Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
File: o7L02u177ypqtLu5qvrFZU3cU8E.mft (raw, json)
Hash identifier: WIveaNjS+5n8tEnkrCHbkrtdoBKANL966prQjmBr0aA=
Subject key identifier: A3:CA:8B:55:47:5C:82:6B:6E:15:23:AD:CC:21:F9:F1:7D:6A:1A:5B
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial: 019D31F588970F12820CD3B1C0B4FD52239A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
Manifest number: 1481
Signing time: Sat 28 Mar 2026 01:01:08 +0000
Manifest this update: Sat 28 Mar 2026 01:01:08 +0000
Manifest next update: Sun 29 Mar 2026 01:01:08 +0000
Files and hashes: 1: o7L02u177ypqtLu5qvrFZU3cU8E.crl (hash: uDpvh/xVqW25xZEZ6ECuW+GdNDc4rnVEvehPl0l7M0k=)
2: w4ITWrVOd87_9Oz-MtY7slczBow.roa (hash: /062+JMxPPoUdp7c8u+6Eta3MA3XDfRjmmRKaz0UrFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:88:97:0f:12:82:0c:d3:b1:c0:b4:fd:52:23:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Validity
Not Before: Mar 28 01:01:08 2026 GMT
Not After : Mar 29 01:01:08 2026 GMT
Subject: CN=a3ca8b55475c826b6e1523adcc21f9f17d6a1a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:90:a4:44:13:43:70:38:61:a6:83:11:e5:
31:88:e0:bf:51:d5:f8:27:9a:b2:d0:0d:20:7d:24:
bd:00:d0:bc:50:95:f9:9d:11:b0:bb:8c:8c:5c:b8:
d9:eb:0a:fd:53:c6:13:7e:98:4a:a2:18:69:f4:bd:
d7:44:ac:29:eb:af:64:0f:d1:81:c1:53:3a:05:87:
bf:56:a7:bc:d8:03:51:11:66:51:10:c7:54:7c:82:
0a:64:9f:18:a9:78:94:61:39:20:93:13:7a:18:f9:
c0:33:4a:ff:81:a1:95:d4:17:c3:53:db:4c:af:19:
83:37:0f:a3:6f:6e:47:24:12:ab:52:a7:3b:21:2e:
98:f1:bc:81:68:e2:99:6b:10:0a:cb:88:8c:0e:c6:
7e:1e:b0:4e:7f:e3:27:cd:32:b5:04:8d:00:40:45:
07:c6:5b:23:97:60:dd:ff:fe:18:82:3e:10:5b:c0:
e0:c6:1f:4f:78:9b:17:4d:6a:5a:ee:8b:b5:79:c3:
d7:7f:32:10:a7:73:a2:00:ff:cb:c8:78:7b:d5:b6:
da:85:10:eb:04:a5:cf:55:8b:6a:2b:74:2d:9e:54:
16:c1:6c:1b:4e:de:e2:27:f5:a1:3b:59:19:54:59:
1b:fe:e5:d9:97:c6:11:30:09:13:92:09:22:f8:09:
fa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:8B:55:47:5C:82:6B:6E:15:23:AD:CC:21:F9:F1:7D:6A:1A:5B
X509v3 Authority Key Identifier:
keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:83:1b:ab:f9:da:f7:9c:70:5f:81:d7:f0:a7:85:42:e9:f9:
86:25:4d:c8:4e:d8:08:f4:35:2b:b6:7d:70:22:23:72:28:7c:
24:c9:79:39:85:37:0e:21:b5:34:ef:6e:90:3f:73:45:f1:ce:
ee:68:e7:a8:94:53:35:0e:9b:ec:34:5c:28:b0:df:88:86:ee:
5e:6e:e5:1c:99:11:f5:de:a3:7e:80:e4:94:dd:44:97:ff:df:
71:19:dd:06:80:eb:96:dd:0c:b5:68:27:28:55:76:fd:28:60:
99:b2:25:52:69:2b:67:f5:63:25:92:bf:39:34:78:2f:17:86:
a1:d7:5a:3d:ed:1d:a0:62:e9:90:87:0b:f4:3b:55:78:31:34:
08:28:13:3f:5a:f4:a6:77:f0:6d:69:f8:02:7e:9f:69:f7:84:
1f:f9:be:3e:00:ff:d9:00:0e:42:45:27:6f:24:5e:8d:67:95:
53:47:a5:c3:51:08:32:0c:d9:99:51:8c:ac:a6:55:33:f7:ab:
1c:1b:c5:e0:5f:3f:2f:fe:6b:bf:52:68:10:e5:02:b5:c1:f2:
ba:99:a7:18:16:7e:47:b3:c1:f0:98:22:6c:bd:b4:42:18:9b:
46:82:3f:bd:21:06:f2:31:24:ea:c2:b5:49:87:b4:5f:89:e8:
0b:51:ef:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:47 2026 by rpki-client