Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
File: O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft (raw, json)
Hash identifier: Jdw/gR3GN2gZZat6UNmaOG1BERJCKTASFbX1GQJL4NI=
Subject key identifier: D7:CF:E4:17:8D:CF:19:F6:68:EF:A6:05:0F:70:FA:40:79:28:62:AA
Authority key identifier: 3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
Certificate issuer: /CN=3bee6066bb652c648c7a87099d0d9354546060d3
Certificate serial: 019D28BBDB48B3D7D70C5935DE1F32222D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:33 +0000
Manifest this update: Thu 26 Mar 2026 06:01:33 +0000
Manifest next update: Fri 27 Mar 2026 06:01:33 +0000
Files and hashes: 1: O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl (hash: d3kPPaeJcw+Ms5DnUy1Z1R/vLrAvQfTXVFoJjMQEB94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:db:48:b3:d7:d7:0c:59:35:de:1f:32:22:2d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bee6066bb652c648c7a87099d0d9354546060d3
Validity
Not Before: Mar 26 06:01:33 2026 GMT
Not After : Mar 27 06:01:33 2026 GMT
Subject: CN=d7cfe4178dcf19f668efa6050f70fa40792862aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:8a:d7:95:87:90:69:7e:9d:4a:b0:a0:54:
76:f3:2f:fe:d6:b6:22:ff:48:c4:2c:c6:6b:5c:29:
17:e3:e9:55:20:25:28:0d:7f:48:50:0a:5a:21:65:
4f:df:cd:f4:ba:fc:ed:bc:3a:b9:2f:a1:53:ce:f2:
14:26:74:88:4a:e5:33:6d:85:94:a6:d8:9b:c5:f3:
b2:52:be:a9:2c:2b:df:29:cf:fb:c3:64:04:02:2d:
12:4c:82:c3:2d:c3:7b:5a:65:4e:c3:62:cf:2e:f2:
4e:b3:9c:a2:ff:a1:8d:a0:09:e6:0e:16:a8:40:2a:
1b:6f:0a:93:19:35:54:fa:0e:ca:5d:df:87:b1:e3:
84:1a:76:7e:f4:ad:64:a7:53:9b:ca:dc:c9:66:e8:
12:a9:1c:bc:57:52:b7:fe:05:7d:36:05:f7:95:01:
0b:06:0f:4d:4d:8d:38:2b:e7:06:65:dd:f4:bb:bf:
44:7d:20:0a:c2:fe:8e:39:81:05:b4:96:38:4f:31:
57:48:3c:0d:d9:5c:30:23:42:df:e2:87:27:a8:17:
99:e7:41:c1:92:26:2a:b1:b2:d7:0e:99:b6:e0:fc:
95:d8:8b:ab:54:af:97:76:d3:4f:7c:8e:d6:fa:94:
69:08:53:24:32:d8:32:22:a8:29:63:27:30:75:91:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CF:E4:17:8D:CF:19:F6:68:EF:A6:05:0F:70:FA:40:79:28:62:AA
X509v3 Authority Key Identifier:
keyid:3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a2:da:be:49:7b:70:db:ce:68:7e:73:42:43:9a:3d:63:32:
c1:27:ee:29:11:32:03:5d:c3:1a:97:96:73:99:47:f8:5a:f0:
68:19:8b:a9:39:9d:a2:68:c4:a7:80:98:93:cd:9c:5e:03:a6:
4b:5f:90:31:99:6b:24:01:5f:c7:3b:e9:f6:38:09:64:8c:4f:
44:c9:fb:01:98:b9:83:a3:58:82:7f:e1:25:30:12:d9:77:a9:
86:65:7e:31:d4:40:03:15:c8:7a:6d:75:3f:1e:e1:82:0f:08:
03:73:c6:20:2f:b6:79:59:1e:73:d0:44:73:94:b5:62:cc:b9:
86:2f:7a:ed:00:14:f9:27:48:e8:9d:70:9c:40:70:a9:c5:bc:
5b:3d:9d:67:12:fa:c9:a0:1e:6e:03:b0:d2:15:6b:ed:5b:f6:
c0:f1:ed:df:fd:30:81:47:23:43:a1:c5:e3:ff:06:c1:83:fc:
8b:52:66:e8:ae:cd:e0:5b:2e:c6:4e:93:eb:f8:2f:ea:fc:03:
32:c3:38:eb:0a:fe:d6:23:e8:23:a6:d3:63:5d:85:53:eb:a6:
52:01:b2:f6:46:01:c8:03:80:5c:84:6a:21:fd:1f:af:8a:54:
9d:4f:7e:ce:5d:df:eb:0c:15:1d:a6:6f:c0:d8:a9:47:5c:17:
6f:c2:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:23:39 2026 by rpki-client