Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: aQMaTls+Z0VC9mGx4eIq6DEmhadDMxYx5UPOrIumf20=
Subject key identifier: 88:94:AD:FA:ED:F9:5B:00:23:4C:3A:D7:24:A8:DC:AF:3A:D3:BC:AE
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019D265F5626BFFB1C3F099C76F77C3BF671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 19:01:15 +0000
Manifest this update: Wed 25 Mar 2026 19:01:15 +0000
Manifest next update: Thu 26 Mar 2026 19:01:15 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: Ggy355snUyafqTSygplyNooZIc4+HGUP+pfJKHy+ccc=)
2: QqdbypBpxrcLYznZBUaAaDr_z-o.roa (hash: SckJVSoL8gUL5QOdfT/4r5cTNoKe863XSPeR8+BnWmM=)
3: avaEnMlL7981ZoHlCmFBVvkLBCM.roa (hash: 62norVZ5aOhRAssdJbDmNAm3FE+gQIMFJ2pokt5w/9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:56:26:bf:fb:1c:3f:09:9c:76:f7:7c:3b:f6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Mar 25 19:01:15 2026 GMT
Not After : Mar 26 19:01:15 2026 GMT
Subject: CN=8894adfaedf95b00234c3ad724a8dcaf3ad3bcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:cd:c3:c6:84:f5:ae:d0:4e:a9:18:f7:9c:
2f:a2:c8:e3:60:58:65:4a:91:a2:74:54:67:8f:b9:
58:8b:22:0c:49:7a:98:73:27:b5:04:b3:c0:43:61:
e0:9b:19:2a:8f:33:b7:a7:43:bc:56:29:db:10:ac:
f1:57:98:34:d8:d7:92:70:00:74:b5:0b:8b:dd:b8:
d9:4b:ab:3c:08:9d:8d:ba:9f:0e:c6:7c:21:ef:21:
b0:08:e3:57:7e:fb:b6:95:28:ed:09:04:23:bb:24:
11:61:69:9f:aa:fb:ee:5b:81:7a:a8:c9:2a:47:9b:
85:31:44:22:5d:c2:34:22:8a:7d:fe:86:85:86:61:
3a:28:fc:95:45:68:52:b2:e1:bb:41:c3:df:ae:d6:
f8:b0:b6:91:25:0c:0e:57:d1:b7:e2:f2:f7:39:53:
d1:1d:c0:d7:51:4f:8f:c2:70:38:85:28:a2:3d:c3:
03:57:91:e6:de:09:94:63:7a:8f:af:e8:f4:18:90:
80:e2:97:fd:06:b1:6e:17:4c:93:ad:c8:f6:56:60:
50:00:46:ec:fa:40:a6:55:8e:43:66:74:6b:0c:fe:
e5:17:a6:ec:51:c4:8b:55:ab:8c:b6:e2:a7:bc:f2:
08:04:00:a6:96:61:68:ee:e8:5b:3c:16:de:56:df:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:AD:FA:ED:F9:5B:00:23:4C:3A:D7:24:A8:DC:AF:3A:D3:BC:AE
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:34:c5:d1:55:c8:2d:25:6e:fd:c2:06:19:11:d1:25:f4:64:
e3:08:6c:aa:5c:68:01:a8:fb:95:3d:a8:36:75:05:22:a9:de:
fb:6f:90:6b:d5:4b:48:eb:20:45:b1:7e:f9:d3:bd:81:56:50:
37:22:bb:ed:9b:2b:dc:5a:f3:9e:0b:87:79:e4:97:e5:ff:f2:
62:53:e5:24:7e:fd:f8:be:92:9e:cd:c5:f3:d9:19:6c:d3:67:
14:5f:ad:9e:b6:6f:58:82:f2:3b:8f:b0:01:e8:80:a4:c7:30:
78:06:07:1d:5d:88:b6:1b:33:e1:e8:0b:50:db:b6:e8:1e:a4:
d9:2c:f2:98:41:7f:89:80:4f:c3:b3:db:8c:22:3a:63:d2:8c:
93:87:f7:aa:2f:28:9a:0f:17:bd:f0:45:21:56:e8:f9:c0:69:
17:b8:fe:79:ab:32:6a:b2:11:25:5e:a5:d0:3d:b0:10:61:3f:
c3:fa:8a:41:19:1e:0e:cc:0e:f4:69:51:e4:1d:1c:a8:be:5c:
0a:bc:b7:2a:55:53:3c:47:df:b9:be:a2:b5:30:db:47:57:54:
76:04:d4:3b:3e:c8:d0:51:0c:d4:35:44:a4:c7:4e:c2:bf:b5:
9a:b9:d1:79:e2:d1:b1:26:94:3b:0d:e1:91:44:c8:28:f0:95:
d7:22:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:38 2026 by rpki-client