Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
File: O-R2HUTYBsP55OdrecjyKWzHu88.mft (raw, json)
Hash identifier: ciulbqiusnJmRIymBQhVrtmTkuUyzuSXHs+H/d9ehwk=
Subject key identifier: 2E:32:D8:35:0E:FC:09:20:3B:61:D3:DB:83:98:27:E6:EB:8B:4C:3F
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Certificate issuer: /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial: 019D27A93DDA3E75AFC1584EBA1204317431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
Manifest number: 08B0
Signing time: Thu 26 Mar 2026 01:01:35 +0000
Manifest this update: Thu 26 Mar 2026 01:01:35 +0000
Manifest next update: Fri 27 Mar 2026 01:01:35 +0000
Files and hashes: 1: O-R2HUTYBsP55OdrecjyKWzHu88.crl (hash: /6wJhAuizdD/4RB/gBa4I9hQ+WsLpKL4MqUzU427ivA=)
2: vt7DyLKUCf23QQLyZIR7DPMJBBk.roa (hash: 4cTJ4u2lPUjyZpzC/qN04ASg0UBqt7RnpnKm2l9uNP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:3d:da:3e:75:af:c1:58:4e:ba:12:04:31:74:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Validity
Not Before: Mar 26 01:01:35 2026 GMT
Not After : Mar 27 01:01:35 2026 GMT
Subject: CN=2e32d8350efc09203b61d3db839827e6eb8b4c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:bb:31:7c:3e:8a:ca:12:6c:46:fb:8e:3c:
19:6c:9c:bb:5a:3f:ca:a4:1d:a2:19:49:9c:e8:16:
60:c3:47:c1:8c:7b:2d:91:20:dd:7f:d1:2f:f3:31:
07:89:20:fb:51:c4:8d:a2:ae:a5:19:f3:d5:4f:a7:
62:37:60:90:94:03:62:e7:c6:50:3f:51:01:32:a1:
7f:3f:20:e4:7c:47:da:b4:3b:50:8c:0b:7a:a7:a8:
7a:44:bd:95:4e:08:f3:0b:87:a0:38:ae:52:b8:e8:
94:bb:27:87:41:be:fd:d7:14:46:0d:e9:ef:aa:ed:
e1:42:55:5a:ad:4e:67:ef:02:21:2d:0d:b6:59:a5:
1a:2d:7c:94:d5:e1:b4:a8:36:12:fd:07:8d:10:00:
82:e3:66:f9:f3:d5:ea:61:20:80:0f:6d:e5:89:af:
91:20:c5:e2:44:cd:ae:f2:9f:c2:d5:58:c6:e0:fe:
96:a9:1f:4a:dd:0e:6a:ec:38:72:d9:eb:5e:36:9c:
4c:ef:42:3d:81:3d:dd:a0:1d:8c:00:24:de:c0:40:
cf:f8:2c:f2:12:fe:91:3a:be:ac:bc:da:f4:8e:05:
24:65:c3:78:e6:b5:f9:1a:8d:83:64:54:45:3a:a6:
63:3b:0f:88:e1:b7:19:8d:b9:42:20:1f:ec:87:e3:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:32:D8:35:0E:FC:09:20:3B:61:D3:DB:83:98:27:E6:EB:8B:4C:3F
X509v3 Authority Key Identifier:
keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5b:0d:f7:e9:d6:4f:c8:78:7f:59:5f:fc:f7:a8:46:5f:c8:
fd:f5:18:59:b7:4b:66:52:d9:c7:bb:53:20:68:d4:5d:6f:f0:
48:b1:ba:73:f3:8d:bd:0b:35:76:6e:c9:b6:98:99:44:a8:02:
a3:6d:ca:61:1e:ab:cc:6a:25:40:eb:a5:3e:1e:50:a6:20:d4:
43:e9:d2:99:9d:d7:68:76:f1:6e:8a:7f:4c:ea:d0:cd:a7:dd:
2e:fa:65:42:66:8c:40:5c:70:2d:1b:3c:01:b5:47:61:11:f5:
8c:ca:1d:08:d1:3b:7c:e7:e5:ee:0f:36:4b:be:ea:4d:99:80:
9f:f5:58:04:f5:f6:7f:4d:46:c4:54:8a:9c:3f:7a:a6:2d:5d:
30:d4:ff:85:c7:17:7f:9b:d0:9f:a0:a9:82:6a:da:39:c6:bc:
02:d7:6e:0e:94:8f:77:29:1d:63:80:7d:13:91:08:e7:e9:94:
31:ec:05:73:f8:be:a7:6f:d1:01:25:be:1b:78:be:eb:76:76:
81:89:bd:4e:d6:c4:18:a7:44:f3:5e:c9:e3:d9:2f:8b:30:09:
5c:f1:15:fa:1a:ab:da:c8:fc:87:74:6d:e6:7d:ad:75:0f:5b:
f8:5e:86:bc:cc:96:b4:b3:7c:71:02:56:a4:70:a4:72:5c:4b:
93:f0:9f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:25:04 2026 by rpki-client