Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: Qg/l9TeSLXnyqcOodSfxKPr4CzmjaEo1CLrJ+SWAsNY=
Subject key identifier: 19:31:9B:4D:7B:C4:A4:E0:42:7B:FB:4A:BD:6B:BA:C1:59:AF:4C:0E
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019E1F47FAA2384750FF0621791420E4E536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 03:01:11 +0000
Manifest this update: Wed 13 May 2026 03:01:11 +0000
Manifest next update: Thu 14 May 2026 03:01:11 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: N//EmGoixaKTsBDPmoGpB33l/5ed34w31h7DxkrpWLQ=)
2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:fa:a2:38:47:50:ff:06:21:79:14:20:e4:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: May 13 03:01:11 2026 GMT
Not After : May 14 03:01:11 2026 GMT
Subject: CN=19319b4d7bc4a4e0427bfb4abd6bbac159af4c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:d1:07:a9:b4:60:2d:27:2a:cb:3c:3d:58:
a0:6f:10:30:91:8c:c6:e7:2c:8f:81:b6:bb:ee:a2:
d6:46:f0:70:2a:7c:1f:f0:f3:24:ec:12:0b:bb:34:
c4:b0:b5:8e:b9:ff:ea:aa:35:15:d0:d5:08:7d:3c:
3f:63:c1:95:23:e7:92:0b:fd:9b:b8:0b:82:02:84:
4c:66:0a:86:40:6b:d9:2f:a3:61:da:bc:20:a1:65:
74:6b:9e:ac:89:96:e7:ca:99:2f:b0:7c:2c:ca:81:
1b:18:c1:17:1c:b7:78:67:48:14:de:26:48:5c:c7:
61:41:7e:7b:eb:7a:e9:6c:75:c4:d8:d3:8e:f7:9c:
5b:2d:4e:6a:a4:57:ec:71:b2:a6:70:a5:97:81:97:
6c:69:a9:70:f8:3f:37:6d:e2:47:7e:0b:03:22:ab:
5e:da:f9:25:70:0e:b8:1c:06:93:9d:b2:0b:16:23:
da:d3:da:bd:38:d5:ab:60:27:21:2a:59:98:dc:7e:
e6:b7:d2:c0:67:8e:95:c6:64:e4:df:7b:12:09:6c:
6a:dd:74:f7:94:37:e8:b1:4e:5a:ef:62:98:45:e7:
db:61:ac:b9:3c:1c:79:b0:ad:51:6b:31:4e:46:7c:
e5:40:59:95:45:a0:8a:3d:b4:56:43:6d:80:e0:0b:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:31:9B:4D:7B:C4:A4:E0:42:7B:FB:4A:BD:6B:BA:C1:59:AF:4C:0E
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:01:ed:2c:6c:f0:b6:5e:7b:c3:ce:b9:9a:d1:bc:d4:c6:f4:
70:7c:cd:e4:19:57:7d:a9:e7:4a:72:49:59:99:3c:11:32:10:
2d:6f:b9:10:51:66:98:c3:cc:7c:f9:9d:63:34:92:3a:62:06:
7f:44:7b:cf:b5:1a:65:ee:9f:d5:f0:3b:a3:5b:ac:23:97:e8:
b9:b6:a1:83:34:96:6a:41:50:c6:ca:6d:7c:99:c8:c4:97:6c:
3f:54:ed:8c:86:13:d4:c7:27:8b:ae:6a:68:d6:19:f5:1d:c8:
e6:05:98:39:87:20:20:c5:24:49:23:a9:26:d1:90:f0:52:dd:
92:75:96:e0:b2:56:ae:f4:0c:e6:13:04:57:ad:cc:71:df:9c:
ad:b9:e1:d3:4c:6c:97:96:a4:89:45:4a:7c:15:70:a9:67:c0:
a8:9e:b5:6c:08:9d:e7:bf:5b:1c:50:2c:c9:88:f5:57:3f:8d:
23:f6:1a:3c:25:1a:5d:bf:35:73:4d:41:59:a3:46:ef:b5:bb:
ac:9f:ab:9f:a6:a9:b0:5f:08:d5:ca:ed:51:6a:5f:b8:53:cc:
d8:39:fd:ee:4f:00:c5:5c:df:d8:4b:81:56:ef:f9:6f:9a:d6:
5c:8e:82:e4:a2:5e:41:b3:33:a7:8b:6c:11:a3:a0:ab:39:93:
e0:5a:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:40 2026 by rpki-client