Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: sLCR2yxeGLYkdARBXEuTEeNRo0yp61kDwT/RE/mzwM0=
Subject key identifier: C7:39:90:19:31:21:9E:48:E5:CB:9F:8C:3A:B2:D0:CC:3D:C4:65:D8
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 019D2583B12C67EB2711EDBFD4FAFF8BAD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 03F6
Signing time: Wed 25 Mar 2026 15:01:20 +0000
Manifest this update: Wed 25 Mar 2026 15:01:20 +0000
Manifest next update: Thu 26 Mar 2026 15:01:20 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: O0F/FtTig00w4lCAgIeCBLcrXUy5Tazt1Tch1Ya8VLA=)
2: qcRxwVaFJKZNZxKItMTgD_sHnKI.roa (hash: zSxjrYYqoeDrJlezU9Vi0F+/e6UNxqHigCDZbFFsf0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:b1:2c:67:eb:27:11:ed:bf:d4:fa:ff:8b:ad:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Mar 25 15:01:20 2026 GMT
Not After : Mar 26 15:01:20 2026 GMT
Subject: CN=c739901931219e48e5cb9f8c3ab2d0cc3dc465d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:38:c7:be:17:08:95:b7:07:9a:be:2e:8b:7b:
16:da:55:16:eb:41:aa:c1:5e:04:1b:74:47:5c:cc:
36:5d:64:9a:4b:d3:91:38:40:81:ab:0c:cc:5c:62:
44:4c:02:1f:da:83:b2:6a:1d:36:b9:46:1e:8b:79:
db:39:a9:ea:10:4b:36:22:9e:51:5b:bc:58:06:a1:
eb:22:6b:36:2a:a4:cd:2e:da:4e:21:ea:07:d6:6d:
0c:4d:7b:38:c2:eb:f2:53:b0:be:24:59:4e:ba:f8:
5c:62:44:c2:c7:77:ae:a1:c3:b0:ab:1a:3b:91:01:
83:da:d7:84:9e:65:39:94:43:4a:b8:e2:e8:66:1e:
4e:40:f6:60:b1:e5:32:d2:82:83:05:54:b2:4e:d1:
3f:67:28:91:dd:fc:62:6f:7d:b8:d5:eb:59:0a:ff:
26:8b:a5:94:94:59:61:71:89:2a:ea:87:77:54:9a:
49:1c:7c:50:5e:fa:91:c5:34:b8:d6:fd:7a:09:18:
20:aa:1c:e2:18:44:d7:44:14:48:3b:02:90:e3:95:
00:8c:f6:a1:9a:5b:96:eb:a3:af:63:79:b9:50:fa:
53:84:c8:2c:bf:b9:df:96:36:5d:41:f7:da:f4:51:
79:7d:f3:85:2c:69:68:ef:f5:a7:c5:b6:f2:c7:4b:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:39:90:19:31:21:9E:48:E5:CB:9F:8C:3A:B2:D0:CC:3D:C4:65:D8
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9f:60:c3:4a:66:35:a9:ff:3c:6c:0d:62:78:14:78:23:7d:
6b:31:3a:37:1b:5e:40:e2:42:77:9e:62:e5:32:8d:48:27:0f:
ad:d3:1b:ce:2d:a5:40:a0:2f:68:c3:44:30:76:ab:85:55:53:
3f:53:1d:46:f9:c2:02:52:4a:65:6d:fa:0d:c7:6d:3b:b2:98:
c2:54:9e:55:72:b3:1b:d9:53:7e:73:ce:da:89:32:d4:6c:48:
ca:b7:da:0e:bf:fd:cb:04:56:40:9e:ee:fd:20:1a:c7:c5:4e:
59:bc:28:8f:d1:96:dd:18:b8:8d:fd:8a:f1:5d:3d:25:d4:58:
8d:71:46:8f:0e:bc:d3:9a:42:ab:9a:9a:ca:4a:90:9d:83:83:
3a:cc:d2:c7:41:09:7f:56:6c:4a:5c:38:bb:a3:29:30:a6:92:
01:17:6e:77:3b:55:d6:48:7c:14:69:af:88:4f:7a:a5:de:a9:
fc:c9:54:2f:33:2c:08:5f:6e:a1:69:3f:97:43:b8:4c:52:a7:
93:1a:99:d1:2a:fe:f3:6c:fb:01:6c:91:73:a9:63:00:f2:e2:
12:82:2c:34:23:d5:a3:53:d4:9e:ed:c7:d7:62:05:5e:63:c6:
cd:21:73:7c:ce:67:da:ca:db:5c:7b:e3:b9:71:e7:cc:40:ee:
4e:67:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:45 2026 by rpki-client