Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: yAUQ4uNXeczltXyxY+wggxuPkTi4gNzEdtPzLGud6sU=
Subject key identifier: 64:02:E6:57:0D:A8:02:9B:75:71:35:CD:B2:7C:DE:B4:68:0A:DA:1C
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 019D27DF77C14ED0421295D699C105E8944F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 074C
Signing time: Thu 26 Mar 2026 02:00:49 +0000
Manifest this update: Thu 26 Mar 2026 02:00:49 +0000
Manifest next update: Fri 27 Mar 2026 02:00:49 +0000
Files and hashes: 1: IK0e8QDmHj3hNcr3qlL6Dq22OBU.roa (hash: rjt1GPioTzLz/WmxHMW/A6JbnHN5M/Apy60NB3OPgNY=)
2: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: jbUsWNHHeNfnkiMygN8xYxKPed00vv7PNI9aPrMHfFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:77:c1:4e:d0:42:12:95:d6:99:c1:05:e8:94:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Mar 26 02:00:49 2026 GMT
Not After : Mar 27 02:00:49 2026 GMT
Subject: CN=6402e6570da8029b757135cdb27cdeb4680ada1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:d6:61:e1:37:62:0f:77:08:5b:2f:17:8e:
39:19:87:ff:f5:4c:38:eb:29:ea:fd:84:48:3f:74:
8a:bc:c7:e3:2f:7b:ac:fb:fc:18:e1:39:4d:66:51:
d2:a8:a9:c8:8c:f8:10:cb:32:c6:54:5a:75:ff:76:
7d:bf:66:8b:69:1a:95:de:c6:02:fc:31:9e:ce:dd:
ab:79:22:9c:01:ce:3d:9d:7d:15:52:6f:32:0e:06:
b5:fd:74:12:0c:a4:0b:19:f1:08:02:d7:33:b6:3f:
e7:0d:5c:e2:07:12:3d:b1:1f:4d:59:7b:a5:60:c0:
87:7b:37:ee:80:0f:59:26:d9:fa:ae:46:cc:ca:9c:
be:48:fb:ec:d3:16:a8:83:f1:14:35:c4:b2:b5:af:
70:f3:54:c3:15:e0:8e:88:d0:c3:e6:52:f6:3a:4a:
70:8d:4f:0b:fe:fc:c4:23:aa:b7:0b:18:19:0d:82:
ab:9e:88:cd:89:ad:dd:49:98:ec:a8:e1:0e:9f:86:
b1:18:a6:dd:83:5f:47:3c:a6:ac:75:f3:56:87:4f:
5d:06:2c:e7:e8:0a:95:81:e8:4d:37:a0:11:c8:46:
79:b9:fe:5f:5d:78:5f:e3:61:b6:1b:78:79:07:d6:
f6:f8:6d:e7:39:84:c7:db:e3:c2:eb:86:38:f7:98:
4d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:02:E6:57:0D:A8:02:9B:75:71:35:CD:B2:7C:DE:B4:68:0A:DA:1C
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:68:0c:8b:c3:40:96:13:64:06:df:37:bc:d1:36:fa:b3:cb:
bc:46:a1:8c:28:99:9c:b4:3a:db:ce:ec:cb:8a:dc:13:19:28:
e3:dc:70:86:32:a7:e8:33:e0:d0:9a:3c:df:46:82:75:82:d6:
45:5f:69:3f:34:8f:70:45:dd:6d:33:97:ee:88:4c:fe:77:30:
04:de:35:b5:7c:62:26:fd:a9:7a:b0:45:7a:73:fd:1d:68:4d:
d5:f8:82:86:80:a2:f8:3e:5c:ac:83:20:87:a2:e8:a2:75:e1:
cb:8b:59:49:83:c0:fc:c8:b3:ec:0d:fc:54:c6:ef:bd:94:f6:
de:13:53:98:ae:a6:89:9e:8a:ac:39:89:24:2d:ff:f2:a6:df:
10:4f:34:fd:ac:f9:e5:85:2a:b4:cb:d3:89:71:5d:cc:a7:d8:
ff:e0:28:89:5b:27:7e:f8:54:ea:83:3e:93:cf:4c:1b:67:95:
63:1f:32:0d:7b:24:cd:b1:6c:db:0c:16:54:41:fc:a9:90:4d:
8a:4e:ab:54:a5:29:89:89:68:a6:57:5a:0a:43:99:20:91:31:
10:2c:21:be:ab:f5:af:fa:fb:6d:fa:2a:52:0e:35:aa:a3:3c:
a2:cc:71:39:ec:bf:e6:06:96:f7:3b:32:5f:08:fa:3c:1c:9d:
35:63:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:25 2026 by rpki-client