Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: lQC+RuwdyklfiI8xiBwz6s2LoOMe7pptHDGxMTS2858=
Subject key identifier: 22:02:A1:63:34:D3:1D:C8:8E:F6:31:2C:B8:5E:31:81:51:2B:D4:6B
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 019D2772EF1E936C669A73F5BF4FCE6B41DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0AC8
Signing time: Thu 26 Mar 2026 00:02:16 +0000
Manifest this update: Thu 26 Mar 2026 00:02:16 +0000
Manifest next update: Fri 27 Mar 2026 00:02:16 +0000
Files and hashes: 1: 8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa (hash: +cFHBDI2vSe8qYQNG7SSN4dtten2bWEf/OgE/4boopY=)
2: HscqlSP_T6jWomPIcWdE3IC4My4.roa (hash: /7wtYvtk4cUOoXmRq6scL7JJ5OG21YbveewB9o7fEHg=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: rj1UDnXCGw/N2QBe9cmCqXhs2C7NXWQBbaqs2EH0EG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ef:1e:93:6c:66:9a:73:f5:bf:4f:ce:6b:41:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Mar 26 00:02:16 2026 GMT
Not After : Mar 27 00:02:16 2026 GMT
Subject: CN=2202a16334d31dc88ef6312cb85e3181512bd46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:02:74:4f:28:a7:5b:dd:d5:6d:a2:b5:00:
62:b9:b7:82:10:ec:c2:00:65:38:d7:c5:f6:dc:55:
3d:41:2f:c4:52:fd:5e:5f:0f:01:23:e7:62:ea:c6:
a9:f7:e3:4f:95:c0:f9:49:c8:74:b5:97:7a:bc:62:
b0:0e:a1:59:50:2c:11:38:a9:99:7a:3d:c7:1e:7b:
29:4d:79:1e:b4:c7:ab:d6:90:62:2b:d3:64:9d:a4:
1c:27:a0:49:48:c0:66:a0:b6:46:a7:f3:2a:2e:3a:
d3:ce:6a:9e:8d:07:b2:cb:cd:a1:62:ad:8e:b1:72:
3d:3a:81:3b:a5:8a:e1:72:d7:bb:4f:2c:2b:e6:f0:
25:da:6f:31:48:37:4f:cc:d9:cc:a8:65:53:5c:05:
e4:7f:d3:b3:9f:3e:e2:e9:6d:60:45:1c:ad:bb:ea:
b5:83:1b:8a:f4:72:b8:10:2d:44:83:98:f1:cc:9d:
65:f7:84:fa:01:ba:61:ec:03:60:cd:e1:13:0f:27:
1f:10:5d:7a:5b:35:84:c4:d3:c8:9b:de:88:23:63:
bf:79:d5:6c:76:de:30:53:36:27:5f:e4:27:0d:95:
25:c7:b0:58:1b:b8:06:cb:89:cc:6f:67:7e:df:ff:
aa:44:ef:6c:ae:a8:5a:ab:d2:7a:87:1c:c0:86:70:
41:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:A1:63:34:D3:1D:C8:8E:F6:31:2C:B8:5E:31:81:51:2B:D4:6B
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:71:be:a2:40:8e:3e:e1:4b:e2:af:32:4c:09:8c:3c:72:2e:
1c:4d:f7:a3:63:84:af:7a:1b:c5:d0:d1:bf:ee:7d:07:f4:45:
de:70:41:3c:4a:8b:a5:94:81:66:f5:77:1c:cc:87:b6:36:aa:
48:da:9f:12:bc:6a:8f:52:90:87:a2:29:a1:5d:0c:78:db:cf:
ac:fd:09:4c:80:10:a8:37:ea:7d:13:55:87:8f:13:87:38:34:
47:14:71:0d:22:55:55:6b:22:74:7c:db:8e:38:89:4c:7d:68:
24:a9:bf:84:f4:55:ac:bc:ec:4c:1a:c7:29:97:19:2a:e5:5e:
9c:bf:c1:5e:2a:b0:67:f6:dd:99:f7:53:2f:70:31:7e:62:2b:
a0:76:65:8d:e4:0b:56:e0:9f:fa:45:9c:d8:f0:13:51:e9:c9:
5f:b5:2e:3a:e3:5e:47:ae:ef:46:35:8c:3e:47:f1:1a:fd:ff:
95:13:61:2e:22:59:ed:98:9f:51:d9:c5:8f:9e:84:3f:57:e8:
9b:ef:bb:86:d5:6b:2b:92:e7:9a:44:e8:89:32:93:13:b6:77:
25:ef:e1:fd:d0:1c:2e:ae:22:19:7b:4b:c2:7c:61:80:24:77:
af:77:50:65:e2:66:b8:18:19:dd:16:a2:c5:3e:b8:ea:c2:42:
73:bc:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:20 2026 by rpki-client