Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: GsgMOQ6ItulVdbtNBKgTcD/nKWTSvnGpA99VByPP2qw=
Subject key identifier: 05:1B:9A:0A:37:75:A4:68:44:D3:CE:CB:E3:64:9B:29:4A:4D:C2:3B
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 019D2A724E9BC40D5EDDCD9D6DCF5D7E9D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 14:00:27 +0000
Manifest this update: Thu 26 Mar 2026 14:00:27 +0000
Manifest next update: Fri 27 Mar 2026 14:00:27 +0000
Files and hashes: 1: gNrEO1fd_UO2lkW7If9ASyI8mM0.roa (hash: oiXIC9NyYqB7VON1tGxWLy+Yto6YiZWA2pyQHSZiaiQ=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: NLRZSr4ZAQ3C5s0DRIA+EgD6wYohQwKc26DGpCqx22o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:4e:9b:c4:0d:5e:dd:cd:9d:6d:cf:5d:7e:9d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Mar 26 14:00:27 2026 GMT
Not After : Mar 27 14:00:27 2026 GMT
Subject: CN=051b9a0a3775a46844d3cecbe3649b294a4dc23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:a3:20:ff:50:a8:33:f9:a5:cf:a2:e2:e1:
d4:59:1d:96:35:4d:47:39:31:06:ed:11:c5:29:a4:
12:ca:e4:37:2f:2c:50:68:9f:f0:1d:6b:fb:c1:eb:
a2:eb:00:ea:16:f0:16:f5:6f:19:e3:d1:f5:d7:68:
07:dc:fc:ed:57:41:96:83:a5:0a:e7:6f:45:5f:92:
d3:91:24:5b:69:63:8a:98:b2:36:49:5b:2c:5e:e3:
91:18:8c:e9:d7:6e:b0:7f:16:c4:9a:37:1f:8d:01:
e6:a7:26:6f:b3:79:51:4e:53:36:a6:8a:dd:26:b7:
e4:ba:92:e4:50:fd:9a:ce:d2:54:0d:f6:ad:06:44:
26:03:9a:ee:c9:95:b9:bd:d7:c6:99:d6:cc:b9:a2:
e7:22:71:e0:5d:cc:38:7b:aa:41:78:37:aa:8e:59:
3c:45:11:aa:36:29:dc:11:3a:d0:de:95:a3:ad:f1:
7a:65:90:d4:26:2d:84:42:b2:f1:ea:ba:7a:49:a0:
23:7a:0b:50:3d:93:ca:42:0a:44:fc:cd:fc:2e:3f:
83:20:f0:26:85:45:86:33:74:67:55:7a:83:b5:10:
fc:a8:b0:90:e1:fc:e9:92:86:bf:b4:1a:17:72:95:
9c:46:56:75:8d:49:a5:b8:a0:0e:15:d7:ae:a2:27:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1B:9A:0A:37:75:A4:68:44:D3:CE:CB:E3:64:9B:29:4A:4D:C2:3B
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:08:04:33:12:39:f3:1e:95:38:6d:9b:57:ab:c4:8c:9a:ad:
40:d7:a2:14:fc:df:b6:a8:ca:d5:7c:12:46:8d:81:24:81:fb:
52:f6:10:c4:c0:9e:71:f0:db:e5:33:53:86:3d:53:0e:02:cf:
a6:5d:0d:7a:57:61:aa:27:dd:d4:9e:35:27:e9:13:34:54:82:
f6:ad:1f:79:0e:8c:c3:b6:96:5f:3b:52:9f:8a:9e:19:5b:57:
0b:90:11:f2:ec:1d:a9:31:24:34:9d:0c:38:f9:f8:9c:0f:cf:
6e:ce:62:d5:c6:49:9c:4b:ad:ac:80:9b:7b:60:64:b1:82:65:
0a:59:c2:2a:65:93:72:1e:94:fa:1e:ca:c7:e4:21:43:d2:5a:
51:aa:10:00:9b:24:29:45:da:63:c3:84:d5:2b:16:9f:7e:51:
ab:5b:b3:6d:31:3d:95:82:0f:de:45:78:73:6f:44:13:26:db:
1d:70:10:1f:bf:f8:c8:81:67:14:20:28:a4:66:38:f3:65:bc:
c2:b7:ca:e7:2b:ff:2d:38:b3:28:5c:52:b3:d7:4e:1d:08:75:
36:cf:bc:cd:7c:4c:5b:eb:1f:d8:3d:99:5f:b5:04:58:49:eb:
f9:8c:0b:4a:fc:27:ff:c5:0d:54:cc:6e:d7:91:00:6e:1e:32:
52:b6:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:04:54 2026 by rpki-client