Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: 9sUcEeElCdaDVGyKPrawnOOaQrtaBASLR7LiP7Vb13o=
Subject key identifier: BA:DF:45:76:93:0F:18:4D:83:67:A4:E0:24:AE:89:2E:24:01:7C:A4
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019D2771FE19AFEA990A1076F2CB6FAC76EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0E13
Signing time: Thu 26 Mar 2026 00:01:15 +0000
Manifest this update: Thu 26 Mar 2026 00:01:15 +0000
Manifest next update: Fri 27 Mar 2026 00:01:15 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: r9Od4TtCCgZfE6r1vk6ZJzw/u4h1uSB+IbgvIeJUXfk=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:fe:19:af:ea:99:0a:10:76:f2:cb:6f:ac:76:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Mar 26 00:01:15 2026 GMT
Not After : Mar 27 00:01:15 2026 GMT
Subject: CN=badf4576930f184d8367a4e024ae892e24017ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:75:fc:ba:d3:a7:64:38:bb:49:3c:c5:38:
57:e2:13:d3:86:a1:85:b0:7a:92:62:02:9c:69:92:
07:e8:5b:a5:6b:0f:80:99:f4:d8:b8:5e:e4:b6:e1:
13:05:09:d9:c4:ea:7e:be:4f:5d:4a:01:30:5e:e6:
e0:21:b1:a4:25:ee:2b:fc:69:e8:d9:4c:1f:73:da:
d1:66:ab:a3:35:d5:45:20:26:e1:7e:f3:18:fb:ba:
e9:4e:84:a2:92:49:fd:74:05:d0:a7:27:30:fe:3f:
d7:e5:5f:20:1b:f4:72:7e:68:05:df:06:fb:ae:f4:
00:bd:ff:4f:6e:71:88:9c:aa:54:bf:b8:71:68:a2:
c0:c2:29:9a:24:11:a3:fb:f1:21:7f:f1:58:50:3e:
24:12:48:68:45:17:51:4e:e4:06:e7:a1:10:ce:7a:
e4:f6:fd:6a:b6:ff:86:00:0b:d8:67:cd:87:c3:08:
1c:30:62:d0:5f:df:49:9b:33:d2:06:8c:07:40:c4:
6f:3e:ff:c3:59:7b:cc:3a:5c:f5:b4:00:86:0a:e1:
79:e5:2c:14:95:e7:6f:f7:59:7c:be:89:c6:ee:41:
d7:cf:33:b4:03:28:26:a3:39:3b:85:ee:ba:e3:0d:
15:0b:cd:7c:6c:e8:bb:2e:fe:e5:fe:0b:01:1a:c5:
cd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DF:45:76:93:0F:18:4D:83:67:A4:E0:24:AE:89:2E:24:01:7C:A4
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:26:46:ef:dd:36:e2:c0:f2:23:79:41:d1:82:ea:a5:4d:f1:
05:6d:ff:b8:d1:9e:2c:5e:c4:9f:76:a5:0c:9e:3e:43:69:27:
36:b3:28:1c:cb:8a:2d:aa:e5:99:13:98:4d:23:6e:3a:25:6b:
be:4d:7b:80:30:5f:f3:d1:31:b7:ee:d7:19:1e:bb:4b:40:ff:
e5:23:76:e3:ec:f7:ff:23:87:fe:9d:ff:fa:67:7b:86:3b:5c:
f8:52:7b:7f:6e:35:a7:ed:2f:97:61:c6:c1:6a:d1:dd:67:ec:
5b:ae:4d:e5:83:25:17:2c:97:a5:2c:72:d5:3d:56:88:cb:11:
02:86:bc:94:84:80:7c:a6:15:ab:d9:aa:61:b8:3f:29:d0:9e:
f7:68:00:09:dc:b4:cb:77:8c:ef:27:f0:bc:ff:b9:5a:d1:ab:
4f:13:17:a0:a8:c7:ea:1d:7d:d4:98:78:47:4b:e9:68:15:49:
aa:72:de:7f:e5:16:91:26:a2:ea:7b:7f:44:de:e3:7c:d7:9e:
66:3c:9b:80:e0:d1:ca:14:8c:7e:9b:18:4e:4a:e3:86:c4:9b:
f3:39:cf:a2:3b:47:85:38:8c:b0:1a:85:4a:7a:53:c6:43:24:
95:b0:60:d7:e8:39:a8:54:6e:51:85:70:7e:4e:bb:6d:b8:99:
0f:ef:2b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:47 2026 by rpki-client