Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
File: O6F4K2r7p8a88HC5P-1MyEr0E1I.mft (raw, json)
Hash identifier: 9UpE1o13X3cDPPjAVjlh5e78Zv5npSNekoSAkaO/pWM=
Subject key identifier: 61:82:0E:0E:3C:F4:36:31:B6:80:F8:9A:ED:9D:EA:10:06:2F:F2:57
Authority key identifier: 3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
Certificate issuer: /CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Certificate serial: 019D27E0261BD309C2B132593CFCC2BBEB18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: C_fEnv_eRtdfHOrTALK5_eLV5ok.roa (hash: /2vtpruz4Kd8ELtmIOpyqLwlHo0YencLVWVxE/Dnmjs=)
2: O6F4K2r7p8a88HC5P-1MyEr0E1I.crl (hash: nknO8sZD1JFkwDwNaJ+XQlmxY0etdmOP/4el9j0Ic6w=)
3: pQejgEmzNw8i21WZUTBRMpyH0kA.roa (hash: +KDsF708PcX7ZR6TFqTEl20ksY/s2f/uGyYC/ymkOIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:26:1b:d3:09:c2:b1:32:59:3c:fc:c2:bb:eb:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba1782b6afba7c6bcf070b93fed4cc84af41352
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=61820e0e3cf43631b680f89aed9dea10062ff257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:31:d5:44:d5:ff:5c:ed:39:8a:2a:d0:de:
76:77:a8:57:12:a5:30:0e:3a:5d:28:c5:ba:39:89:
1b:01:c5:25:a4:61:e5:19:20:b9:6c:73:21:ce:2c:
5c:d7:a3:06:7d:18:9f:c2:59:cf:23:9c:44:7b:f0:
d3:25:37:09:48:1e:3d:ca:a7:09:7a:7c:b4:9e:89:
26:f4:52:95:90:9b:17:36:02:17:82:b7:76:ae:dc:
3a:6f:f4:78:be:07:2e:97:b3:c6:ef:db:96:57:37:
c8:e9:0d:39:8f:20:2b:67:37:51:05:fe:9e:fc:3e:
af:84:88:2f:21:7d:3d:c5:6d:ff:47:df:b8:a6:60:
37:86:24:29:04:14:e5:c8:71:a5:82:72:cd:ea:ea:
7e:eb:6b:0b:e1:30:75:fe:35:0a:83:8e:b7:f7:e0:
17:59:52:58:73:90:53:cf:d5:3d:2b:b4:4f:86:6a:
e2:83:78:ca:ab:10:69:59:21:00:99:c3:b3:fc:09:
36:24:cd:8e:71:81:18:bf:70:be:1b:28:ac:ef:00:
53:1f:e3:cd:df:df:75:6f:c4:6e:fd:89:c8:c5:41:
40:97:a6:96:04:d3:f9:6f:b6:92:48:62:64:b3:b8:
34:93:be:62:21:15:98:83:6e:4a:4a:d8:cd:d1:79:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:82:0E:0E:3C:F4:36:31:B6:80:F8:9A:ED:9D:EA:10:06:2F:F2:57
X509v3 Authority Key Identifier:
keyid:3B:A1:78:2B:6A:FB:A7:C6:BC:F0:70:B9:3F:ED:4C:C8:4A:F4:13:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6F4K2r7p8a88HC5P-1MyEr0E1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad7ac3-b8ad-42b0-ad2a-ae967d739dd3/1/O6F4K2r7p8a88HC5P-1MyEr0E1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:15:b9:4a:a7:e8:fa:47:2b:32:83:c5:1c:d5:c7:66:30:69:
21:8f:53:dd:05:33:d6:56:6e:a5:01:4d:9a:e9:9f:f8:9a:37:
96:b4:f7:e4:77:f8:62:6e:6c:ee:19:df:3a:e4:bd:4f:31:8c:
3d:5e:e3:70:93:8b:72:3f:c7:cc:db:a3:91:52:5d:76:86:65:
13:39:61:68:a7:bc:e0:5c:71:16:1e:8c:4b:fd:48:98:64:7c:
61:43:6b:2c:d0:5a:fe:d0:a6:a8:69:eb:ec:bf:18:56:dd:da:
71:61:51:18:2a:43:9a:23:be:b2:52:4d:b9:cc:33:e3:9f:99:
72:6c:20:c3:28:8e:d0:73:dc:c8:67:c8:6e:c1:3a:54:80:fe:
9f:82:79:f6:f7:9e:1c:9b:29:76:45:db:f2:c7:88:60:5b:ba:
70:c0:e9:74:d8:7c:fc:e5:78:8e:3b:4f:4d:ba:2c:c2:d9:fb:
ea:c0:54:d7:e4:46:4d:ab:b0:70:15:e2:08:19:0f:b3:d9:c9:
d0:43:30:8e:a9:db:e3:e2:38:a2:2b:c3:08:60:b6:0d:38:a2:
89:31:1d:59:f8:10:e2:51:5d:45:58:5a:3f:23:82:1f:ee:50:
4f:4e:a6:6c:40:e8:5d:e9:bb:4c:51:08:d1:63:bd:7f:43:b9:
c7:ff:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:48 2026 by rpki-client