Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: t4EwbH8oQS9H70QnFV2OqgIRFNzdEJjhiWB4YtTu/ak=
Subject key identifier: 61:35:91:3F:44:51:05:77:19:F6:82:88:8D:55:75:7E:88:60:FD:FE
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019D29CE6566F7FF1C66A27875EE0D0B1977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 125B
Signing time: Thu 26 Mar 2026 11:01:25 +0000
Manifest this update: Thu 26 Mar 2026 11:01:25 +0000
Manifest next update: Fri 27 Mar 2026 11:01:25 +0000
Files and hashes: 1: 1a09heU19_ryfPhTDOItUOYW9dI.roa (hash: 5eBlNMRyLdSqsVNmNmDeopusLkevokIjHf0hTvRVozE=)
2: KQji-kvGwokbQJLmZVW7oo2hsck.roa (hash: C1Er9TyXkYi4WTR5vknL0YRmJFZIjldNM2EpkmszpDw=)
3: X91v8T4v3SGFy7I37g4wXveNq7Q.roa (hash: WWeSP8Bv7bkntWr8c/ZwSbMkcIcKgP3z0XXfZzT3UxQ=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: DtsEqLiMd9P5hjCw5bw2VbH45/VPdIT++XsPIovm0xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:65:66:f7:ff:1c:66:a2:78:75:ee:0d:0b:19:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Mar 26 11:01:25 2026 GMT
Not After : Mar 27 11:01:25 2026 GMT
Subject: CN=6135913f4451057719f682888d55757e8860fdfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:af:46:22:b1:38:9b:63:0b:64:ac:2b:88:
86:bd:57:30:82:bb:a8:2d:7d:5b:e0:e5:ea:45:e2:
48:07:de:5e:ce:59:c2:c0:f0:87:d4:8e:35:9a:40:
20:4b:58:e9:49:51:f6:a1:3b:b6:e3:b2:79:07:0b:
db:81:c7:f7:eb:5c:c6:ae:03:3f:42:ac:f3:c5:79:
18:d4:7b:c8:61:7a:e3:bc:24:15:4c:29:1e:ef:ec:
14:77:e0:09:f2:bf:a6:e4:41:34:61:2f:20:3c:98:
07:9b:36:66:bb:2f:11:ed:61:21:7e:86:91:2e:5b:
99:79:51:e0:65:4d:06:12:58:69:2e:17:6a:33:91:
80:37:26:25:86:f3:75:b1:23:52:ab:b0:2a:6d:af:
87:eb:fd:73:8d:9a:5a:43:4a:05:bf:8c:f7:e0:66:
1f:d8:7b:60:b8:54:74:ad:05:89:05:c9:9e:93:ac:
32:1e:99:08:49:ba:32:ed:e7:8c:64:07:de:b7:9c:
91:de:e8:e5:9f:4e:ad:67:fa:b0:26:37:83:e0:2e:
d0:c5:b0:14:94:50:64:41:9d:8d:5d:24:20:30:a9:
2a:71:48:ac:a4:26:81:5b:6a:3d:bd:25:d6:e4:a6:
af:b5:9c:47:1c:9b:c7:2c:f4:19:c2:5b:0a:c5:e3:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:35:91:3F:44:51:05:77:19:F6:82:88:8D:55:75:7E:88:60:FD:FE
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6f:a0:00:7c:23:61:8a:49:e4:ef:96:9b:50:1f:cd:7a:4e:
dd:ab:09:78:5b:fe:a3:bb:dc:af:17:de:2e:bd:8b:ab:34:f9:
7c:b6:50:de:5b:85:05:b4:10:3f:49:fe:75:f1:84:c3:d7:d7:
5a:7c:d0:93:14:ac:25:50:ed:fa:1f:44:f5:a2:e3:f1:71:11:
e5:a5:01:c2:26:cb:86:cd:d6:2c:c2:9f:a1:9c:fe:4b:40:a6:
f0:c2:a7:1e:76:d4:89:c6:fc:2d:28:0b:77:42:4b:44:1d:33:
b8:f6:e5:40:a2:2d:71:65:d4:cd:4c:03:c4:af:54:46:a2:c1:
d5:f5:0b:e3:24:fe:ec:56:24:b9:8c:cb:01:13:26:c4:ee:96:
13:ce:ec:92:b7:49:5c:23:81:69:f8:e5:b1:44:2f:68:78:62:
6c:32:ba:54:50:8f:fe:10:cc:df:58:82:aa:fe:48:ab:94:2f:
29:fd:e8:21:6a:d7:ec:fb:6d:7b:9b:0f:36:95:e2:bd:6d:0f:
27:1e:f0:c5:99:a0:a3:bc:90:87:80:36:11:bc:b7:44:49:91:
a9:e3:08:43:9d:06:fc:79:4b:cd:01:0e:80:2d:0d:d3:65:ec:
3a:a2:7c:2f:4a:22:9c:32:34:87:06:14:7b:ad:4c:04:3d:64:
2e:e1:17:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:27:45 2026 by rpki-client