Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: HDNGTWF26+91PFZXxnyEITh6PV0GfLWorB1XCKZim8w=
Subject key identifier: 37:83:04:49:B7:55:4E:B3:A1:70:9B:89:7C:BF:74:86:96:9A:F8:A4
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 019D2A04888D1BD9B8DFE195454AC5F1181F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 15D7
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: FeRYJ3VahGzc2m1d8jVMgStu2riUVjGpirFxIWxB+/M=)
2: Q3KsXzG_1owp4twp3h32beoBh9Q.roa (hash: 95YPdhWrEz7hBrK+p1i4JTgHUiXN7Vq6G7x0WIDZtrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:88:8d:1b:d9:b8:df:e1:95:45:4a:c5:f1:18:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=37830449b7554eb3a1709b897cbf7486969af8a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:c8:ec:45:d9:4e:ad:25:c9:b0:5a:ae:1d:
4c:3f:8e:7d:e4:25:83:f4:71:b0:0e:09:ec:26:da:
4a:47:87:53:e7:5d:4a:09:e1:d7:77:66:41:2c:3d:
9e:c5:6c:4f:d0:44:21:ad:22:3f:c7:68:f0:1e:f4:
cb:c4:6b:c1:12:98:ed:33:16:c5:fb:23:45:b3:59:
d5:34:d5:0a:2e:a5:de:31:54:aa:1c:de:16:b0:26:
1d:3e:f0:8e:9b:4e:58:98:54:9c:01:41:88:3f:83:
46:70:8a:9f:d6:dc:03:45:d8:3c:b8:03:9a:09:85:
a9:02:98:fc:65:f5:74:c3:59:d4:13:62:47:e5:fc:
a0:f8:40:ff:75:76:e8:07:bd:79:99:aa:d6:56:e8:
70:d3:18:28:79:cb:14:93:9c:01:b1:b5:b2:a1:77:
59:c2:3e:f9:a2:e2:07:95:aa:52:28:5a:c0:2e:53:
5c:6b:d0:b2:84:26:a6:7d:b1:0c:13:5f:61:33:79:
56:30:f7:c0:ff:93:47:05:27:b8:7d:39:63:4b:b2:
71:cb:f6:74:ad:0e:19:0e:01:5a:88:6d:8d:9c:24:
76:c7:ab:dd:f8:32:2e:60:05:7a:d1:4b:1b:eb:e8:
7a:17:47:f7:84:03:10:3f:c5:28:4d:88:f7:8b:e4:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:83:04:49:B7:55:4E:B3:A1:70:9B:89:7C:BF:74:86:96:9A:F8:A4
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:60:2b:13:f4:aa:1c:5c:c5:90:2c:af:7c:c0:39:c2:f4:d3:
16:0f:ea:2d:3a:8c:76:e1:c6:20:aa:fc:52:62:6c:00:4c:19:
9a:ec:97:65:35:62:c6:8b:f5:a0:1f:b4:3d:c6:70:7a:41:d9:
bc:8b:d4:a1:c6:09:d2:1f:61:42:68:4a:20:75:71:a5:61:3a:
81:19:15:97:4f:1f:fc:cf:49:09:e7:4c:fb:5f:d9:55:bf:db:
eb:3a:c3:c1:44:e7:d0:b4:66:c2:c8:85:99:fe:36:d8:26:ca:
d4:03:0b:82:07:51:bf:91:fb:89:29:70:85:2f:6d:f7:7f:d3:
83:05:55:21:9b:0f:60:e3:04:ad:6b:4d:53:9f:df:ba:42:8e:
b2:a5:e4:48:2d:ee:94:8e:c0:7f:e1:a2:94:bb:fe:34:ac:17:
3f:e6:00:60:b8:23:99:06:0c:b7:ad:3a:95:23:a4:60:25:83:
ef:73:d8:20:c0:50:ed:e1:45:ba:bb:6b:b4:98:74:02:6e:b7:
d4:95:18:63:5e:95:e5:56:ca:e4:60:4a:46:2d:cb:a1:b4:a0:
56:4e:3a:9d:1f:16:da:19:36:d5:06:a2:01:e5:5d:18:10:5a:
c0:81:f1:0f:0f:82:e3:af:d3:06:ab:b7:30:8b:29:d6:74:66:
a4:de:e1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:50 2026 by rpki-client