Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
File: O1RMoOK-GOn9dOKBMkowsOotHVI.mft (raw, json)
Hash identifier: 5rpWV/5maR79vvb6UEPuoc0q01VDHKXfgY7El0Xkvh8=
Subject key identifier: 26:1E:C4:87:F9:41:CC:E5:38:69:B6:30:27:04:A2:38:94:24:68:3A
Authority key identifier: 3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
Certificate issuer: /CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Certificate serial: 019D26CD32B11D9D8E465427AEF6C8C6A7C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
Manifest number: 0F2C
Signing time: Wed 25 Mar 2026 21:01:15 +0000
Manifest this update: Wed 25 Mar 2026 21:01:15 +0000
Manifest next update: Thu 26 Mar 2026 21:01:15 +0000
Files and hashes: 1: 5EPEfFcq0_CQJyJv8NvlTXW122s.roa (hash: shP8Ed/HPJC3iktLjU3AhfJDqjBPIc4NQ5VyPIH2+gA=)
2: HoguhPYctq53_NeJpwMiGGaEYHE.roa (hash: 2Rg4I4psfcDKa015Nd8h+FBbuNVy5CBZXEFltS4HBbg=)
3: O1RMoOK-GOn9dOKBMkowsOotHVI.crl (hash: oGUBcHp7mZkW4kJB42tz2PuZjRWMH6JMLT0riVc2kBA=)
4: jqg60u3udEXldRsO6lvjcjKURzE.roa (hash: kW26aKoDuoF4wJ1FRfJ1sSmndtvHSr/VmE5hX9cRIqU=)
5: xkVE7KUdk3_Gxthu42EOBxgV05Q.roa (hash: OLCiaU+AVFxgMEa5gMdkqLSxOFCgu1RCocNrX9T3asM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:32:b1:1d:9d:8e:46:54:27:ae:f6:c8:c6:a7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b544ca0e2be18e9fd74e281324a30b0ea2d1d52
Validity
Not Before: Mar 25 21:01:15 2026 GMT
Not After : Mar 26 21:01:15 2026 GMT
Subject: CN=261ec487f941cce53869b6302704a2389424683a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:38:45:05:c6:f2:59:0e:4a:9c:fe:ba:c9:fb:
35:bd:60:a3:d1:d6:47:06:93:31:df:f4:1c:11:8f:
7f:f7:54:de:d4:f2:d0:a1:c7:0b:31:da:9d:3b:2f:
e7:17:8b:3a:b9:0f:5a:35:1c:f3:0a:51:42:6f:2c:
01:e3:03:91:ba:05:c6:57:02:0a:1d:4d:33:42:33:
1a:3c:50:d7:c6:96:ee:81:9e:42:7a:00:cf:bb:62:
d6:9d:d5:83:05:fe:92:c3:47:a4:e1:06:96:e2:e3:
e7:bb:e6:7f:10:d2:41:6c:6f:61:75:8b:89:bc:a8:
97:ea:40:4c:30:42:49:cf:a9:eb:bf:83:b4:35:90:
19:e4:b4:9a:de:c6:9e:1d:0e:91:4d:7a:b2:ea:c8:
4d:cd:ff:de:5e:3f:45:c5:b2:ce:c8:7c:dd:90:21:
80:04:0c:0a:1f:ee:09:4d:24:59:9a:12:c2:7a:0f:
3c:b7:22:d5:cd:f4:3b:02:cc:a1:50:36:87:a8:07:
23:36:56:2e:c0:a6:f2:06:9b:aa:96:a4:b8:56:fe:
63:7a:53:0e:d0:22:a7:01:08:ca:07:5d:3e:02:64:
c7:fb:f6:84:ca:13:20:76:9e:92:71:1e:8c:ad:dc:
29:8c:63:c1:c5:27:28:d6:32:79:d4:91:e4:57:f3:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1E:C4:87:F9:41:CC:E5:38:69:B6:30:27:04:A2:38:94:24:68:3A
X509v3 Authority Key Identifier:
keyid:3B:54:4C:A0:E2:BE:18:E9:FD:74:E2:81:32:4A:30:B0:EA:2D:1D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1RMoOK-GOn9dOKBMkowsOotHVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3030bb-42c2-4e3c-859a-876a9d7629f6/1/O1RMoOK-GOn9dOKBMkowsOotHVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:85:80:77:8a:52:98:f2:f6:b0:80:92:8e:2f:39:9b:c4:8a:
40:d6:23:f9:f2:a6:dc:53:38:54:85:9c:f0:8d:e6:df:e2:9d:
6c:9d:ff:7e:87:74:7b:64:80:fb:ab:2a:8d:b6:6f:c8:94:34:
61:9b:39:a3:28:f0:7e:fe:2d:c5:b9:3e:c8:ab:91:a0:04:b8:
37:d0:b7:5a:c1:5f:78:1e:22:be:1b:8c:06:db:f7:93:f3:c8:
e0:32:31:f6:7c:76:f1:d7:90:9e:92:f0:1d:23:49:ac:96:c7:
23:e0:1e:f1:13:fc:0b:14:3e:0d:83:15:5d:cf:dc:23:81:aa:
ac:a4:28:5c:79:87:59:73:d7:9a:c3:21:bf:34:62:59:71:29:
df:03:40:89:db:18:a9:02:eb:b7:d5:10:97:59:13:59:c9:9c:
0e:af:73:ec:e7:ae:c4:19:d6:05:64:9a:37:51:13:a8:fd:7f:
63:b5:93:6a:c0:2e:e1:d1:4e:fb:09:e1:86:7f:a5:0f:d5:3f:
db:3b:fb:3f:53:a8:6e:30:28:1e:49:d6:44:b8:b0:01:45:78:
bf:b6:b6:cb:19:78:57:25:8e:dd:f1:30:d9:10:e1:8b:3b:fd:
a7:0b:ab:f9:69:a8:52:08:89:d5:e9:46:bf:3f:b6:b1:f8:b8:
fc:57:46:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:18 2026 by rpki-client