Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: TPDEcAOYZCYk5F598fIyOih/OdFbjU/NqWmWhy1jtmg=
Subject key identifier: 3D:D1:E3:7F:9B:28:4E:54:C4:08:C2:36:E4:8B:96:8A:93:69:C4:5B
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 019D26CD4E8524D0BB6D59A231ABD540C3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 0377
Signing time: Wed 25 Mar 2026 21:01:22 +0000
Manifest this update: Wed 25 Mar 2026 21:01:22 +0000
Manifest next update: Thu 26 Mar 2026 21:01:22 +0000
Files and hashes: 1: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: d4WZMiYlDs4pIk7vIAyaRI+dDG76+S2DykFAtG4k5Rw=)
2: xZvTVsgAgTHbHn_16cZuYXn4mck.roa (hash: +oE3yDmB7hi9Ypi3E2o3IvseUAbSMG6NeT9277jObu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4e:85:24:d0:bb:6d:59:a2:31:ab:d5:40:c3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Mar 25 21:01:22 2026 GMT
Not After : Mar 26 21:01:22 2026 GMT
Subject: CN=3dd1e37f9b284e54c408c236e48b968a9369c45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:7b:4b:3f:bd:db:67:8c:4a:a0:a3:c4:9b:
1c:a0:34:0e:1d:5d:e1:ad:d8:fc:dc:e7:4e:00:c1:
77:c9:4f:80:7e:2e:57:81:6f:fe:76:5e:0c:59:82:
b9:8c:c9:22:93:da:89:ac:89:06:5f:ea:64:96:64:
36:de:b2:a6:6b:1c:ba:35:e2:ed:4a:d8:ed:04:b0:
8a:27:b6:0a:80:79:80:b1:68:e9:37:52:a7:b0:d2:
8f:41:f6:51:52:b4:76:e0:97:dd:b2:a1:81:94:0d:
f5:ed:2b:6c:e2:df:a0:42:6e:c4:d0:02:c4:11:6e:
13:31:ba:ce:ef:a4:b0:d0:09:f3:12:1d:ee:09:34:
2a:20:ce:25:aa:e0:19:47:cb:9b:4d:97:36:a5:3d:
59:c0:4b:20:e9:64:0b:80:d9:53:61:65:31:f9:02:
41:3c:71:5b:b3:bc:ce:8d:d5:43:2f:08:67:de:6e:
30:a2:9b:4d:94:27:c2:cc:c5:be:50:9b:27:b6:2b:
28:13:b7:f6:a7:98:f1:df:b1:3b:f9:c7:53:a2:32:
d6:ac:8a:b9:16:49:c0:de:1d:73:cf:7c:57:cf:d3:
42:0a:d6:52:5f:91:06:b4:2e:0c:91:bb:ba:88:07:
65:56:bc:cd:c7:32:57:79:f7:f2:8f:0b:7e:57:3d:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D1:E3:7F:9B:28:4E:54:C4:08:C2:36:E4:8B:96:8A:93:69:C4:5B
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ce:b2:27:e9:c3:6b:e5:52:d7:b7:f8:2a:67:0f:43:d1:ee:
58:20:b9:c4:e9:48:45:a9:73:ce:0e:2b:2e:21:77:0a:a3:8d:
cc:79:72:11:28:63:79:05:bf:64:24:f4:27:dc:bf:04:5c:40:
a9:44:02:e0:40:0c:77:9f:da:5d:eb:91:51:7b:3b:8c:1b:cb:
a9:f4:1c:b3:c7:3a:ad:9a:da:a7:5c:e2:f1:f3:cb:53:2d:2f:
8e:41:bb:67:18:f4:6c:79:de:d2:2c:38:8d:ad:56:5a:ca:6e:
37:07:84:13:8c:a6:9d:f5:64:25:7f:59:ca:df:05:14:67:87:
28:9f:4e:f8:f5:93:09:ca:83:84:52:cb:22:2d:6b:38:67:8d:
e2:f1:b5:7f:fc:2a:a7:35:1b:82:0d:14:de:41:c3:a6:3a:6f:
53:83:b4:a5:20:ac:a5:05:4d:43:b4:a7:d6:1c:6c:a3:65:dc:
f3:af:4c:29:38:c6:fe:78:8b:5d:01:a1:e5:4d:22:49:82:be:
6f:35:1d:16:51:d3:cd:a2:49:a1:f6:c0:e3:aa:d2:62:56:f5:
20:e2:75:8f:7b:0a:e7:75:e6:0f:fe:ab:1d:b5:e5:ab:e6:c7:
be:fd:9c:06:b6:4a:ed:49:7b:c6:5b:79:1f:56:30:57:32:95:
a7:5a:30:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:34 2026 by rpki-client