
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: 2G1Q+Oe5XdkMkIgsTDoiasnYbJzAVte9XdgLMfwGWMw=
Subject key identifier: 54:6C:CE:88:17:3E:B3:57:3E:19:0F:EC:D1:E9:F8:43:BD:D6:5B:6B
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 019D28164959E7258B4684E48D5EF775E655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 07C5
Signing time: Thu 26 Mar 2026 03:00:42 +0000
Manifest this update: Thu 26 Mar 2026 03:00:42 +0000
Manifest next update: Fri 27 Mar 2026 03:00:42 +0000
Files and hashes: 1: 3MFj15oSeUJYuJbY2U542UoSXGM.roa (hash: j9Y9LVF9WUhE5Tw8LMdWTvxog1CGJJ1rf8AUNlTnbFI=)
2: FGVsTKcXFHABDa_e0HM9Faa7r2M.roa (hash: 2Iqm//83hIlnGhnfsyksmZkIg0tX+MTyrQg6DXUyYdQ=)
3: SwB1iAgYjly4csbv4jz0oadyUZk.roa (hash: TuHJEn/9Xw5181UZ/VH/apXlrIOdLQGvmuNms8pxlNU=)
4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: RjxtzXqIHVzTTB7EPjBan85CE62eOZ+dWdI1LbBDu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:49:59:e7:25:8b:46:84:e4:8d:5e:f7:75:e6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Mar 26 03:00:42 2026 GMT
Not After : Mar 27 03:00:42 2026 GMT
Subject: CN=546cce88173eb3573e190fecd1e9f843bdd65b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:bc:1a:9b:26:1a:ba:5c:94:85:f2:71:06:
27:23:71:39:2d:13:ad:86:ce:ef:24:f0:35:46:ab:
24:5a:25:98:7c:2d:64:50:f7:da:86:59:7a:61:91:
e4:99:e9:21:e9:b1:ad:a3:0a:99:49:0a:c8:da:99:
66:5b:1c:39:6f:c9:1d:80:d3:f2:7c:d4:13:f8:d3:
75:a2:57:3b:2e:3f:82:5d:8c:ac:df:ca:3a:03:66:
65:85:50:70:84:93:f4:47:a0:a0:9c:e7:77:44:db:
a2:a1:07:0b:4b:bc:ae:43:be:52:aa:1c:8c:ed:47:
64:5c:d3:74:15:a3:c9:b9:a3:72:72:2e:8a:b0:c8:
64:fd:16:fb:ec:49:f5:3d:fb:8d:96:0a:29:c8:1a:
35:82:ee:0b:6f:bf:c2:21:d8:d3:c2:cc:54:8d:26:
86:71:93:52:fb:00:8c:db:7a:80:37:3c:c9:91:a8:
a4:ae:30:82:31:f1:16:b6:e4:c7:a0:82:af:c0:0a:
2a:0d:06:2e:a4:bc:11:17:1c:ab:b6:7f:ec:21:bb:
ac:34:ce:30:61:be:ed:4e:4d:94:98:57:80:b6:d6:
da:29:ec:73:67:fc:a8:99:d4:7e:1f:e3:d4:8f:3c:
6b:10:fc:b1:ec:6f:fd:e4:74:61:99:ed:a6:ef:13:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:CE:88:17:3E:B3:57:3E:19:0F:EC:D1:E9:F8:43:BD:D6:5B:6B
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:37:17:72:9c:0c:f2:cb:cf:25:74:45:04:da:95:14:96:b7:
f6:60:fa:c4:f9:36:11:f3:25:f3:00:73:39:aa:70:b2:fc:26:
c5:bc:db:1d:78:0d:81:da:a9:bc:8d:d4:ea:68:f9:3e:70:a4:
07:59:c0:ed:16:c0:6b:63:3d:53:63:3c:6a:69:ac:fe:b3:56:
1c:b1:26:a0:a5:0d:1e:06:d3:e8:32:31:0c:4f:17:3a:f6:93:
f9:e3:84:2e:eb:a5:37:e8:ee:62:38:19:2d:19:38:cf:7c:b9:
42:07:7d:10:aa:a9:50:df:89:b0:a4:6d:4d:b0:12:b5:f0:82:
f3:ad:aa:67:0f:9c:06:3a:60:f1:18:22:09:3f:89:48:e4:bf:
70:ea:e1:64:f4:cb:58:15:a9:ad:05:e7:6f:a8:a2:59:14:87:
29:62:65:37:71:27:ce:c8:4a:38:ff:20:a7:ab:6f:08:c5:a7:
28:bd:5d:82:aa:f6:ae:25:7d:d2:00:10:59:9e:8b:5a:fc:25:
31:6e:02:d1:b2:cb:1c:18:ad:0c:31:22:6c:ed:45:b6:56:8b:
1a:e5:29:17:c7:73:42:e6:df:01:36:e8:2e:85:89:b7:45:f2:
48:9f:1c:87:b1:ce:a2:c7:cc:ec:34:e0:95:94:9f:3d:01:5f:
20:37:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:14:32 2026 by rpki-client