Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
File: O3S5CBUT135Tof8iWzNAD7s5E1U.mft (raw, json)
Hash identifier: G3Djz6yjaMKTVlNMhPGv7wamUJCboHoQAslYSibDGt0=
Subject key identifier: 03:C4:AF:FD:BA:48:00:0E:E7:AA:16:FF:4F:90:45:AE:E7:2E:D5:93
Authority key identifier: 3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
Certificate issuer: /CN=3b74b9081513d77e53a1ff225b33400fbb391355
Certificate serial: 01A1DEDEB39FC38C372E1065CCBDC682986B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
Manifest number: 014C
Signing time: Sun 15 Nov 2026 11:01:39 +0000
Manifest this update: Sun 15 Nov 2026 11:01:39 +0000
Manifest next update: Mon 16 Nov 2026 11:01:39 +0000
Files and hashes: 1: O3S5CBUT135Tof8iWzNAD7s5E1U.crl (hash: 4wcKrDl9oUHxaWqmh9AAfLnnL4R0H7vYSKL9P7Onjt4=)
2: TVGvt-GV-3EVfMvtoUH4tHH1zlI.asa (hash: V32WZ60pl0CbZiR2Xww+WSeiolXx8sZ4RQF4hMAGck8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:b3:9f:c3:8c:37:2e:10:65:cc:bd:c6:82:98:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b74b9081513d77e53a1ff225b33400fbb391355
Validity
Not Before: Nov 15 11:01:39 2026 GMT
Not After : Nov 16 11:01:39 2026 GMT
Subject: CN=03c4affdba48000ee7aa16ff4f9045aee72ed593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:b0:b3:72:8f:e5:f6:04:b5:99:9c:42:dd:
3b:97:be:e6:c0:cb:b9:b2:03:48:88:a0:a3:92:25:
65:58:90:3c:85:c6:49:c8:11:c9:1d:da:1d:a3:36:
7a:e3:9b:a5:96:17:14:9e:d1:7a:4d:a8:db:fa:57:
87:c5:a9:0d:ec:bd:f8:3b:03:c5:cd:28:2d:51:9d:
3a:51:39:69:23:c5:7c:38:33:bf:ed:c6:08:ac:77:
44:1a:5e:62:34:a7:a7:7d:5e:a6:01:c0:3b:72:e0:
46:1d:55:34:2c:16:2b:43:75:5f:83:90:4a:70:38:
e7:15:e5:30:f4:6c:3d:cf:a0:a7:87:0f:68:e6:f8:
0f:0d:77:f8:03:fd:87:ee:df:5d:78:00:7a:a9:06:
bf:1f:f3:24:46:37:4e:0a:6c:09:0f:23:65:91:f3:
77:a1:5a:c8:75:24:08:5e:52:80:8b:37:b3:3d:36:
78:2f:0e:8f:1b:f9:12:13:0b:ac:95:33:7f:0a:0f:
81:3f:c1:de:f5:47:be:8e:4d:25:61:d1:32:f8:3e:
f6:0d:98:9a:5d:8f:b7:9a:75:b3:f1:78:8c:9e:db:
6e:3e:c9:b5:b9:69:94:82:9d:3a:1e:7f:8b:dc:7a:
11:1d:07:6b:d5:16:91:cc:46:f2:80:b7:2c:61:64:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C4:AF:FD:BA:48:00:0E:E7:AA:16:FF:4F:90:45:AE:E7:2E:D5:93
X509v3 Authority Key Identifier:
keyid:3B:74:B9:08:15:13:D7:7E:53:A1:FF:22:5B:33:40:0F:BB:39:13:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3S5CBUT135Tof8iWzNAD7s5E1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6dcd22-dd4e-44dc-8ecc-affb60b29a04/1/O3S5CBUT135Tof8iWzNAD7s5E1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:be:3b:64:b4:38:26:aa:2f:41:41:8b:34:4e:37:4c:1e:56:
ec:bb:4a:9e:09:97:09:65:e1:21:7d:f6:e6:19:e9:58:72:7e:
27:86:ee:29:22:8a:4c:02:34:fd:b9:64:16:e4:eb:44:c7:83:
0f:da:6c:b8:c0:32:c4:ed:bb:f8:b2:60:2c:bd:9e:94:2b:85:
74:2e:a7:fb:0c:6c:b8:bd:5c:60:62:5b:1a:8a:0c:77:35:95:
2c:0d:88:8e:fb:a4:0d:92:68:0e:2d:bf:46:30:f8:17:d9:c1:
1a:2a:19:9e:66:d6:b6:36:35:7d:a8:5f:90:d0:30:c2:4b:78:
5d:12:fe:45:bf:fc:17:21:0e:de:4a:e7:02:aa:bc:81:19:69:
c6:c1:7f:e8:0f:78:fc:c7:bc:af:c9:13:f4:28:e5:91:64:e2:
07:b1:df:97:d2:e5:ca:3f:94:c5:99:7e:c6:5c:d4:67:89:06:
05:9f:3c:cf:f9:f9:12:80:89:45:7b:a4:bb:1b:99:67:6f:93:
c2:d2:9f:52:55:5c:cb:2a:70:f4:77:72:21:83:0a:ca:ec:60:
2a:a6:4d:e6:32:54:9b:74:1e:ad:13:1a:83:a0:ca:fb:78:a1:
17:1f:a8:34:bb:a6:98:68:9b:19:54:0b:a8:4d:cc:e0:e8:8d:
ba:c8:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:09 2026 by rpki-client