Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: pW0BljXGZpi9rGqP7je+UElixfWLlxdOCiXyk22ir/w=
Subject key identifier: 58:BF:FD:F6:83:07:05:76:11:CB:C7:79:7C:9A:46:2C:97:CF:EF:27
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 019D26CD212A0FDC97478F468FB5E9774DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 0A83
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: Bw/kce0+WqQCPQLsLBCUyDhl6/EH0Xs9FPe+vmJMA5M=)
2: wVx12s3RofqhZGn1DU5IkoBo6Ek.roa (hash: rtRYGzz5et6AkfKvUX/IWgHJLFa3ZiIV+HrHpHk9/S8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:21:2a:0f:dc:97:47:8f:46:8f:b5:e9:77:4d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=58bffdf68307057611cbc7797c9a462c97cfef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:07:af:e7:a5:4a:5f:48:c0:ca:81:bc:0a:
1d:fd:10:7a:84:60:7c:22:9d:67:75:5b:8f:58:9c:
d8:86:dc:a5:9a:05:6d:f7:66:f7:d4:2a:03:71:7d:
8c:fe:84:21:62:18:35:31:2a:f1:54:59:d8:19:59:
b9:56:ba:d8:5f:f8:aa:2c:a1:91:33:f1:a0:89:d5:
2f:58:ec:61:f2:2f:0c:12:c8:41:98:86:f5:a5:25:
45:75:20:d8:77:af:82:a9:86:ac:4a:d6:40:d0:3e:
79:42:cb:f8:7c:24:94:c3:2e:42:e8:fa:3d:da:93:
f0:74:0d:f4:ca:87:92:80:ab:c1:bb:45:86:fe:10:
c0:b7:78:8e:e2:80:d2:6d:68:e9:63:7f:fd:1a:3b:
60:a9:22:e2:1d:8e:38:90:2e:82:a7:1b:d7:f5:9e:
85:6f:5a:9b:cf:8f:44:ba:16:b3:dc:6d:e3:58:c6:
5a:ab:87:5f:c2:eb:d0:60:75:51:62:32:bb:e5:1b:
03:a1:72:c2:5b:51:04:c2:dc:3e:07:4d:b1:5a:bd:
52:f0:0f:1a:19:a7:c5:07:9f:3a:1b:b5:ab:89:d6:
c7:32:b1:fd:55:77:ac:de:1d:9f:2e:9d:11:1a:f6:
26:a7:ca:7a:0c:05:c7:d3:dd:e8:82:95:7f:04:59:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:FD:F6:83:07:05:76:11:CB:C7:79:7C:9A:46:2C:97:CF:EF:27
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3b:60:80:94:09:bd:ec:bc:96:60:b5:9f:50:22:74:fa:ec:
b9:da:67:e5:29:5f:d9:e2:14:3c:93:ab:15:3e:55:0e:ac:c0:
96:58:b1:7c:f2:6c:0d:19:7f:13:48:eb:c0:e7:be:26:e2:dd:
c6:d0:a2:87:c7:34:3c:7c:01:54:4b:c2:f7:db:61:6f:95:0b:
24:da:77:bd:8f:fe:59:6b:34:2d:3b:18:90:43:a1:21:5e:5a:
14:26:65:4c:cd:cf:50:8f:74:f9:d6:94:4d:11:6a:b0:1c:b1:
39:68:28:6d:7c:56:73:47:51:25:09:55:9a:32:7c:26:82:93:
d6:c7:44:30:49:0c:ab:40:ff:3f:67:bc:3c:64:b4:4e:36:13:
30:27:b2:f7:9c:26:bf:67:b0:4f:2b:e0:e5:b9:18:7e:82:1a:
af:11:0a:15:e5:85:ba:3f:78:48:5a:cc:07:ca:e2:2f:1f:81:
e7:cb:b8:57:8d:78:ad:6d:cb:bd:bb:59:cb:d3:fb:a9:1f:e2:
f2:b1:10:9b:0d:79:f9:33:9c:74:a3:1a:ce:e5:92:ad:d3:21:
e7:5d:7f:32:65:5a:f4:88:66:72:56:6f:b1:a4:5c:98:60:7d:
93:6a:66:45:b7:19:70:a3:f8:e1:e4:d3:11:16:52:84:e8:5d:
d4:d0:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:07 2026 by rpki-client