Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
File: O2HIth_0q5daL2xn0LzmN5Ni4v4.mft (raw, json)
Hash identifier: XV3gZ1twtQN97Qni8QIHiInkR1FxxU09ke5j4kdVeSs=
Subject key identifier: 37:1C:07:00:EE:DF:B2:C1:56:92:A0:E7:51:66:B6:DF:9A:72:82:CD
Authority key identifier: 3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
Certificate issuer: /CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Certificate serial: 019D25F13E28EEC2FBA0D261F9E8A0A180B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
Manifest number: 0B9A
Signing time: Wed 25 Mar 2026 17:01:00 +0000
Manifest this update: Wed 25 Mar 2026 17:01:00 +0000
Manifest next update: Thu 26 Mar 2026 17:01:00 +0000
Files and hashes: 1: GbMgngzItY4uIndF-XcuFLKJhR4.roa (hash: wGyJex/ofBYcPy2R1/ePo/0rQqidiA5P6cvt53DFaE4=)
2: O2HIth_0q5daL2xn0LzmN5Ni4v4.crl (hash: 8IOvvyZuvaRYpSRbvj4D1UDci+yZhmYqCjnnvakYtu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:3e:28:ee:c2:fb:a0:d2:61:f9:e8:a0:a1:80:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b61c8b61ff4ab975a2f6c67d0bce6379362e2fe
Validity
Not Before: Mar 25 17:01:00 2026 GMT
Not After : Mar 26 17:01:00 2026 GMT
Subject: CN=371c0700eedfb2c15692a0e75166b6df9a7282cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:73:fe:41:3b:be:63:46:6e:07:2e:81:56:8a:
e1:cc:e8:4a:10:47:37:e8:44:59:aa:98:2e:b8:8d:
71:01:f7:60:cb:a8:71:bc:8a:df:88:51:29:67:61:
7e:74:64:c9:a5:f4:18:4f:5c:59:42:90:53:22:37:
b1:45:30:57:eb:54:b1:91:8b:1e:51:87:e0:eb:9b:
db:62:8b:dd:97:98:97:4d:2c:e7:1e:28:8c:0a:69:
00:4d:aa:b6:bc:ac:39:98:24:9e:85:bc:46:4a:cd:
99:cb:28:8a:03:ce:29:34:ca:bf:66:7c:c4:f1:6e:
5b:53:10:24:77:35:4f:b3:da:5c:b4:b8:91:40:53:
3a:a3:75:0c:51:9a:af:89:d5:ba:b6:7f:01:00:48:
f4:40:c7:e4:d1:39:94:25:d9:8c:37:9e:31:e9:a8:
10:4a:11:81:31:57:70:9a:f1:15:f9:c2:ff:72:de:
ea:72:20:93:12:df:dd:ab:c5:2e:09:c2:25:69:4b:
b4:58:31:75:41:8d:74:fc:05:73:76:85:d8:72:c3:
7a:e6:45:5c:5e:41:e0:a7:39:1e:e7:de:86:c3:3b:
ee:6f:76:f4:77:64:86:a9:1e:69:f7:a5:e3:2a:af:
d2:70:8d:ae:2f:7e:1c:bc:16:ce:6c:32:be:c3:f8:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:07:00:EE:DF:B2:C1:56:92:A0:E7:51:66:B6:DF:9A:72:82:CD
X509v3 Authority Key Identifier:
keyid:3B:61:C8:B6:1F:F4:AB:97:5A:2F:6C:67:D0:BC:E6:37:93:62:E2:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2HIth_0q5daL2xn0LzmN5Ni4v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fc0ed1-5666-4bb7-bb7c-7b627582fd2d/1/O2HIth_0q5daL2xn0LzmN5Ni4v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ed:37:3c:67:76:2a:e8:38:4c:a8:55:b8:c7:25:6f:d3:2f:
a4:b1:98:f6:46:40:f9:e0:20:b7:c8:42:cc:9c:85:ab:0b:01:
de:0b:8d:7e:6b:38:87:3d:95:09:d2:0c:47:de:21:bb:76:85:
9a:96:2d:30:c2:d7:0a:4e:fa:a1:09:27:d4:23:21:6e:7a:b0:
d4:73:91:f6:ad:7a:ca:13:10:f0:3c:50:9d:2d:0b:18:0c:cd:
3b:27:a3:55:19:a6:18:8d:45:3a:15:a8:2d:f4:30:ba:e7:7c:
82:47:d0:02:0c:de:31:dc:fd:0c:48:c4:dd:73:1e:c7:f0:bc:
7c:2c:96:f4:23:6b:cc:35:88:3a:fa:c0:3d:a3:e0:38:3d:bb:
e4:81:ed:d9:87:0f:f1:cd:68:52:e1:90:f4:6f:6c:de:5a:d8:
36:76:8b:ea:07:da:8a:5e:6f:6c:4d:ad:83:ef:fe:0f:40:c1:
95:3c:75:9e:ed:e5:d0:c2:28:b8:f3:4a:24:92:26:6e:3d:7b:
60:ab:28:2c:79:26:5f:75:24:fc:4f:48:e3:c4:17:b1:95:6b:
86:fd:dc:08:29:66:ff:3b:6c:55:98:19:ac:18:51:9e:84:81:
3d:5b:34:dd:09:c4:92:76:c0:f9:93:33:20:ac:6c:36:9e:1a:
78:ef:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:33:54 2026 by rpki-client