Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
File: O-lZPSkOAlAninOzE1UDKTJ71Yk.mft (raw, json)
Hash identifier: sAKUx0S0/VJfsbMFkdqwzciWF9gNH1/7M1ZYQp0dOY4=
Subject key identifier: D9:B5:55:D5:56:2E:EA:F7:2E:FF:FF:18:9F:35:94:A9:22:55:8C:9E
Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589
Certificate serial: 019D29291956C8F1BB21B78E7218CFD1A01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: O-lZPSkOAlAninOzE1UDKTJ71Yk.crl (hash: dB1sisDOsXiw8u0iDIaRCGmYQY5CTG3m8+o2+I8a9iU=)
2: ihgnIXHoUMYh-WaWeIPaPydWbUk.roa (hash: iBsCj7b0mjUZuRLfwoBEpzWhtX6/cZQAGCmkWVKeq/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:19:56:c8:f1:bb:21:b7:8e:72:18:cf:d1:a0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be9593d290e0250278a73b313550329327bd589
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=d9b555d5562eeaf72effff189f3594a922558c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:07:09:be:23:8d:bd:89:12:3b:fa:ba:d1:
25:a9:6d:94:4e:68:bf:49:62:8a:58:d2:67:5d:cd:
93:7a:df:07:2b:0b:2b:a7:b3:e7:58:6b:29:b1:4e:
3e:40:10:1f:37:e2:d5:6e:ad:65:3c:08:28:48:0f:
dc:15:a9:2f:b8:f8:a2:df:d8:dd:7d:ff:17:5f:8b:
9c:7a:88:fa:16:64:1c:2c:64:74:73:3e:1c:d6:63:
66:08:0c:eb:00:56:9a:14:68:07:e6:5b:f0:f1:04:
94:35:b4:d2:42:15:a6:2a:bc:5c:44:3d:e0:b9:c4:
51:1a:11:05:6f:7c:30:33:b5:e3:e7:4b:5b:81:ef:
d0:7e:76:cd:70:01:98:de:11:04:68:7a:04:21:6d:
a8:bc:1c:38:14:23:a0:86:c9:4c:00:3a:d0:14:d4:
6b:83:45:28:ba:d8:0b:60:16:0f:a2:3e:57:ee:d5:
36:7b:97:b7:fc:b6:a5:c7:d8:53:61:ae:80:3f:ae:
a6:4d:eb:07:fa:26:0d:5b:5f:02:8b:ec:8d:15:64:
c3:9d:1c:7f:91:3e:8b:c0:ea:9d:a6:39:28:a0:b9:
36:60:86:aa:65:a3:59:c6:3d:ab:5a:d7:0e:d9:26:
30:75:4a:5d:b0:5f:7b:70:2c:35:f5:04:9e:37:23:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B5:55:D5:56:2E:EA:F7:2E:FF:FF:18:9F:35:94:A9:22:55:8C:9E
X509v3 Authority Key Identifier:
keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ee:59:36:aa:db:c7:0d:cb:1c:a3:bf:81:c7:7e:13:bc:b6:
04:e0:23:1d:67:a5:c0:81:ba:1a:81:24:11:2b:e3:7a:74:97:
d4:ac:c4:6e:f8:63:a2:54:3b:ad:75:d7:a4:51:59:0d:c8:5e:
16:6d:65:6a:6b:ca:80:a4:02:2f:a1:6c:ad:52:f1:22:6a:8c:
67:4e:28:71:d1:4c:d2:43:3d:14:08:41:e1:58:1f:a7:70:be:
89:d4:02:8c:86:f3:be:59:36:96:0e:81:f2:37:9c:bb:df:1e:
24:27:4e:23:c9:2c:a7:d7:9d:ec:1d:8b:28:e4:d5:e1:9b:f2:
f3:71:f8:9f:d7:90:1f:67:e9:9a:5e:82:34:61:e5:a9:a7:eb:
cb:d4:e9:d1:70:1f:73:40:0d:64:f0:49:87:ce:b5:7a:5e:23:
27:3a:19:77:43:cb:81:c9:07:e9:b8:75:bc:bb:6c:f8:5d:b0:
28:91:13:61:d2:a9:49:c6:3f:c3:c1:49:f3:47:b4:0c:00:5f:
fc:15:54:55:e3:59:6d:46:5b:d3:57:15:bf:b4:96:59:3d:36:
db:d2:36:1c:b9:50:bc:fe:b4:3a:10:eb:5a:23:cb:f7:b2:24:
b7:e7:a4:ee:79:55:87:94:bc:f1:de:3c:67:67:0e:c3:f5:98:
b4:eb:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:38 2026 by rpki-client