Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: 1bmL7afRVFwWNrUMHzp1ueJc9vXO7Pbc3JKdxQ6EHyc=
Subject key identifier: 38:DB:71:69:BA:BC:D7:B9:2B:D7:E9:B2:82:12:6A:68:E7:1C:AD:0B
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 019D284DF0678F703348DFB179179CE2096D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 1109
Signing time: Thu 26 Mar 2026 04:01:29 +0000
Manifest this update: Thu 26 Mar 2026 04:01:29 +0000
Manifest next update: Fri 27 Mar 2026 04:01:29 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: 7XfdJYSvINv44HnQaYheJvt8FO3nUaYjDbgxUVqDkBg=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f0:67:8f:70:33:48:df:b1:79:17:9c:e2:09:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Mar 26 04:01:29 2026 GMT
Not After : Mar 27 04:01:29 2026 GMT
Subject: CN=38db7169babcd7b92bd7e9b282126a68e71cad0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:4b:d5:22:a9:b7:38:7a:69:d6:8a:9e:b0:
12:44:d6:1e:2f:57:a1:a3:91:40:47:90:37:d8:68:
72:e0:ee:85:7c:8b:5b:1f:50:03:e5:96:ed:30:e5:
70:83:43:21:95:e6:09:39:36:16:4c:a8:c8:72:a5:
a7:b5:9d:10:7d:4b:c2:8e:a3:eb:a9:88:0d:6f:06:
85:e5:89:cf:36:76:27:2d:df:17:28:1a:e0:75:7b:
20:81:75:2c:11:34:86:40:eb:15:64:80:44:05:1c:
36:ef:d0:66:3c:5b:7b:4f:e1:41:b3:8b:38:01:35:
27:2f:39:e8:55:1c:f4:e5:e1:1e:c7:87:69:64:a2:
40:7b:3e:c1:61:b1:31:18:aa:ab:12:34:62:a9:c7:
71:cf:12:c2:46:cf:1f:54:c1:c5:19:1b:cf:26:e9:
53:23:dc:7f:80:20:ca:b5:1b:3d:5d:e3:e2:45:f1:
2b:55:ef:75:b3:48:cc:a1:a7:e4:c7:3a:90:40:7e:
05:7c:2d:9b:f1:98:76:d9:b7:7a:d6:60:2d:3f:d7:
a1:a9:01:4d:1f:08:9c:55:b8:fa:47:78:f9:d8:4e:
18:d0:fd:91:00:0f:dc:88:34:86:ac:ca:7e:e4:f1:
f4:1e:d2:af:70:dd:8a:77:dc:ff:77:ea:d8:40:f6:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DB:71:69:BA:BC:D7:B9:2B:D7:E9:B2:82:12:6A:68:E7:1C:AD:0B
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ce:c8:8a:a0:37:4c:0a:2e:6c:85:8e:5c:d4:10:c3:19:b9:
7f:4f:6a:91:eb:2d:d2:60:e7:79:5c:48:95:34:fb:43:7e:f5:
36:98:27:0d:61:5d:0d:cf:0d:36:51:02:2f:54:12:27:9a:0a:
7f:3e:3d:82:84:98:96:27:fe:39:e6:04:07:ef:e2:9d:7d:f6:
e3:b4:e3:e3:5a:e1:7a:1f:2a:9e:59:b5:af:1b:db:40:7b:0c:
a9:26:da:b1:cb:d7:3e:66:77:b7:7c:4a:86:51:b2:04:19:ba:
8e:da:e2:e6:ca:67:2f:c4:42:64:ad:d5:c8:90:06:40:53:35:
89:06:61:4c:3d:0a:e3:b6:f2:e6:12:46:a5:e7:d2:b2:8c:b7:
1e:ad:b1:c4:ed:9f:42:c6:ea:f9:06:ac:54:6b:98:aa:4b:2e:
29:ba:58:0a:48:bf:d8:8a:b8:cd:11:ae:85:30:7f:45:7a:db:
bd:29:27:84:9c:eb:4c:6f:51:0d:d0:9b:50:65:40:c3:d8:cc:
76:63:27:b2:b6:c0:38:5b:60:08:0e:57:6e:fe:95:9d:3d:06:
e7:1b:7b:4f:c3:b8:bd:c5:7a:30:28:cd:23:c0:ab:6d:bd:d1:
9b:0c:f3:25:60:cf:5c:30:25:7a:a6:61:9c:34:55:06:c0:85:
26:00:18:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:37:08 2026 by rpki-client