Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier: +PMwXzh4urvMa+7TohPlBJMIVbp3qCw1pStJ5DwpIaU=
Subject key identifier: B0:15:ED:4A:F4:01:DB:ED:D1:2E:34:70:42:8A:0C:9A:58:21:E0:03
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial: 019D29972C1B115746AD793A0E3772AC55FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 10:01:06 +0000
Manifest this update: Thu 26 Mar 2026 10:01:06 +0000
Manifest next update: Fri 27 Mar 2026 10:01:06 +0000
Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: lNVP8Yi1UsEeEzJS3W8F1ZvF0gxjOE4gE56SyW/ROGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:2c:1b:11:57:46:ad:79:3a:0e:37:72:ac:55:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Validity
Not Before: Mar 26 10:01:06 2026 GMT
Not After : Mar 27 10:01:06 2026 GMT
Subject: CN=b015ed4af401dbedd12e3470428a0c9a5821e003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:13:aa:cd:6c:83:f7:e9:2a:6b:ef:8c:1b:
c5:04:89:bc:ba:08:e4:e1:ad:e9:68:d3:44:71:f3:
de:c8:a9:ef:1d:56:19:18:ab:0a:4a:91:56:88:4a:
d4:6c:db:03:b8:e8:c5:b8:eb:e5:63:3a:fc:ad:5a:
ac:1e:f9:06:56:f0:d2:88:2d:9b:b6:e9:d4:25:e3:
62:b1:e9:6c:a6:08:ca:61:e1:71:99:e1:96:3f:17:
4f:d6:bc:53:8d:d1:a1:46:de:47:f7:50:46:13:b4:
01:82:10:84:68:da:e4:83:18:25:6d:ae:49:39:1c:
ed:be:b1:ea:e7:7a:1f:fe:27:f6:62:36:f2:22:87:
b7:be:1f:d9:9c:98:77:70:40:4a:4e:25:fc:34:52:
50:9e:2a:2f:01:ab:59:83:25:ff:4d:cb:12:83:0e:
46:09:67:38:1c:dd:b8:ef:33:65:70:51:b4:43:af:
e7:fe:ea:5a:f0:b3:97:52:23:86:b4:17:a6:60:29:
10:45:39:ed:e8:c1:5c:30:d2:db:5f:bb:f0:f1:70:
37:96:59:46:df:df:a1:61:f7:1c:75:1c:21:44:1d:
2f:a5:5e:35:f5:4d:91:bb:16:5d:7a:d6:66:43:23:
fb:58:84:f8:d3:f7:e4:94:ce:ee:58:29:36:f8:e5:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:15:ED:4A:F4:01:DB:ED:D1:2E:34:70:42:8A:0C:9A:58:21:E0:03
X509v3 Authority Key Identifier:
keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:27:90:a2:50:8c:96:6e:de:b3:08:11:c9:15:5b:41:7a:
44:19:64:be:cd:4d:d9:63:f4:d6:48:a6:13:72:2e:b0:c3:74:
3e:bb:95:96:37:1c:f3:3e:05:8e:1d:09:ba:00:f7:1d:12:1a:
fa:16:58:73:cb:db:71:50:9f:2b:88:81:67:a1:cf:07:d1:5b:
aa:71:bc:5e:cb:52:fc:4b:0d:c7:be:fd:39:6a:25:7e:33:5f:
dd:91:a0:8d:cc:70:a3:12:72:c6:e0:f4:f7:26:2b:9a:2e:30:
92:e5:57:66:ce:bc:93:6b:0d:27:b9:29:60:4d:76:44:56:e9:
7a:f5:52:8d:c3:f9:ac:f8:b6:ad:3d:e7:ae:62:e2:db:da:43:
a1:0b:e2:b2:89:be:0f:2a:b1:6d:7d:a9:48:8c:c3:16:df:72:
8b:ec:b1:7b:0b:63:b2:af:29:d9:75:73:8f:e8:6a:46:e1:6f:
40:b9:7d:e7:ac:7d:19:5d:4d:2b:57:cf:83:a9:f4:4e:28:21:
6d:3b:f4:78:6c:b2:09:73:24:f5:76:ce:5b:83:16:8b:ce:9d:
e7:48:5f:02:f8:e6:c4:42:71:8f:be:4e:4f:9c:4c:2a:49:e2:
3d:8a:76:d7:4a:a0:84:4d:ca:5c:81:89:a3:1c:47:ef:7b:f0:
7c:b0:89:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:56 2026 by rpki-client