Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: 7vz4aPBk/xdJGgpOyHAbOaheUy4MxmOhmNdZlHLdpH8=
Subject key identifier: 37:B4:91:D5:FF:08:13:91:A3:09:30:C7:BF:63:56:8C:17:A6:EC:A6
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019D2627F0C3EB032ABC0CA3A3224B2480BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 18:00:44 +0000
Manifest this update: Wed 25 Mar 2026 18:00:44 +0000
Manifest next update: Thu 26 Mar 2026 18:00:44 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: uZhisuTabyZ4sSEMANM9xa7RkcYbG+gYkQeUyExayXY=)
2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:27:f0:c3:eb:03:2a:bc:0c:a3:a3:22:4b:24:80:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Mar 25 18:00:44 2026 GMT
Not After : Mar 26 18:00:44 2026 GMT
Subject: CN=37b491d5ff081391a30930c7bf63568c17a6eca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:54:93:4f:4d:bb:12:5f:58:37:12:11:2c:
e1:61:d8:23:e2:fb:20:01:b4:7a:f9:f5:2a:3b:06:
5b:2a:75:15:dd:d4:83:bd:90:e8:b2:ab:6c:f4:f3:
09:b8:e4:26:5f:15:d9:38:2d:d7:5f:ec:4b:88:75:
2b:b3:84:1e:eb:5c:66:1f:85:0a:93:05:d5:b4:07:
db:f2:7f:57:80:be:47:50:13:1f:03:bd:3c:c1:58:
b7:54:e4:a3:f4:d8:0c:82:f0:f3:70:81:3d:40:ed:
a1:91:e3:47:c0:04:b7:83:a8:1a:b5:e3:4f:f0:c3:
c4:22:04:9a:5a:c0:41:e0:a9:06:a5:ed:b3:4e:ee:
ea:b8:41:21:d5:38:fb:c7:48:da:2c:81:b5:b1:2e:
a0:be:08:2a:fb:a5:f9:52:bc:91:89:08:74:00:f8:
8c:fb:11:cc:db:e7:30:8c:75:68:9f:7c:24:9f:29:
82:13:ad:57:29:03:a3:10:fb:f5:19:73:4e:52:d8:
28:d6:d6:ea:aa:db:f0:a9:de:00:bc:c3:66:28:ad:
fb:61:88:87:e3:27:7e:24:aa:f0:18:4b:d8:c2:bb:
1f:a7:76:e9:c5:51:b8:c8:fb:95:47:af:9e:4e:52:
a0:12:ec:5d:34:5e:a2:25:49:aa:38:97:2d:46:41:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:91:D5:FF:08:13:91:A3:09:30:C7:BF:63:56:8C:17:A6:EC:A6
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:24:e4:d4:a6:6a:bc:b0:e9:45:d9:cb:43:64:fb:93:1b:e5:
2f:99:98:74:42:81:52:bc:ad:1a:71:b5:69:98:0a:25:22:f1:
1f:8b:89:2e:25:9b:de:6b:67:27:23:24:08:c8:b2:cf:e7:2c:
b2:bc:27:8a:7c:ac:cf:e8:81:4e:35:ea:e0:15:12:71:57:e8:
96:74:db:98:f2:ff:cb:d6:ef:05:be:d0:94:fd:6a:9a:d5:fb:
f0:4c:33:46:af:d9:29:d0:76:fc:83:f2:01:8e:b7:00:47:cd:
a7:d6:a4:64:04:49:fa:2f:9b:d4:26:32:79:1d:85:9b:5f:a6:
ce:23:25:6c:f5:68:c0:6e:5d:f8:34:38:00:69:d5:49:6c:dc:
b9:a0:a1:98:d2:e8:f6:52:16:dd:1b:32:20:ee:9d:20:1c:4f:
1c:ff:31:73:15:3c:8e:a4:cb:24:c9:14:21:c0:36:be:46:96:
d4:5a:6a:5a:49:ff:3e:38:8d:16:09:ba:cf:c7:b6:3f:dc:ad:
17:fc:1a:66:03:62:2c:3e:ef:a9:af:46:ec:9c:44:28:5b:d6:
a0:07:09:d9:3f:f6:ca:27:3a:ff:7a:c2:95:c7:15:de:ce:d0:
c9:79:9a:af:20:e6:88:2a:47:17:03:a3:b0:ee:6e:7f:ab:58:
a4:0a:0a:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mJ/DD6wMqvAyjoyJLJIC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNGRmOWE1NDYwY2JkNDUwYjRlNzUzODAzOTNhODIxZTg1
Yzc0ZDgwHhcNMjYwMzI1MTgwMDQ0WhcNMjYwMzI2MTgwMDQ0WjAzMTEwLwYDVQQD
EygzN2I0OTFkNWZmMDgxMzkxYTMwOTMwYzdiZjYzNTY4YzE3YTZlY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBNUk09NuxJfWDcSESzhYdgj4vsg
AbR6+fUqOwZbKnUV3dSDvZDosqts9PMJuOQmXxXZOC3XX+xLiHUrs4Qe61xmH4UK
kwXVtAfb8n9XgL5HUBMfA708wVi3VOSj9NgMgvDzcIE9QO2hkeNHwAS3g6gateNP
8MPEIgSaWsBB4KkGpe2zTu7quEEh1Tj7x0jaLIG1sS6gvggq+6X5UryRiQh0APiM
+xHM2+cwjHVon3wknymCE61XKQOjEPv1GXNOUtgo1tbqqtvwqd4AvMNmKK37YYiH
4yd+JKrwGEvYwrsfp3bpxVG4yPuVR6+eTlKgEuxdNF6iJUmqOJctRkHYSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDe0kdX/CBORowkwx79jVowXpuymMB8GA1UdIwQY
MBaAFDtN+aVGDL1FC051OAOTqCHoXHTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2Zjkt
OTgxMmQ3Y2ZkNjk0LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wNDk3NWMtZWY0OS00NzU0LTk2ZjktOTgxMmQ3Y2ZkNjk0
LzEvTzAzNXBVWU12VVVMVG5VNEE1T29JZWhjZE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyTk1KZq
vLDpRdnLQ2T7kxvlL5mYdEKBUrytGnG1aZgKJSLxH4uJLiWb3mtnJyMkCMiyz+cs
srwninysz+iBTjXq4BUScVfolnTbmPL/y9bvBb7QlP1qmtX78EwzRq/ZKdB2/IPy
AY63AEfNp9akZARJ+i+b1CYyeR2Fm1+mziMlbPVowG5d+DQ4AGnVSWzcuaChmNLo
9lIW3RsyIO6dIBxPHP8xcxU8jqTLJMkUIcA2vkaW1FpqWkn/PjiNFgm6z8e2P9yt
F/waZgNiLD7vqa9G7JxEKFvWoAcJ2T/2yic6/3rClccV3s7QyXmaryDmiCpHFwOj
sO5uf6tYpAoKOw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:54:39 2026 by rpki-client