
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: aXDqS4zxqzmugoOJwjD6BC2wtCAvIBLqVA9SY7Eevo0=
Subject key identifier: 9E:46:FF:9C:1D:9A:86:81:2F:77:4B:FC:B0:23:B9:33:91:A7:E4:CA
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 019E1DFE0ADDDB14EEF5D32CBDBBADA48125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 03F7
Signing time: Tue 12 May 2026 21:00:48 +0000
Manifest this update: Tue 12 May 2026 21:00:48 +0000
Manifest next update: Wed 13 May 2026 21:00:48 +0000
Files and hashes: 1: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: bj3EUE496RF3eHmWayez4yts/HoMBpmzDz7xklyFXsc=)
2: xZvTVsgAgTHbHn_16cZuYXn4mck.roa (hash: +oE3yDmB7hi9Ypi3E2o3IvseUAbSMG6NeT9277jObu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0a:dd:db:14:ee:f5:d3:2c:bd:bb:ad:a4:81:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: May 12 21:00:48 2026 GMT
Not After : May 13 21:00:48 2026 GMT
Subject: CN=9e46ff9c1d9a86812f774bfcb023b93391a7e4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:d0:c2:46:99:0a:ae:bd:2c:61:aa:63:10:
a9:87:36:f5:da:8e:07:33:75:03:16:b0:4e:e2:63:
44:fa:44:a1:9f:f0:c6:4b:85:fd:3c:df:22:e5:c1:
cf:c9:93:73:d9:ab:e7:6c:77:02:bb:44:9a:45:ce:
96:dc:23:23:cd:da:9f:79:b1:f5:98:75:b8:56:d5:
a3:72:03:22:b0:1a:81:40:c5:ba:f6:f8:14:4f:88:
f2:68:20:13:09:80:24:6e:34:22:e4:7f:f7:5f:b8:
cd:0f:20:77:dd:da:aa:b4:c7:cf:b8:c2:db:fd:e0:
fd:11:22:7e:2b:53:24:4b:be:ef:a5:2b:8c:bc:d4:
4b:6f:6f:51:77:97:2b:3c:07:2a:2d:b3:d5:55:88:
01:71:ec:1b:61:01:30:e2:a9:22:d3:bc:d2:67:37:
2b:dc:95:ef:ff:46:bd:e8:3b:e5:18:ed:88:01:c7:
7c:72:31:04:61:d2:64:95:59:c3:d5:7a:a4:69:fd:
39:10:b5:ea:e8:15:aa:34:48:2c:41:f5:f0:04:bf:
7e:28:f1:c4:d8:21:b6:e8:77:75:e0:2f:43:64:31:
ac:43:50:55:95:e8:49:cf:fe:b5:d6:4f:5c:51:fc:
5a:c3:70:6b:19:bd:a7:96:9d:c7:da:91:02:8d:36:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:46:FF:9C:1D:9A:86:81:2F:77:4B:FC:B0:23:B9:33:91:A7:E4:CA
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a6:ad:0d:a6:65:a0:a4:35:b1:b4:4e:1f:66:c2:58:1e:3b:
aa:e2:8a:c5:9a:11:3d:3b:29:90:af:92:6a:93:06:4e:ba:c3:
8d:be:2e:29:3a:c0:1c:d6:ec:23:84:6e:29:bd:c5:85:6a:58:
ce:6f:5a:2e:45:3c:c5:fc:c4:fc:02:55:63:f6:5a:aa:87:0e:
b1:56:ca:39:38:8b:a3:13:84:0f:b0:b2:dd:08:02:7c:d1:d5:
7b:88:13:19:25:57:45:da:33:00:58:68:52:ed:6e:b3:6e:99:
16:a2:69:f8:be:58:ab:6f:62:8e:60:ff:c8:4c:8c:ae:15:7d:
7e:5f:7f:d2:fb:0c:20:e0:a7:9c:ec:fe:aa:27:0d:ba:1e:92:
31:61:d0:e4:b4:11:2d:a3:ef:83:40:c9:b7:c0:7d:01:0b:e0:
07:f1:ec:62:87:a2:77:fa:30:b1:c5:a3:d1:a6:d8:88:e2:22:
5e:11:54:5b:a0:69:3d:70:7c:59:a3:e4:4b:98:0d:8f:ce:20:
32:ba:57:42:d4:ee:5d:fc:6a:73:b6:8d:16:28:45:6f:8e:85:
4f:e8:99:97:e3:8d:c6:6e:3e:57:5c:bc:aa:30:07:4f:e3:79:
32:22:bf:ea:9d:c6:0b:bd:54:07:97:15:c3:2d:d6:81:e0:c7:
4f:3e:8e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:17 2026 by rpki-client