Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
File: o3CyP1wNuomxV_gcnDgQlRGLep8.mft (raw, json)
Hash identifier: rI/q3ZSVDTnSJQaAfGTgLRy2Dh550f1MuTe+Tx2uzyA=
Subject key identifier: B3:27:8A:90:6A:2C:E7:B0:A0:DC:76:38:9F:46:98:EC:79:AC:2F:88
Authority key identifier: A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
Certificate issuer: /CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Certificate serial: 019D265F93A6F6155B62F7F87E20B70D262C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
Manifest number: 0269
Signing time: Wed 25 Mar 2026 19:01:30 +0000
Manifest this update: Wed 25 Mar 2026 19:01:30 +0000
Manifest next update: Thu 26 Mar 2026 19:01:30 +0000
Files and hashes: 1: 1U7EBT8Fi6D3Q__JEXiDpKxMjzQ.roa (hash: +lVH2wb0fkjDTS8EyuydWpsQpASkrXPOrZFtBXu1rO4=)
2: o3CyP1wNuomxV_gcnDgQlRGLep8.crl (hash: e+rhaWiOx7AfSLcusWJMA5am7IsUrTqqA5KnWplm6gY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:93:a6:f6:15:5b:62:f7:f8:7e:20:b7:0d:26:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a370b23f5c0dba89b157f81c9c381095118b7a9f
Validity
Not Before: Mar 25 19:01:30 2026 GMT
Not After : Mar 26 19:01:30 2026 GMT
Subject: CN=b3278a906a2ce7b0a0dc76389f4698ec79ac2f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:93:12:f4:08:d1:6f:fe:d5:9e:20:b9:57:7f:
2e:47:2e:52:68:a1:c2:65:a7:1d:82:a4:ea:5b:52:
80:2c:9d:55:5f:17:70:6b:04:19:a6:f5:60:f8:fb:
8f:06:44:70:dc:7e:0b:f1:89:e5:e3:36:16:6a:44:
ac:d7:45:17:f4:92:b7:70:8e:bb:eb:15:27:78:1b:
b3:23:34:31:c1:bc:5a:d1:2b:7d:53:8b:55:57:ec:
6d:21:3b:93:55:5f:68:9d:63:6c:ff:23:5d:ae:d4:
aa:62:5e:9f:05:51:1f:18:bd:a9:77:77:68:8f:2b:
4e:3c:fe:41:2f:e1:e1:f6:c4:48:09:29:32:69:66:
46:da:bd:70:7c:27:e6:08:6c:2a:b8:61:0b:54:c9:
29:2f:9c:68:91:87:f4:6d:1c:7a:28:c2:90:80:c4:
6e:1a:c8:1b:4e:14:24:33:70:9f:af:8f:48:77:c1:
a9:cc:1a:a4:e2:0e:f3:6c:93:81:8e:e5:3d:42:88:
0e:8a:1d:95:5a:f1:a2:59:47:31:32:70:75:ee:7e:
10:9f:53:8b:b5:f5:96:6f:a1:3d:ea:87:b5:a0:b6:
dd:88:8a:df:5f:f8:37:c5:b5:57:eb:23:aa:fa:2c:
f7:c1:e8:56:67:da:4a:08:fc:8f:72:a4:16:f8:8e:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:27:8A:90:6A:2C:E7:B0:A0:DC:76:38:9F:46:98:EC:79:AC:2F:88
X509v3 Authority Key Identifier:
keyid:A3:70:B2:3F:5C:0D:BA:89:B1:57:F8:1C:9C:38:10:95:11:8B:7A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3CyP1wNuomxV_gcnDgQlRGLep8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3154b4-5bd4-4ac9-b0c8-1b25ae4229db/1/o3CyP1wNuomxV_gcnDgQlRGLep8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6b:d3:d0:66:d4:7a:d8:e5:fe:9b:d0:ec:6d:33:63:a7:3c:
da:86:0f:ee:9a:45:cb:1a:de:8c:f9:97:ab:d3:3a:66:a1:63:
e2:6d:76:5c:f8:24:a5:f1:d0:79:1a:2e:c1:a9:c0:93:02:7f:
27:ca:4e:60:c3:75:aa:16:6f:71:21:0c:da:74:ae:01:62:6d:
ab:8c:c0:31:ae:4a:f6:0e:6d:f0:21:35:03:e7:ff:fa:6b:d1:
77:6f:96:6f:76:06:aa:f6:c5:dd:7b:d7:5c:b4:c1:05:53:73:
6f:00:f5:1e:82:0c:be:0e:ca:53:23:82:f2:6e:ff:11:27:26:
de:b4:18:9a:66:16:b5:4f:5f:53:1b:90:6c:d0:9a:49:19:18:
82:6a:03:2d:96:75:a7:a7:cf:09:a5:0c:45:1e:b2:e3:de:6d:
70:57:1d:6f:ee:ad:36:cc:f9:e9:a8:87:bf:5f:a6:53:1c:22:
f1:12:4e:e6:b0:c6:f8:80:6d:ba:82:88:6b:40:cb:23:d6:ae:
40:4c:f2:a0:26:96:bc:d7:27:2b:90:b1:5c:56:e0:58:48:3b:
f5:a6:97:ad:ae:b7:7e:98:f2:9e:2f:4b:e2:fa:33:c2:67:fe:
dc:1b:bd:29:f9:5c:85:a6:d4:cc:9f:27:70:2b:db:3c:64:25:
65:cb:c8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:07 2026 by rpki-client