Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: RmREP03+pk1caazIfc5+pzmBHzFNagLxDxys7BMdEFU=
Subject key identifier: D6:26:DE:C5:DB:18:65:F4:02:BF:97:0B:1C:AF:ED:6B:26:B6:0E:41
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 019D273A952F94730ECF55242F339A977E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:00:43 +0000
Manifest this update: Wed 25 Mar 2026 23:00:43 +0000
Manifest next update: Thu 26 Mar 2026 23:00:43 +0000
Files and hashes: 1: EMaCwLjxvEjldttSlMrOnwekZ_Y.roa (hash: aBqqe+U1PaVNW6VJZrxz+RRQt4gTnenHJ/Ty1nZ3HHo=)
2: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: znuXrpPkJZhf15ohU//nZ8ShejdThz9fMosHdQP4vnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:95:2f:94:73:0e:cf:55:24:2f:33:9a:97:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Mar 25 23:00:43 2026 GMT
Not After : Mar 26 23:00:43 2026 GMT
Subject: CN=d626dec5db1865f402bf970b1cafed6b26b60e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:88:35:de:99:de:20:54:9d:0a:b9:c8:b0:
02:d6:f2:87:4f:74:8e:0c:20:50:bb:14:ff:a3:b2:
ea:32:22:d3:b5:f0:86:6b:f0:a3:ae:cf:18:41:21:
38:ce:34:a4:e3:4e:75:2f:aa:60:ec:39:41:4c:99:
75:4f:10:f0:c5:9d:8a:e8:0b:6f:d1:11:36:eb:0a:
75:00:86:6b:b3:53:34:05:22:b4:44:b1:9c:a8:40:
76:91:12:08:4a:d0:28:1f:40:6d:7e:f3:6c:15:cd:
64:24:f3:fe:af:61:33:2e:c7:c8:1f:51:02:b9:b6:
16:67:cd:67:7b:cc:bb:5d:15:b0:16:5a:0c:29:2c:
23:4a:04:2b:c9:8b:95:bb:fd:38:1e:6c:28:61:18:
dc:32:1f:f8:24:6d:64:4c:74:7e:4e:14:b7:0e:b5:
45:f8:6b:e7:80:c0:af:e7:fa:24:d4:65:00:b7:89:
c5:f9:b8:51:82:4a:43:da:c0:1b:d0:38:72:62:e9:
7b:33:08:7e:f6:25:bf:b4:f6:dc:83:68:b9:88:4a:
d0:53:c8:28:b4:49:55:b0:f0:f8:db:8a:61:6a:80:
7a:21:b7:f8:65:14:0b:10:8a:84:49:ee:60:86:9a:
39:05:75:05:d5:21:9f:01:0f:72:c8:3a:b1:46:a4:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:26:DE:C5:DB:18:65:F4:02:BF:97:0B:1C:AF:ED:6B:26:B6:0E:41
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cc:36:e0:9d:bf:1e:02:f8:cd:be:fa:39:18:00:86:5a:e5:
f2:63:09:b5:32:64:ba:05:09:62:8e:80:81:f6:bc:c0:12:2f:
1b:d5:0e:0b:f8:33:a3:8c:5c:b7:c6:29:a1:a0:89:df:21:fc:
bb:69:2a:18:d4:54:60:d3:82:0a:17:27:5c:b5:11:95:02:2e:
37:9b:d8:cc:f5:12:25:9c:9a:c6:1e:85:cb:6f:7f:40:69:7f:
fa:eb:fe:05:53:0f:ae:65:05:df:69:5b:b0:66:cf:82:00:bd:
ed:05:8d:09:85:63:bb:e1:0d:00:79:d3:85:d1:c3:7e:d9:49:
f0:9e:44:c4:a8:ec:e4:62:44:ca:0f:5d:b5:ef:82:d7:75:a1:
5a:11:21:2b:ad:c9:a4:89:a3:e6:b9:fd:97:9d:0c:8f:cb:71:
55:31:64:e3:e6:48:5a:9f:be:be:f5:aa:17:bf:b7:d5:35:62:
cb:8e:43:2f:5f:11:57:4f:1c:c8:9e:7e:76:48:18:71:d8:e7:
87:73:8f:57:25:39:9f:19:f3:77:4d:19:1f:ff:54:92:2d:a7:
6c:44:73:7d:eb:3d:d6:72:1c:be:97:dd:5a:81:4b:96:a1:b4:
54:60:3b:b6:c2:d8:e8:56:4e:b9:42:14:5b:dd:aa:08:61:9e:
36:23:76:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:31:29 2026 by rpki-client