Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
File: O0ExZKE8JMp3hHd0putXEF7ngJ8.mft (raw, json)
Hash identifier: HMrs3Fd4z+xEqvffshJw4qQwlJi65be83k1dFZ4C8mM=
Subject key identifier: 78:5B:06:ED:E5:4C:EF:4F:DA:DC:84:B0:BD:4A:86:DF:6D:BD:F4:7E
Authority key identifier: 3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
Certificate issuer: /CN=3b413164a13c24ca77847774a6eb57105ee7809f
Certificate serial: 019D25F1D48DD9C56B832D073408C425356C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
Manifest number: 158A
Signing time: Wed 25 Mar 2026 17:01:38 +0000
Manifest this update: Wed 25 Mar 2026 17:01:38 +0000
Manifest next update: Thu 26 Mar 2026 17:01:38 +0000
Files and hashes: 1: O0ExZKE8JMp3hHd0putXEF7ngJ8.crl (hash: xb/15w+K0lOKgbdNiCy2xDaRZr3C9EUFVC12V8A8XlI=)
2: TIBIPgd0Nln-DuzUf3r64T4_MDg.roa (hash: Wc4+19rN5KfObjYjXDD+w/Qt81kPFgbecT9pFJ34v+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:d4:8d:d9:c5:6b:83:2d:07:34:08:c4:25:35:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b413164a13c24ca77847774a6eb57105ee7809f
Validity
Not Before: Mar 25 17:01:38 2026 GMT
Not After : Mar 26 17:01:38 2026 GMT
Subject: CN=785b06ede54cef4fdadc84b0bd4a86df6dbdf47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:20:5a:56:f8:44:64:ec:9b:8b:02:be:25:26:
ba:d6:af:24:cb:df:76:92:7d:f9:6d:86:8b:dd:5b:
ab:dd:c7:14:3f:40:cf:95:0a:1d:dc:d0:fd:78:eb:
3b:4d:29:2a:ed:44:f5:69:86:87:37:24:ec:c8:c5:
1f:d0:44:f6:31:26:27:dd:a9:80:da:9c:6f:24:e9:
35:e8:58:b9:b3:63:ba:be:7c:ba:44:5c:8e:48:4a:
2d:a1:62:04:63:03:06:c6:e2:34:db:f9:99:48:a5:
d9:fc:4b:4c:c2:bb:1a:17:a8:ba:d7:0e:28:b9:a3:
c5:c2:af:c1:81:6b:7c:85:9d:55:be:40:a6:d3:20:
14:f1:f6:6d:30:d6:de:a7:5c:b3:74:c2:c3:37:fb:
65:c0:a9:56:3a:d0:58:20:ae:a5:09:50:4c:1a:e9:
d4:eb:b0:6d:5a:45:9a:fe:69:2d:2e:3a:e1:f0:fc:
2c:d4:a7:99:49:41:7c:fc:6f:26:0f:18:ad:4e:97:
71:ff:23:a6:27:76:73:71:ff:bc:8f:34:7b:df:e3:
80:f9:5b:21:7f:3c:13:eb:ff:fe:f4:b5:41:f2:f7:
31:ec:dc:8d:2a:2b:55:b9:80:04:d7:c2:e2:51:22:
3a:eb:d6:34:26:91:4b:b6:67:c2:bf:5e:9a:c1:1c:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:06:ED:E5:4C:EF:4F:DA:DC:84:B0:BD:4A:86:DF:6D:BD:F4:7E
X509v3 Authority Key Identifier:
keyid:3B:41:31:64:A1:3C:24:CA:77:84:77:74:A6:EB:57:10:5E:E7:80:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0ExZKE8JMp3hHd0putXEF7ngJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa058-384c-4234-b492-c68d7f9c7818/1/O0ExZKE8JMp3hHd0putXEF7ngJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:8c:d6:11:b6:05:72:f7:89:42:e3:a3:f4:c1:7c:fd:30:b9:
d0:80:9b:65:c8:73:c7:14:0c:e7:16:e2:16:93:d4:09:aa:d7:
89:3a:6e:f0:75:df:36:0f:56:61:a6:89:2e:77:57:79:2f:a8:
09:03:19:7e:3f:07:69:44:53:7d:3b:64:ba:e3:d2:a1:a6:31:
89:70:f5:31:36:74:9d:5b:8f:38:37:d4:da:b5:6e:d2:61:9f:
25:32:d0:de:2d:b3:f6:01:eb:21:26:d9:94:e9:b7:43:34:00:
0c:10:c4:30:64:1b:2d:40:50:1b:d5:ba:1e:87:ec:d1:6f:0c:
68:41:a4:f3:6d:9e:bc:55:61:1d:3d:d8:66:c9:06:15:80:c2:
b9:d4:de:6a:1b:bc:3b:d2:89:1a:80:be:ba:a0:2d:1b:b8:cc:
21:16:b5:cd:c4:48:04:c7:e7:1a:9b:75:3b:36:95:a8:c4:39:
22:7b:63:3f:8d:80:4f:e0:27:e1:ad:0c:6b:dc:95:fb:48:59:
10:45:ff:ff:4f:68:bd:b1:38:b9:05:44:e3:81:59:2a:84:65:
9c:53:81:1f:db:16:fb:4b:d4:6e:e7:d6:48:6c:15:9a:cb:10:
5f:9a:e8:07:8f:ed:a7:35:27:5b:fb:fc:f5:4d:0a:db:e8:39:
9c:9d:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:53 2026 by rpki-client