Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File: O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier: c7YmraGN6FSLuZ/9ecktKFwOOpRTk0m5MqdVLgdd2bM=
Subject key identifier: F7:04:BF:9A:59:23:F3:63:2D:5D:DF:53:68:1E:C2:1D:46:E0:F2:AC
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 019D25BA79C1CA08B5C65C80F8A717050B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:01:10 +0000
Manifest this update: Wed 25 Mar 2026 16:01:10 +0000
Manifest next update: Thu 26 Mar 2026 16:01:10 +0000
Files and hashes: 1: Dr3WDUpz6-xPqX9Onpmd9dBVP5Q.roa (hash: K0SdFptEazmOT46XEGng/FuWvVaWyGlgcNjhMXNpZ4c=)
2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: d8KsV63qRHgZ9Qt4U60glqIv5Zk96TJfhXHFxihZG5U=)
3: pMHI94DTtKKz8gzxhVKkHUjKag0.roa (hash: pFTxumvDB0SF9JNJ3IzVUzE5KL+TMh7qeatEKMQOnlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:79:c1:ca:08:b5:c6:5c:80:f8:a7:17:05:0b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Mar 25 16:01:10 2026 GMT
Not After : Mar 26 16:01:10 2026 GMT
Subject: CN=f704bf9a5923f3632d5ddf53681ec21d46e0f2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:84:4c:45:65:be:b7:2b:43:37:0a:b2:c7:
64:3c:87:72:73:30:c8:04:23:4e:67:e6:bc:58:0e:
c4:50:43:da:db:79:f2:88:55:2e:03:b2:15:0e:6f:
14:f5:6d:8b:d6:22:1b:d6:5b:b3:54:ec:36:de:1e:
b0:0d:e9:93:7b:77:38:a4:3b:8a:aa:00:c9:ae:2c:
99:50:b2:e7:70:2d:43:cc:fb:f3:59:c3:5f:4d:fe:
f9:7e:a7:22:2c:74:18:85:ba:e4:db:2a:9d:8c:48:
72:cb:be:63:c9:8d:f0:22:ae:3f:6b:86:85:87:13:
45:47:cd:22:1b:a8:1f:cd:0a:48:b1:91:9b:dc:3a:
72:c3:34:f4:76:b5:8d:5b:47:1f:f0:90:b8:94:44:
65:c0:80:2b:2b:eb:31:9a:ac:3f:35:e6:5a:b2:89:
81:9b:0d:12:3d:7f:e6:5a:ca:cf:5c:b8:97:07:63:
3c:9f:04:5f:6b:37:11:53:95:b1:5e:ad:a3:5b:16:
e7:fe:f4:46:fd:9c:96:42:8f:58:ec:c1:a3:85:2f:
c9:4c:e9:e3:19:1d:af:05:27:0f:5b:34:2f:fd:01:
f1:07:46:64:8d:da:9c:3b:4a:81:e0:2b:91:7a:a7:
1b:7f:d5:f0:3b:2a:97:87:65:90:cc:28:94:39:19:
e3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:04:BF:9A:59:23:F3:63:2D:5D:DF:53:68:1E:C2:1D:46:E0:F2:AC
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:31:b4:db:85:66:a0:1d:fc:50:e0:1e:5d:65:f9:71:da:2f:
e3:15:ef:17:b2:01:3b:4a:42:24:34:32:41:8f:41:7a:8d:69:
84:0a:25:26:a1:d9:43:c4:4d:35:b4:dd:c7:fb:3f:19:16:ef:
8a:6f:80:3a:ed:22:8f:94:59:4b:5d:79:a4:89:27:66:9a:04:
ed:4e:34:5a:0d:06:cc:4e:56:03:43:d0:22:e9:da:76:df:c8:
d1:fd:36:88:64:2d:60:20:81:72:31:54:3c:e1:f4:2a:d7:eb:
4b:b5:d6:b6:83:d9:29:df:2d:70:af:a7:e8:94:a2:07:dd:0d:
d5:15:57:31:80:e8:f8:5b:dc:60:68:a7:d4:9e:91:12:17:f4:
8e:c6:e6:3b:3d:96:13:ce:f5:e5:15:d5:1f:83:cd:5c:32:31:
3e:f4:cb:bc:bf:c5:2a:5b:73:6e:42:c9:f1:db:2a:77:15:b4:
5c:c0:2e:cc:fb:a5:02:b8:29:39:ad:26:2e:1d:ec:e6:45:28:
eb:5c:28:83:fe:11:9a:73:3d:b2:ad:b4:ba:13:4b:32:16:f8:
b1:00:bd:41:96:dc:7f:b5:88:75:3d:2f:31:5d:bc:67:91:5c:
25:20:fa:70:82:89:6f:dc:ca:23:2c:b4:af:d6:ca:55:c7:b1:
52:8d:84:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:31 2026 by rpki-client