Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: d9rIQO1OGCV+/JCRLDUMctsjdrHEhP0bsQTt9zhvPNo=
Subject key identifier: 90:CF:7B:AF:8B:F8:4B:5D:D5:73:F0:82:67:1D:4F:E9:AC:F2:9E:6A
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 019D28BB31B5354E3C8DCE461361198ECE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: E9
Signing time: Thu 26 Mar 2026 06:00:49 +0000
Manifest this update: Thu 26 Mar 2026 06:00:49 +0000
Manifest next update: Fri 27 Mar 2026 06:00:49 +0000
Files and hashes: 1: 1dnKy71ofDf4gYNI2KAkrU9kzh8.roa (hash: MZO4jDWSpb/PyhryjkODVE5dJvKnrUZbR0xYvl98uuA=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: nH5HS4/DcXu6WIcDzYPtg1HXRJuJZ0B24neZqZfbto4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:31:b5:35:4e:3c:8d:ce:46:13:61:19:8e:ce:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: Mar 26 06:00:49 2026 GMT
Not After : Mar 27 06:00:49 2026 GMT
Subject: CN=90cf7baf8bf84b5dd573f082671d4fe9acf29e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:85:66:73:ce:89:b9:f2:bc:88:1b:5a:ca:
7e:45:d1:5a:12:7d:86:77:61:4c:dd:9d:39:99:b8:
7d:01:6c:78:2c:c4:0e:0a:3e:3d:b1:f5:40:03:e3:
2e:31:78:53:40:6a:7e:0a:ce:d6:08:77:ad:35:4e:
86:35:2b:ba:1e:e5:55:bc:69:bf:b2:24:3e:e9:9f:
bc:b0:8b:c8:b5:45:26:57:5e:8f:0b:86:32:87:b1:
18:01:a3:02:14:96:2f:4a:f7:3c:b1:b5:25:2d:c2:
c9:30:e8:b5:15:33:3c:ae:99:bc:67:c3:14:f8:cd:
11:f4:e8:e3:84:f8:a7:bb:f0:e4:20:79:16:6d:2b:
18:aa:8a:7c:d4:69:30:84:72:51:c9:d5:a3:1e:0d:
9d:f8:b5:ad:60:62:05:ea:28:6d:ad:41:75:0c:85:
d2:6a:32:c3:ad:a1:80:3a:8e:61:b5:11:7f:28:34:
9f:9d:26:96:d6:54:a8:89:18:62:54:08:3d:0f:dd:
a4:13:6d:fc:51:78:61:b2:4b:64:8a:a2:c6:a3:d1:
31:52:f8:6f:a4:9b:3a:f7:cd:7c:8c:da:2a:99:d2:
a9:34:a8:f3:96:70:ed:bd:09:e2:d1:9f:c9:2f:8c:
3a:92:a9:d2:e3:e3:3c:3b:99:c3:3d:4a:0a:2a:b7:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CF:7B:AF:8B:F8:4B:5D:D5:73:F0:82:67:1D:4F:E9:AC:F2:9E:6A
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:50:b4:14:50:66:be:b8:ed:66:4e:e5:d2:15:9f:79:04:5d:
e3:e3:f8:61:f1:ca:2c:4d:53:8d:93:79:ff:77:f6:0e:b4:09:
5d:79:fd:de:0b:d5:09:34:11:88:a4:2f:36:8a:13:2f:bb:53:
7d:d7:54:2e:b7:95:27:9b:3d:70:3b:e2:20:c5:0e:3d:1e:39:
82:5f:f2:8f:f1:e4:9f:0c:b5:e5:c5:0d:8a:1d:2d:d1:e5:ca:
1f:db:02:c0:94:d1:f4:18:f5:1e:49:9f:2c:38:5b:59:d5:c1:
75:db:fb:a3:28:9f:4e:38:40:c7:03:88:d0:ee:02:33:06:7f:
c8:b3:2b:69:d9:2e:05:b1:cd:ba:e9:e4:d1:fe:06:48:8e:2f:
c6:75:58:11:52:c9:4a:cf:2f:4c:55:45:09:99:1a:6e:11:b6:
00:ec:c8:12:29:2d:f3:ef:33:64:b0:5f:79:85:9c:02:da:4f:
f3:86:d0:1a:2d:79:65:44:5b:ad:ee:dc:35:19:b9:10:02:9b:
41:8d:74:83:4c:5d:67:66:7d:79:cc:06:54:b0:49:54:1e:f7:
ae:09:0e:46:d9:04:1d:cc:01:53:8c:d4:88:48:35:2c:37:6b:
58:91:20:39:e8:65:41:6e:15:8f:87:fe:f6:56:5f:50:67:3b:
84:3b:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:33 2026 by rpki-client