Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: M/SUISOUAeWqo1qSaTffu7FFyZU2bH6XjnwzCE1v0Xg=
Subject key identifier: 38:6D:FD:9F:CB:C2:35:BA:BC:34:35:47:FA:96:1D:AC:FB:E4:DE:23
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 019D2C60AD950DC1565B9BE4A5A5DF507B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 23:00:26 +0000
Manifest this update: Thu 26 Mar 2026 23:00:26 +0000
Manifest next update: Fri 27 Mar 2026 23:00:26 +0000
Files and hashes: 1: gNrEO1fd_UO2lkW7If9ASyI8mM0.roa (hash: oiXIC9NyYqB7VON1tGxWLy+Yto6YiZWA2pyQHSZiaiQ=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: orFuwu4b6QAclZhX2eGB140EkTxDg+rsuSdFSyfW9T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:60:ad:95:0d:c1:56:5b:9b:e4:a5:a5:df:50:7b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Mar 26 23:00:26 2026 GMT
Not After : Mar 27 23:00:26 2026 GMT
Subject: CN=386dfd9fcbc235babc343547fa961dacfbe4de23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:ec:3f:c8:cc:77:88:ea:d3:23:99:9c:71:
3a:71:e9:5b:55:56:a9:74:1f:0b:e5:7e:1f:75:25:
7f:e8:00:69:cf:14:51:3e:da:27:6f:6e:f0:a8:36:
47:5a:01:8e:79:6a:7a:52:02:1b:50:b9:16:11:b2:
c1:eb:3c:64:fd:ba:b4:a8:ce:74:ef:20:f8:fe:52:
f0:6d:4c:24:6a:5a:98:cb:1a:ae:f3:09:66:f6:04:
3d:8b:dc:44:96:19:89:fd:20:7f:a3:2e:01:3e:bb:
e8:9e:f5:d9:2e:9c:9c:74:71:94:92:63:6f:4a:7e:
b8:4d:94:67:87:4b:b5:b0:db:9e:f3:71:55:15:84:
a6:32:b8:b5:72:8b:a2:50:f4:68:fb:ad:36:88:00:
51:2b:1a:5b:ec:93:6a:99:a2:45:78:e8:64:da:d8:
ed:dc:a6:af:46:72:94:6d:77:e1:a3:d8:40:c8:b5:
9b:8b:9a:9b:a1:b1:3c:72:6b:97:f7:d7:28:6b:e8:
de:83:14:24:35:73:79:24:b7:74:7a:f0:cc:8b:c5:
51:c1:96:dc:62:bb:82:ca:e4:14:a9:4f:4c:d3:dd:
a4:e2:e1:f0:83:4f:cd:6b:03:48:2b:ec:59:f3:30:
1e:35:c1:66:5f:bc:e1:95:5c:03:f0:f4:cc:54:f0:
e0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:FD:9F:CB:C2:35:BA:BC:34:35:47:FA:96:1D:AC:FB:E4:DE:23
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:25:b7:10:20:b5:18:0e:48:66:fe:34:6b:d4:c1:6c:e3:6b:
db:2d:5d:9a:6a:63:06:d5:43:ca:8f:11:ee:df:a9:b3:33:4e:
b1:dd:d0:ae:71:ad:a8:5c:c9:47:b2:83:ad:42:33:f5:65:4d:
6c:3d:0e:ca:c2:73:05:51:d1:06:ef:6d:65:c3:5c:e3:d8:fe:
a6:42:8a:11:7c:c3:47:82:98:7f:f1:e1:0a:17:49:d6:70:4b:
61:45:28:9f:07:3e:93:87:8e:09:6d:02:e3:a0:09:44:c2:bb:
99:ed:28:75:0c:c5:3a:b4:d0:70:f6:db:18:ca:28:ee:d4:dd:
8c:65:b8:e2:1e:fe:0a:bc:1f:6c:c7:dd:f4:10:91:24:39:ce:
62:56:54:85:65:93:48:01:9b:13:89:07:d1:20:a3:1a:ad:c9:
e4:0f:b8:41:78:5d:07:69:4e:42:f8:cd:61:0d:59:96:b5:08:
94:06:79:93:9a:a1:b9:3d:51:be:a5:b2:86:90:7c:e0:d8:05:
ce:2d:92:b9:9d:a2:f8:39:41:2b:74:59:61:ca:48:2c:30:7f:
fc:69:da:a5:33:4e:20:15:4a:f3:01:50:c6:10:87:c7:2d:4e:
a1:54:bc:43:20:e1:56:35:a3:e2:5f:74:29:1b:fc:a7:e9:0b:
e5:f1:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:12:56 2026 by rpki-client