Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: Uar6yT0NnHqYRiMXJTGeZjIz/Xq0NN/ArR4ecTvusw0=
Subject key identifier: A2:CE:8B:16:B6:57:CB:1C:D9:57:51:2F:5F:D7:2B:D6:15:CE:14:F1
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 019D27A8641FE64F28379A2634457439C5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 1522
Signing time: Thu 26 Mar 2026 01:00:39 +0000
Manifest this update: Thu 26 Mar 2026 01:00:39 +0000
Manifest next update: Fri 27 Mar 2026 01:00:39 +0000
Files and hashes: 1: CFiA9ts48FJD7FxMXnq2yBPpxUo.roa (hash: 0N4k8Pu9Li9wdDzVVf7qsFKX5AusWq9aMPBrYyncX/Y=)
2: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: 8Zp0EBgdKB9sPBpOQE6YQDmvw4Xn9fULrG8KGRwwZlA=)
3: sr8WeIRMBJ4bRfuf-lp3-tgD570.roa (hash: TnOmb2gICaHIuyc6o/5CaEP4UWNo++HGY655v8j+/yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:64:1f:e6:4f:28:37:9a:26:34:45:74:39:c5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Mar 26 01:00:39 2026 GMT
Not After : Mar 27 01:00:39 2026 GMT
Subject: CN=a2ce8b16b657cb1cd957512f5fd72bd615ce14f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d8:cd:68:b1:ec:61:c4:a3:8b:a5:9a:3a:2a:
b0:ad:7a:b9:9c:d5:5d:24:18:33:b9:84:80:1d:aa:
3e:f3:9b:c4:48:5a:05:7f:53:ae:08:62:69:82:1e:
72:5a:e1:a8:b7:f0:f3:85:07:c2:9d:0f:4b:cf:73:
6c:e6:fb:f4:59:2b:1b:3f:53:8f:c7:9b:a0:c3:ea:
6a:ad:46:2b:f7:a4:75:3a:6e:24:60:77:81:74:d5:
b5:c3:0d:ff:4f:f1:22:92:b7:3b:6f:0a:2c:89:ad:
24:d9:91:6e:a7:5a:87:d6:c9:6a:c6:d4:d2:a0:0c:
53:35:ff:fa:80:55:f2:8f:52:09:94:4e:0f:1d:8d:
c8:35:45:cd:04:01:0d:d2:1b:a8:22:10:08:33:91:
12:41:b1:86:14:60:fa:9b:c2:b6:b2:93:92:7e:42:
a4:60:5e:f5:4d:e1:3d:14:49:65:f5:40:58:b7:52:
de:0c:86:d5:7c:3e:73:44:e9:c6:06:c7:d4:bb:b7:
45:ee:be:c2:99:3e:3e:e6:cf:0a:1d:b6:69:b8:5e:
72:dd:a1:c8:8c:08:73:83:5b:7a:72:ea:66:c1:93:
cb:fc:44:df:2c:35:3b:60:e4:e1:6e:5a:81:fa:4d:
23:5b:48:49:c4:8a:02:38:34:fe:f3:4d:ef:94:ee:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CE:8B:16:B6:57:CB:1C:D9:57:51:2F:5F:D7:2B:D6:15:CE:14:F1
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ec:fc:3a:4e:31:4f:c2:cd:64:5e:d9:0e:a6:2d:1a:5f:33:
72:26:f5:93:da:9a:ca:cd:bd:6e:b7:14:1f:8b:1c:a3:20:2f:
7a:7e:1d:13:59:49:d9:02:e9:2a:68:d0:c1:b7:7b:e8:35:ca:
d6:75:f2:6d:f2:f3:62:96:2a:8b:5d:27:e7:a7:e3:93:57:aa:
0a:b6:72:4d:2f:f7:d3:f9:ad:a4:f0:54:82:48:e3:f0:b6:e7:
aa:53:56:56:85:97:00:6c:7f:40:ff:87:68:7d:42:15:4c:95:
ba:2b:ac:05:44:fd:7c:7e:d4:e7:e0:6d:13:88:04:37:fa:92:
be:1c:46:b1:d5:0e:8f:f2:b5:71:de:ef:35:c4:35:14:41:16:
72:09:39:4f:b5:76:f1:85:41:77:e0:05:56:d3:87:7a:d8:c7:
53:26:d5:71:d9:eb:6e:3d:85:32:9c:84:9e:3b:f9:e6:e7:cf:
88:ff:0c:3f:b2:04:72:d7:38:43:ac:71:2a:cb:44:f2:1d:57:
cb:bf:20:97:20:cc:e2:04:86:42:ed:a6:2a:5a:23:1d:8f:e5:
0a:15:ea:1a:38:e5:0d:62:9e:71:c7:43:af:01:d8:79:ac:04:
a2:f9:85:1b:aa:24:89:09:ef:f9:33:1e:db:36:a2:ea:9b:51:
eb:ca:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:07 2026 by rpki-client