Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File: o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier: 22bzXCxLF2h8lHN7AvwoYbXDdRxW6YqTlcIJeikZ9tQ=
Subject key identifier: 5F:3E:D1:8B:B9:94:CF:6B:0F:5E:21:7A:FC:5A:4E:98:22:5A:94:1C
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer: /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial: 019D28F28ECE2ADA7E61B40B1BF5C489CBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number: 0F0E
Signing time: Thu 26 Mar 2026 07:01:18 +0000
Manifest this update: Thu 26 Mar 2026 07:01:18 +0000
Manifest next update: Fri 27 Mar 2026 07:01:18 +0000
Files and hashes: 1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: uBBtp7GJauwdLFNknJVcKQf1hsRgnjATALmzGbJzHMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8e:ce:2a:da:7e:61:b4:0b:1b:f5:c4:89:cb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Validity
Not Before: Mar 26 07:01:18 2026 GMT
Not After : Mar 27 07:01:18 2026 GMT
Subject: CN=5f3ed18bb994cf6b0f5e217afc5a4e98225a941c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:86:9d:5e:d9:a0:e3:9e:d6:22:8a:63:3f:
40:d5:a3:88:f9:b0:10:ec:a5:e6:12:93:80:97:46:
c6:54:c3:b0:c3:49:bc:45:26:d2:59:46:2e:69:51:
f3:c9:a6:98:5c:2e:dc:99:8a:2d:07:5c:3c:88:b3:
8f:c7:b7:c8:b5:99:61:a4:d5:9f:34:14:d3:7f:8e:
35:4e:f0:8c:e5:c2:aa:36:64:24:95:0a:80:17:41:
03:90:aa:32:b4:36:a0:09:da:77:00:3a:45:26:99:
d4:86:b0:cb:21:28:38:c4:f2:47:dd:25:c9:d5:95:
9f:eb:4a:b1:5f:2a:86:9a:a9:72:55:df:45:d7:2a:
cd:62:9f:4f:8b:39:74:ff:c1:25:d9:4f:c4:1f:75:
ba:04:ee:69:fd:dd:b8:e0:1d:66:9c:ff:cd:ad:3a:
81:05:93:5c:d5:a4:6d:ca:a7:06:dc:74:3b:fc:11:
c6:cc:83:c7:cf:47:48:3e:b4:24:3d:cb:91:42:dd:
ea:e0:cd:cf:9f:23:60:fd:53:0d:ed:b5:11:62:23:
f4:a5:df:01:a4:ae:7a:31:4e:cc:3d:ac:b7:99:b8:
37:78:ac:d7:12:3c:87:c4:48:bd:f7:ec:cd:be:1e:
9a:bd:08:ce:93:29:c7:a8:02:5a:09:14:d8:6d:40:
20:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3E:D1:8B:B9:94:CF:6B:0F:5E:21:7A:FC:5A:4E:98:22:5A:94:1C
X509v3 Authority Key Identifier:
keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:03:75:39:b8:08:cb:eb:64:c7:60:a5:50:29:ca:56:a4:27:
cf:3c:ed:30:4a:a5:f9:de:89:e2:23:df:c4:80:ca:2a:9f:09:
19:16:9c:7e:65:ec:f8:e6:e9:54:eb:81:74:6f:af:cc:8d:6f:
59:87:fc:34:24:7f:66:a9:07:e0:f4:8c:fc:3f:16:42:4b:96:
aa:fc:be:52:fc:1b:40:0d:87:cf:68:24:fa:4d:b3:58:e5:0b:
0b:ce:d2:c7:b1:56:e2:62:0d:70:b5:b2:df:6b:1c:f8:fc:24:
65:ad:26:59:8d:af:15:b6:ae:2e:39:6d:be:23:53:18:f5:7e:
23:c3:64:c2:3f:16:00:08:7c:b8:7c:d6:0e:69:10:26:64:b6:
bd:4d:6f:22:c7:04:b8:80:de:d9:f3:76:65:7b:98:5b:ab:03:
d4:ec:24:49:0b:5c:18:08:56:fd:09:0d:88:09:42:3b:73:c5:
f2:10:92:35:66:de:2c:1f:b3:5e:70:4f:e4:5d:cd:2e:f5:d3:
82:1f:15:d8:42:65:b0:d6:64:c1:a0:fc:42:8f:2e:b4:5d:22:
35:1d:df:59:df:00:87:38:1c:f8:93:44:d0:03:e0:31:2d:d6:
f8:f3:18:6f:61:3f:1d:0b:d5:e7:f3:5f:94:19:1f:60:25:95:
a1:19:76:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:09:58 2026 by rpki-client