Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: b0uWI+Ra+4ISzHtthlv7RTw8wGx4Do/UF51YDVXtJ/0=
Subject key identifier: 6F:15:A6:26:A7:D5:4F:2A:BA:7F:4E:9C:04:A9:B0:78:C4:C2:D7:AB
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 019D265F60E76201FF10050ACEE194122216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 188F
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: fMi80eRpYbr1TvaEcx/3jK1ZBU6rs3gPeULqliZbKvs=)
2: htGqvDuZ1yl5QjiQWAwubWCZy2A.roa (hash: jbw+jRpmU5f9XaNZCWs1NsoQYNjn1y1IEBJ02/pIxJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:60:e7:62:01:ff:10:05:0a:ce:e1:94:12:22:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=6f15a626a7d54f2aba7f4e9c04a9b078c4c2d7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:1a:c3:d2:92:30:aa:d3:3c:6f:2d:5d:f4:
ba:2d:8a:22:ca:ce:94:bf:15:7a:a8:85:82:2d:24:
bd:88:a3:de:a1:8f:3d:4d:fc:44:98:1e:9b:08:45:
e7:98:0a:59:a3:27:10:75:6b:5e:0b:37:a7:f1:c4:
e5:59:d4:84:99:fd:02:8e:c3:ee:e7:99:11:b3:c6:
6e:91:6b:6b:0f:30:64:d3:01:a5:9f:69:f5:58:5a:
66:05:02:5c:04:65:b9:72:92:6e:93:60:73:26:09:
9d:2a:0f:65:83:85:fc:9a:66:7c:ce:fe:c3:48:5c:
de:c4:9e:2a:73:db:46:0c:3e:5b:1e:61:62:d8:b1:
f3:4e:73:ca:f5:d5:44:ed:77:8a:8b:b6:2a:2a:58:
0f:7f:16:cd:85:7d:d5:1d:90:2a:24:b0:4e:79:68:
eb:f6:8e:70:26:8b:f6:8e:8c:2d:fc:8b:3d:40:0c:
bc:a9:b2:fd:c8:fb:79:de:08:b6:4b:64:c9:4a:5d:
69:3e:d2:a8:a5:65:12:ba:57:cf:ec:5d:0b:db:9f:
47:85:14:4a:1e:a5:fa:42:33:fc:06:32:d5:d9:43:
fd:36:a9:b3:7a:25:6f:a6:8a:e0:11:ef:00:43:0d:
0c:a8:06:86:a5:c9:4a:c6:b1:dd:e4:3c:fd:72:ab:
c8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:15:A6:26:A7:D5:4F:2A:BA:7F:4E:9C:04:A9:B0:78:C4:C2:D7:AB
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d9:37:e2:aa:7e:43:a5:90:08:12:9d:a4:d1:4b:19:21:d5:
1e:b7:a9:10:89:c5:89:67:ff:19:99:0d:8a:75:b0:5b:df:73:
ba:3a:c5:27:c1:92:eb:2f:20:0d:7e:43:7f:40:72:d0:6c:67:
65:5a:81:e6:ec:6b:73:8b:fb:2d:42:90:b5:3b:3f:10:bf:f0:
12:88:e4:21:7d:56:bd:25:43:d3:32:7d:08:6e:1c:fa:7e:58:
2a:67:c0:ac:af:d8:99:67:ee:05:30:f8:0e:80:8c:f5:65:d0:
91:e7:95:09:5b:d2:08:fb:9a:83:ea:a6:51:d4:b3:65:c1:2a:
b0:06:ad:00:c4:b8:f4:d9:6c:53:99:7c:ae:28:bb:aa:3e:d7:
bb:2b:b4:6f:ca:f9:f1:66:cb:b4:8a:21:6b:a2:01:7d:0d:c9:
1a:e7:05:b8:b3:af:ec:c8:3e:a7:e6:a8:fd:54:16:c9:d2:81:
d3:7e:83:5c:f8:48:7b:c7:96:97:50:32:5d:02:f2:74:32:77:
a3:40:18:91:49:59:5b:97:de:ed:1b:f0:ac:d0:05:0b:5a:a5:
d0:cb:71:f4:0d:08:5f:8b:59:4c:ba:cd:58:77:57:93:8b:18:
20:64:54:48:10:b3:81:ab:44:e8:95:f9:7a:c1:84:a7:dd:81:
7d:45:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:55 2026 by rpki-client