Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier: WdPldf/9MAW1a00SVYOlDhvuRYR5pc+uPIw7gr8o7wQ=
Subject key identifier: 51:CE:D3:AC:5E:AE:83:46:EC:46:72:D1:2F:DA:F0:43:6B:B1:5A:7B
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 019D2B175AE23CD59D428E9FB41219838171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 17:00:43 +0000
Manifest this update: Thu 26 Mar 2026 17:00:43 +0000
Manifest next update: Fri 27 Mar 2026 17:00:43 +0000
Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=)
2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=)
3: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=)
4: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: WNgkDESaEnzJX/hcXdK1gOwBRCUtUEwPH7xJmcQV0xY=)
5: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=)
6: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=)
7: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=)
8: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=)
9: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:5a:e2:3c:d5:9d:42:8e:9f:b4:12:19:83:81:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Mar 26 17:00:43 2026 GMT
Not After : Mar 27 17:00:43 2026 GMT
Subject: CN=51ced3ac5eae8346ec4672d12fdaf0436bb15a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:a3:cf:e6:1a:b3:a7:c9:1e:88:30:1a:4d:
11:fd:7c:5b:8e:13:38:00:56:22:04:84:c0:08:76:
11:aa:02:1c:f8:ad:c4:71:da:8a:3c:2f:e4:4c:b8:
64:3b:e3:03:40:c1:32:4a:91:63:b9:2b:df:b7:02:
1f:5b:3b:1f:28:79:b7:26:1e:d2:44:e2:e5:ea:d0:
f1:eb:24:fd:d8:10:2b:e5:6c:3f:82:b9:4d:e7:f9:
f4:da:3f:a5:e1:8e:20:55:ad:27:ed:45:6b:f8:fd:
dd:0e:d5:96:3b:ac:e9:f6:f9:69:21:97:dd:46:45:
cc:2f:b2:0a:d2:12:77:e4:ff:25:aa:55:31:50:6b:
c3:77:f4:4d:d6:78:48:1f:12:a5:4b:19:ed:b9:ea:
4d:38:f1:95:18:b9:b9:0f:f1:82:bf:e0:40:33:f8:
99:1a:09:6b:ff:0a:23:2d:22:b5:80:99:8d:2c:d0:
db:36:9b:62:1a:00:c9:ce:1b:4c:df:e9:7d:80:a2:
82:1b:cf:3d:6e:96:2d:6b:82:92:f8:64:b8:d6:03:
ef:c3:d2:0e:66:e0:9b:c7:cf:42:19:4f:f4:cf:5b:
88:38:73:08:1e:d9:c0:32:47:99:ce:b3:f5:9e:8e:
ea:99:ec:26:ea:71:a6:68:86:f0:d8:47:04:25:9e:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CE:D3:AC:5E:AE:83:46:EC:46:72:D1:2F:DA:F0:43:6B:B1:5A:7B
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:5f:b1:8d:8f:d4:56:a2:fc:af:c1:0e:d2:5c:1b:38:dd:4c:
b8:9c:fa:cb:fb:4e:7e:14:85:e3:4b:95:b5:35:46:16:11:64:
c0:05:3f:f7:2c:1c:e2:d9:dc:65:ad:61:75:2a:17:bc:1c:9d:
3d:ee:e6:04:d6:10:4a:67:e3:3f:d5:2f:b4:bc:db:0a:f0:70:
6d:e1:43:ef:c0:72:51:8c:fb:79:93:66:9a:15:f3:e5:ac:1a:
47:f0:b7:a0:26:03:16:53:f7:ca:59:e3:bf:20:ec:c8:8a:a8:
7a:bb:f5:91:b1:fb:ca:8a:c1:ce:4e:fd:fa:c4:05:2e:2a:fd:
60:9c:42:6c:6b:4e:60:fc:98:e3:c7:24:ee:f1:b2:62:f4:29:
cd:d8:e9:d4:1c:c8:66:c1:c7:a3:8c:f9:a4:fa:1b:2d:79:6a:
8c:30:0d:57:2b:70:7b:05:a3:0e:6c:e4:ca:ab:01:ae:ae:87:
66:7c:97:68:de:7d:54:fe:31:35:1f:1c:ed:13:4a:8d:9d:e7:
14:25:7a:9b:ca:8c:b0:7b:85:f2:d7:a0:5d:d1:fd:d1:f9:09:
00:4c:41:c3:f8:13:cb:13:22:52:24:eb:97:35:46:38:a2:bd:
0d:4d:5b:c4:77:34:2c:a4:15:26:c4:02:15:5a:50:95:67:56:
79:26:ab:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:35 2026 by rpki-client