Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier: If8DFAVNtdJ7BxwlrvJhHF5dP6kYvDZe8c6ahMYCVxI=
Subject key identifier: 2E:FC:91:3F:D6:5D:62:86:AF:FC:07:5D:C9:DA:A5:18:D7:B1:FF:DD
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 019D29CEA7CAFFDA01294A62DDE1D8FB757A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number: 12EF
Signing time: Thu 26 Mar 2026 11:01:42 +0000
Manifest this update: Thu 26 Mar 2026 11:01:42 +0000
Manifest next update: Fri 27 Mar 2026 11:01:42 +0000
Files and hashes: 1: 6J5zq7acHeCorGt2Kz1SRI8TBxw.roa (hash: QUb/O/uGMs7lP+6gaahFi67OYlrRZUT6YWqd/feI1TU=)
2: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: NYMsAMZrial6owl3OGyoFamxb/ykpBTAtnxu/gzWi4Y=)
3: SAEHlpuu2VHfT1gYOBIDmp8YrI0.roa (hash: f+Ly+ugjS2e2LTdlARUIcZJrF9Q/kNyEBJzeeNxkntA=)
4: l8nJcuD4rGZxCdIYInml3vohntk.roa (hash: eU3RnT3IPn87hTAFydZwwQYkYydG1vHyM8wmqGF1vjs=)
5: n7VSYaUgna6BrvfvQJiTcoRPzQk.roa (hash: M0u1q9q0trXFDUH6vNkVVYgYyDRJLjrO4qxwE6RvEOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a7:ca:ff:da:01:29:4a:62:dd:e1:d8:fb:75:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Mar 26 11:01:42 2026 GMT
Not After : Mar 27 11:01:42 2026 GMT
Subject: CN=2efc913fd65d6286affc075dc9daa518d7b1ffdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:e8:52:62:19:0e:ad:ac:1b:ff:75:a0:80:
69:f7:77:45:db:0c:b7:ef:4c:bd:21:21:e2:68:e1:
16:cf:32:48:72:19:aa:c5:f6:49:5c:a6:dd:52:b7:
99:7b:90:c3:5c:88:3c:2e:a0:89:e7:85:86:aa:57:
d6:1a:0e:ee:e2:84:59:66:c9:3d:8d:4f:c4:d6:22:
ee:20:53:1f:5b:bc:18:94:d2:57:fa:95:8d:2a:8a:
ea:d9:5c:39:b3:e6:14:85:cd:7e:8a:66:40:ee:0c:
c3:1d:fd:1d:e3:3f:aa:b9:c5:e2:36:6c:04:10:1e:
03:9f:2d:06:de:1e:e5:37:b2:46:3f:ec:93:8f:25:
b4:16:03:19:e2:d7:a6:ea:fa:cb:3f:3b:60:17:83:
c6:c2:8a:a4:ec:ac:3f:41:22:83:0a:54:33:6e:61:
7a:dc:20:ab:4a:4e:d2:4f:59:a0:cb:d3:0f:a8:0d:
2b:5b:83:4b:0e:ae:9f:32:81:99:35:62:32:c0:28:
22:9d:ad:48:82:95:18:dd:5f:52:eb:11:eb:f4:81:
79:cc:29:e0:5d:7a:fa:58:9b:08:ce:92:6c:c7:52:
e6:34:60:5c:9a:85:c5:c0:16:a7:cd:9e:71:c2:5d:
55:67:77:1d:96:cb:10:9d:e1:03:a9:44:08:b4:6f:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FC:91:3F:D6:5D:62:86:AF:FC:07:5D:C9:DA:A5:18:D7:B1:FF:DD
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f1:83:90:8b:d6:fa:3a:3f:14:32:b9:3a:18:f3:2c:f6:84:
b3:1b:3c:af:55:37:0d:f0:a5:97:c5:83:61:8f:fb:c9:87:c5:
61:dd:32:56:91:16:33:cf:1b:82:07:9d:d9:4e:e7:51:6b:d4:
1b:3e:42:44:21:df:71:55:8f:2e:ff:16:a6:8f:7f:6b:6a:72:
37:d3:75:30:6c:6c:47:38:2b:32:05:a1:38:3e:5e:d4:34:1c:
98:4d:44:e1:a2:47:e0:2d:f8:f2:77:3a:11:b9:2c:e6:10:bb:
1f:32:05:8d:d7:db:eb:fa:26:e0:91:0a:ec:73:36:46:57:7b:
0e:ef:50:ce:67:df:6c:f5:a9:f3:ee:06:50:7f:cf:56:7b:ca:
29:88:44:eb:29:10:fb:f1:ff:40:cc:a2:9e:d3:1e:4e:69:d1:
08:97:6f:71:69:47:0c:08:8c:ab:94:18:80:3c:e4:0b:d7:ab:
3b:bc:0b:8d:e9:2c:25:f3:49:ae:02:a1:5a:bd:68:78:85:f6:
a7:6e:4b:64:cf:12:b0:f6:91:0b:b6:9a:35:08:8e:9f:f5:4a:
7f:71:5c:01:fe:09:a0:0d:16:73:ed:5c:73:d8:3b:fb:b2:64:
c7:a0:9a:59:19:9f:0f:7b:37:4f:3e:f0:5f:13:bb:8f:40:a4:
fb:cf:18:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:21:17 2026 by rpki-client