Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier: lZET4p7Ik9AXMzUXaVSe7da0ShkklAdgiV615Vogzck=
Subject key identifier: CA:A3:A4:2A:69:24:65:04:E9:EC:95:E8:ED:6A:7B:7E:55:E8:85:AB
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial: 019D270467E7DDA5F8CA1BDA3136C129CE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number: 0DDE
Signing time: Wed 25 Mar 2026 22:01:33 +0000
Manifest this update: Wed 25 Mar 2026 22:01:33 +0000
Manifest next update: Thu 26 Mar 2026 22:01:33 +0000
Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: 01lvzizFTVkjCSkngGNlfk9IgYOE3adQ7KD4dZaHcKo=)
2: haiqd0uROE9igzZ6U-8DLmT0_wo.roa (hash: zy3b1gRK2HZuT5n0a04wvFSWWQ7+eD23DEYn7FkuZuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:67:e7:dd:a5:f8:ca:1b:da:31:36:c1:29:ce:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Validity
Not Before: Mar 25 22:01:33 2026 GMT
Not After : Mar 26 22:01:33 2026 GMT
Subject: CN=caa3a42a69246504e9ec95e8ed6a7b7e55e885ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:8d:1a:f2:3b:4d:73:ea:37:cc:68:d7:bb:
e5:fb:c8:c2:59:27:3d:c9:a6:10:f1:33:16:fb:58:
13:91:3f:3e:c5:98:ac:9f:cf:5a:78:d6:18:17:fe:
b2:c8:0f:5b:f8:84:aa:ab:3a:64:4e:e8:6e:21:0a:
ae:85:f7:54:4d:24:1d:d5:ce:47:41:d5:73:36:84:
47:f8:35:cb:f9:31:d0:78:8e:bf:46:3d:79:19:d8:
aa:3a:bc:0a:8c:79:af:d1:40:16:70:78:3b:67:dc:
4f:f7:0f:0a:35:ae:bb:55:02:b0:0c:b4:84:55:bf:
da:8b:de:06:2b:ef:64:84:42:55:8f:6e:29:ef:ff:
e2:d6:bf:4f:4f:01:8d:23:ad:71:80:56:09:f4:6d:
ce:df:ce:55:69:07:3c:af:20:67:91:6c:81:c4:25:
fa:b2:fd:c1:e9:62:43:38:cf:4a:15:fc:85:fa:fa:
40:c0:c2:ad:e1:6d:06:74:5c:ae:22:80:a1:c3:78:
f0:a1:05:ea:44:1e:cd:16:c8:49:48:9b:42:c5:90:
8b:ea:65:0f:81:ab:d9:23:2e:e3:be:43:72:31:f1:
0b:29:e0:b8:6a:d6:10:74:66:9d:91:b9:2c:9f:10:
bb:02:ea:9c:70:8c:0c:44:e2:0f:0f:e2:76:d1:17:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A3:A4:2A:69:24:65:04:E9:EC:95:E8:ED:6A:7B:7E:55:E8:85:AB
X509v3 Authority Key Identifier:
keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1c:c1:ab:f4:bc:92:66:5d:7e:1b:15:56:c5:5a:88:13:c2:
0d:7c:bd:80:8a:4c:31:1d:64:77:be:9f:3c:48:38:90:ff:ea:
65:f4:09:26:58:ff:68:c1:f5:8b:7c:1b:c1:41:70:76:3b:b9:
7d:61:52:4b:b4:56:33:53:a9:49:b6:42:01:e0:ae:91:09:c6:
e8:78:58:7a:07:37:b7:d4:dd:85:4f:da:e0:c6:f4:0d:f5:f1:
8a:1b:97:36:65:93:74:ab:11:eb:34:ec:cf:6b:dd:c1:ca:ab:
9a:ce:e0:f0:d2:fb:c1:d6:c7:4d:00:9c:0f:5b:ea:dc:6b:a7:
0e:9e:4c:e1:e4:fb:30:9c:8b:5e:57:f0:8c:c0:0f:a8:b6:34:
3f:33:ff:57:07:fa:f1:a1:8d:4c:63:e0:58:05:15:68:f2:01:
37:e0:83:b1:db:f9:8a:fc:85:87:08:b9:4b:a1:f7:94:34:c4:
b4:3c:a7:3d:67:51:f7:72:74:bf:bd:1c:44:90:f0:1d:6a:f7:
36:39:89:d3:96:a8:c6:b6:76:a6:03:94:e0:cf:4e:ac:33:70:
30:d2:2f:00:7d:d2:dc:ec:f0:c7:42:08:32:db:50:af:5e:41:
0f:27:25:f6:f1:4a:70:fb:46:18:2e:49:5a:dc:25:16:6d:6b:
9e:9b:1d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBGfn3aX4yhvaMTbBKc4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYmU0NDM1NWUwNmZhYWRiZWIxOTQ1NWFkYzMxNmQ5Yjlm
MGYxMGUwHhcNMjYwMzI1MjIwMTMzWhcNMjYwMzI2MjIwMTMzWjAzMTEwLwYDVQQD
EyhjYWEzYTQyYTY5MjQ2NTA0ZTllYzk1ZThlZDZhN2I3ZTU1ZTg4NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaGNGvI7TXPqN8xo17vl+8jCWSc9
yaYQ8TMW+1gTkT8+xZisn89aeNYYF/6yyA9b+ISqqzpkTuhuIQquhfdUTSQd1c5H
QdVzNoRH+DXL+THQeI6/Rj15GdiqOrwKjHmv0UAWcHg7Z9xP9w8KNa67VQKwDLSE
Vb/ai94GK+9khEJVj24p7//i1r9PTwGNI61xgFYJ9G3O385VaQc8ryBnkWyBxCX6
sv3B6WJDOM9KFfyF+vpAwMKt4W0GdFyuIoChw3jwoQXqRB7NFshJSJtCxZCL6mUP
gavZIy7jvkNyMfELKeC4atYQdGadkbksnxC7AuqccIwMROIPD+J20RcvkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqjpCppJGUE6eyV6O1qe35V6IWrMB8GA1UdIwQY
MBaAFDu+RDVeBvqtvrGUVa3DFtm58PEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQt
YjA4MTQwMDc1MjhmLzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQtYjA4MTQwMDc1Mjhm
LzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahzBq/S8
kmZdfhsVVsVaiBPCDXy9gIpMMR1kd76fPEg4kP/qZfQJJlj/aMH1i3wbwUFwdju5
fWFSS7RWM1OpSbZCAeCukQnG6HhYegc3t9TdhU/a4Mb0DfXxihuXNmWTdKsR6zTs
z2vdwcqrms7g8NL7wdbHTQCcD1vq3GunDp5M4eT7MJyLXlfwjMAPqLY0PzP/Vwf6
8aGNTGPgWAUVaPIBN+CDsdv5ivyFhwi5S6H3lDTEtDynPWdR93J0v70cRJDwHWr3
NjmJ05aoxrZ2pgOU4M9OrDNwMNIvAH3S3Ozwx0IIMttQr15BDycl9vFKcPtGGC5J
WtwlFm1rnpsdsg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:07:26 2026 by rpki-client