
Not After : Mar 27 08:01:04 2026 GMT
Subject: CN=3f6af5ee0cecffbd8870f4b5317c3f9ae5c384b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:32:47:91:71:30:f4:6e:cc:68:bf:ad:b4:
76:bc:57:db:60:55:5b:5a:e7:3a:9d:b5:26:b0:e5:
3d:a6:1f:d0:6d:73:80:d7:4e:94:11:07:57:74:81:
c0:bd:9c:ca:0b:ce:c8:bd:bf:59:1e:15:45:3b:64:
0f:a9:72:3c:6c:59:fa:3e:88:4b:b7:27:b2:5a:ba:
b1:0d:4a:77:06:8b:d3:31:cc:db:60:00:10:8b:11:
f5:61:2a:dd:a1:cf:55:ce:7f:cb:55:cf:25:7f:d6:
f8:62:ec:40:27:38:bd:5d:f9:8a:99:0f:29:1c:c8:
31:e1:af:c6:6d:2d:57:29:1b:5d:ec:bc:33:f4:ec:
59:c9:a5:26:29:9b:3a:91:22:b2:c8:a2:8c:c5:05:
a9:1b:66:83:ad:21:32:da:04:fb:cc:0d:4e:15:8c:
a8:60:dd:9d:ee:de:5f:c3:2d:b5:c2:0f:ee:52:dc:
85:d1:fe:5c:f6:d0:16:6b:d6:04:bf:5a:a3:90:20:
50:ca:23:8b:2d:3f:44:7b:06:1f:a6:67:12:b6:f3:
c3:19:f9:9d:50:44:a5:aa:c4:c2:bd:8a:2b:58:5b:
99:8a:7e:8e:f0:12:a4:dc:2e:a1:63:ef:b9:fe:2e:
b8:0f:59:24:ef:d9:55:4c:25:03:75:ca:b2:9b:15:
64:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6A:F5:EE:0C:EC:FF:BD:88:70:F4:B5:31:7C:3F:9A:E5:C3:84:B3
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:33:3a:14:22:5b:57:89:11:89:d2:0a:f6:cc:fb:ed:cf:51:
8e:bb:7b:9d:46:00:be:6f:23:84:8d:a5:5b:f3:b5:81:63:57:
44:c8:0b:9c:48:3f:ab:5f:5a:fe:19:9a:ea:ae:f7:6a:1e:91:
74:67:a7:ac:12:a9:d9:39:64:a1:38:96:c9:19:83:cc:bc:56:
80:7f:1a:01:82:6c:dd:b8:a5:d2:34:02:28:7e:8a:da:35:aa:
b6:d7:84:3a:0a:70:7c:cd:fb:29:b9:14:63:e1:43:95:08:a7:
47:07:3d:aa:ea:11:09:dd:ca:86:97:ee:db:75:d7:9b:4d:cb:
39:1f:d3:45:b9:53:8f:ef:2c:15:37:03:f2:c1:79:e3:53:82:
17:e6:96:01:83:e1:de:dd:4a:a8:1e:a4:d2:68:2d:d9:4a:56:
95:f7:90:d2:88:7a:80:e6:66:29:aa:9f:6c:a6:51:39:d7:30:
7a:cf:e7:50:1a:8f:97:13:18:6e:c5:ec:4a:0c:32:39:aa:a6:
05:55:e9:c6:57:32:7e:a1:9e:30:f4:72:b1:7b:1e:c1:e4:40:
b3:9f:db:7e:9c:dc:bc:91:b0:15:44:08:a7:d2:3a:e5:ba:ed:
ee:11:5d:48:bf:2f:ba:fb:94:89:b5:26:a1:86:aa:23:a6:0a:
df:e5:22:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKUfI8dm7re2mrPSn5OizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYmJiMWY1ZDk4NjY2OGFiM2JkNDdjZDE4YzVmYjFlZmQy
NDliMDQwHhcNMjYwMzI2MDgwMTA0WhcNMjYwMzI3MDgwMTA0WjAzMTEwLwYDVQQD
EygzZjZhZjVlZTBjZWNmZmJkODg3MGY0YjUzMTdjM2Y5YWU1YzM4NGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHAyR5FxMPRuzGi/rbR2vFfbYFVb
Wuc6nbUmsOU9ph/QbXOA106UEQdXdIHAvZzKC87Ivb9ZHhVFO2QPqXI8bFn6PohL
tyeyWrqxDUp3BovTMczbYAAQixH1YSrdoc9Vzn/LVc8lf9b4YuxAJzi9XfmKmQ8p
HMgx4a/GbS1XKRtd7Lwz9OxZyaUmKZs6kSKyyKKMxQWpG2aDrSEy2gT7zA1OFYyo
YN2d7t5fwy21wg/uUtyF0f5c9tAWa9YEv1qjkCBQyiOLLT9EewYfpmcStvPDGfmd
UESlqsTCvYorWFuZin6O8BKk3C6hY++5/i64D1kk79lVTCUDdcqymxVkOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9q9e4M7P+9iHD0tTF8P5rlw4SzMB8GA1UdIwQY
MBaAFDu7sfXZhmaKs71HzRjF+x79JJsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAt
YzExN2YyN2JhOWMwLzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9jZWRlMGQtMDI3Zi00NWFkLTg0ODAtYzExN2YyN2JhOWMw
LzEvTzd1eDlkbUdab3F6dlVmTkdNWDdIdjBrbXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTM6FCJb
V4kRidIK9sz77c9Rjrt7nUYAvm8jhI2lW/O1gWNXRMgLnEg/q19a/hma6q73ah6R
dGenrBKp2TlkoTiWyRmDzLxWgH8aAYJs3bil0jQCKH6K2jWqtteEOgpwfM37KbkU
Y+FDlQinRwc9quoRCd3Khpfu23XXm03LOR/TRblTj+8sFTcD8sF541OCF+aWAYPh
3t1KqB6k0mgt2UpWlfeQ0oh6gOZmKaqfbKZROdcwes/nUBqPlxMYbsXsSgwyOaqm
BVXpxlcyfqGeMPRysXseweRAs5/bfpzcvJGwFUQIp9I65brt7hFdSL8vuvuUibUm
oYaqI6YK3+Ui/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:42 2026 by rpki-client