Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
File: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft (raw, json)
Hash identifier: /ASNzDl7f4lWlAtXuDcxjFzhEws0GQZSpFqFtpT3p1k=
Subject key identifier: 0B:1A:87:B5:8D:4D:B7:52:E3:FF:04:2B:B9:85:0A:D6:7A:F4:B5:5A
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial: 019D2997338156144802458A12E2BDB92FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
Manifest number: 0639
Signing time: Thu 26 Mar 2026 10:01:07 +0000
Manifest this update: Thu 26 Mar 2026 10:01:07 +0000
Manifest next update: Fri 27 Mar 2026 10:01:07 +0000
Files and hashes: 1: FNXyXh4u9cQeDiTojAZDbFOJ9gQ.roa (hash: vdj4wBHSjblmAlNCcBX+3EsBObFP0noHb9x3mmO5lZM=)
2: O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl (hash: IhU84zOeOMxxVSvH0eHxzRujaXpJtU3QdFgDKQuBi0o=)
3: SFjSKjgK7K-f57WPswPIRMcf7no.roa (hash: GVCqmDFqdp6iu7oXTwzlvXJdDa6NYO1O4EIga3sM9XM=)
4: _Ztkitj_cASVHW2RAI2sAldy7Vo.roa (hash: hW5RHVfn1YCqYqZcPChcTmTjzUnojtrXBaP46yWsbeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:33:81:56:14:48:02:45:8a:12:e2:bd:b9:2f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Validity
Not Before: Mar 26 10:01:07 2026 GMT
Not After : Mar 27 10:01:07 2026 GMT
Subject: CN=0b1a87b58d4db752e3ff042bb9850ad67af4b55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:57:31:61:b7:fe:fe:a0:8b:87:b8:55:08:
48:c9:6e:80:8a:95:83:cc:36:16:b3:0d:53:7f:43:
57:ce:9b:64:29:ac:c0:e6:cf:65:a4:35:86:6e:d2:
5e:86:12:5f:47:da:06:fd:28:5c:30:b7:95:3d:db:
f4:6c:b9:77:2f:17:35:a4:6c:5d:1b:6a:b8:1b:79:
9f:f3:b2:da:8b:fd:ef:26:b1:0a:c4:29:f5:3a:30:
1c:d2:a9:8f:93:64:be:3d:98:66:25:d9:75:fa:6c:
f1:1c:83:54:ff:bf:52:00:16:89:ea:4b:85:2c:fa:
3d:49:da:e6:89:e9:a3:87:57:a6:99:c6:4a:23:92:
49:ae:ac:88:d3:20:18:c9:c2:0e:58:3e:30:e2:8d:
9a:fb:58:1a:ce:4b:b8:3c:26:39:ec:66:1a:fc:bd:
3b:14:6e:d9:1e:d3:f9:f5:a9:e9:6d:3a:a5:df:da:
5f:36:93:d4:ea:e2:bd:0a:a5:b4:fc:34:f0:0e:37:
f6:45:a6:8c:8c:99:9c:bf:23:1d:08:52:72:9b:7e:
55:f1:14:19:39:44:e1:26:de:46:08:d3:c4:2b:72:
c0:c6:81:ac:a0:c3:e2:cd:e0:b9:09:73:d1:02:95:
95:17:d5:e0:a9:4d:a5:cd:00:25:f0:c2:73:9b:25:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1A:87:B5:8D:4D:B7:52:E3:FF:04:2B:B9:85:0A:D6:7A:F4:B5:5A
X509v3 Authority Key Identifier:
keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4b:d4:dc:25:80:09:2c:40:5a:67:3e:56:f0:b6:a5:9e:8c:
87:9e:b2:9a:d0:72:eb:ee:5b:3f:09:20:18:2f:74:24:66:b5:
ed:e6:85:f9:c3:f0:0d:c9:b6:3d:54:85:02:a3:2c:9a:b7:69:
6b:45:b7:b7:88:8c:3a:84:25:00:a9:5a:7f:d3:21:b3:2f:f6:
55:bd:d2:14:49:b7:d1:fc:4e:5d:59:ba:9a:07:d9:37:f0:c0:
de:7d:09:47:c1:b7:f9:e0:81:ca:7e:23:09:00:d0:0a:8b:75:
50:44:48:5d:6e:a6:43:6f:13:94:65:28:2a:98:17:e6:98:37:
ec:5b:1c:24:c0:78:79:81:be:57:79:3c:94:ed:dc:3c:67:e1:
ee:12:f9:3a:b2:6e:dc:5b:90:a1:52:4b:65:c6:bf:c8:31:ae:
d8:5d:fc:26:9d:3b:5c:17:7a:07:69:48:e9:0f:58:79:67:64:
e0:ab:bf:ec:53:1a:ab:67:42:f9:b4:23:b4:b0:dd:da:33:a9:
c6:54:6e:5d:01:6c:18:9c:a8:49:85:31:c2:1e:b7:c8:16:1f:
ee:03:07:01:88:b5:44:0e:46:9b:7a:6f:e4:38:ea:22:69:0d:
e2:03:ec:ff:fc:74:c1:82:b3:f6:1f:2b:8a:91:40:ec:e6:df:
ce:07:33:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:17:58 2026 by rpki-client