Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: 88jlaPAP04rKPBJ0z4GOMCE/2wFDwS09aWAPUDxKhWs=
Subject key identifier: FB:61:EF:93:80:56:3C:63:C1:53:E1:CC:3C:44:7F:FB:3B:3A:85:36
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 019D27DF5DA7B6CA679DB0A20924E9888D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 0618
Signing time: Thu 26 Mar 2026 02:00:43 +0000
Manifest this update: Thu 26 Mar 2026 02:00:43 +0000
Manifest next update: Fri 27 Mar 2026 02:00:43 +0000
Files and hashes: 1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: II//ENXFpkr3TChqrIY8ePAnWzHQqcYoMNarBVQq/Jo=)
4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5d:a7:b6:ca:67:9d:b0:a2:09:24:e9:88:8d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Mar 26 02:00:43 2026 GMT
Not After : Mar 27 02:00:43 2026 GMT
Subject: CN=fb61ef9380563c63c153e1cc3c447ffb3b3a8536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:95:40:a4:21:55:b0:5d:99:2e:ca:27:0d:
72:de:9c:eb:db:2d:80:f8:20:42:cc:22:70:65:f7:
fd:d3:90:ed:0d:15:1e:78:a3:d7:43:84:24:cc:40:
7e:6b:86:18:4c:37:5c:82:c8:c9:bb:82:a8:bd:6a:
91:67:c6:b3:df:1b:c2:27:eb:c4:13:80:1e:84:f8:
c9:d6:09:7b:7b:de:14:25:50:ee:cb:ec:11:b6:f8:
9e:0f:31:47:f9:ba:7f:93:9f:34:f2:e4:cc:b8:47:
08:b5:dd:70:50:81:1b:6b:52:2b:8c:32:13:b0:53:
c8:4c:c4:f5:58:61:82:ea:5d:45:23:58:7e:99:a2:
63:6d:a0:2d:80:d4:ef:56:56:60:9c:9b:69:7f:48:
ad:c4:07:c4:65:33:5a:d5:80:53:75:c4:c6:30:51:
bf:56:6f:c8:2e:06:19:5e:0f:0b:4e:97:f2:8a:a3:
96:6c:70:ac:0a:35:73:9a:b2:2b:82:06:53:dd:af:
f4:78:b1:35:28:a6:7f:69:c2:55:0f:a5:54:f1:a3:
b5:5e:3f:c3:3a:c4:11:02:f5:d1:10:a9:28:19:7a:
4a:3e:76:a3:bf:c4:8e:e8:4f:bf:b4:42:68:6b:e1:
a2:15:1e:84:dc:36:d4:0e:a8:3d:30:8d:ec:79:e6:
bf:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:61:EF:93:80:56:3C:63:C1:53:E1:CC:3C:44:7F:FB:3B:3A:85:36
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ce:2c:0a:21:d1:dc:ca:b2:3b:ab:04:94:52:62:20:53:49:
b0:a4:c3:c3:89:62:ad:20:ae:ee:b9:53:73:7c:42:10:00:5b:
36:ef:83:81:59:2a:20:24:42:d1:84:59:3a:b0:e5:2b:9a:e4:
44:98:f2:d3:6e:60:de:7f:96:dc:79:ae:1e:ce:cc:b5:92:e5:
96:3a:46:72:57:f4:2e:1e:12:49:86:0c:7e:5b:a2:cf:a2:18:
86:da:52:f1:6f:95:80:63:2a:ee:06:72:b6:5e:04:1f:17:c4:
da:08:78:58:1e:5a:52:14:e0:5d:7b:62:a6:1f:c4:ef:75:9d:
a1:4a:9e:84:dd:aa:2e:41:30:59:40:81:9f:fe:a1:ea:d6:9c:
7c:69:76:91:d6:5f:00:40:40:69:fe:7c:57:5e:da:6a:7f:78:
06:7a:90:47:bc:55:87:54:d6:46:15:7f:97:da:63:69:cc:c3:
fc:4d:fd:c8:dd:fe:bd:4a:2d:3e:6c:31:46:1a:f6:cf:37:9b:
6e:d7:e2:68:18:31:a3:c3:6f:9e:0e:08:6c:8f:03:04:13:6f:
28:4b:70:b9:22:ba:44:d4:bc:9e:ed:8b:36:67:a0:ab:b7:06:
0a:fa:c7:08:45:39:eb:f6:9f:1b:ed:ee:b4:e0:c0:72:bc:ba:
15:f4:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:15 2026 by rpki-client