Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: iYjoLj00yfUpwWrFA/XCppyTftQrIqxTrb2YyH4xKn0=
Subject key identifier: 7A:EB:04:C0:6F:4F:A2:2D:FF:95:B3:B7:9B:29:CD:53:1A:4E:0D:EC
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019D28F1F8F59743BA3EFFF1E209AD26AC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 07:00:39 +0000
Manifest this update: Thu 26 Mar 2026 07:00:39 +0000
Manifest next update: Fri 27 Mar 2026 07:00:39 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: M3a/0LFzYmakrO6bwTt7Wb0LzwJqu/aMUoTWuaSqhIg=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f1:f8:f5:97:43:ba:3e:ff:f1:e2:09:ad:26:ac:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Mar 26 07:00:39 2026 GMT
Not After : Mar 27 07:00:39 2026 GMT
Subject: CN=7aeb04c06f4fa22dff95b3b79b29cd531a4e0dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:20:12:6e:2d:10:3c:85:df:f1:61:63:4a:
e6:aa:c9:c8:18:7a:64:6f:fc:14:05:6e:f2:37:00:
1d:06:c1:68:da:3b:fe:f5:55:af:80:b3:cb:91:31:
d7:60:0e:3b:c9:a3:d8:1d:25:be:51:36:1f:4f:6c:
20:d7:ce:cc:d8:25:7f:92:9f:c1:10:6f:da:9c:7a:
e4:93:22:38:4e:f3:37:92:d2:76:c5:97:15:55:b7:
2d:03:d8:ae:e0:c4:30:65:d5:df:32:97:36:d9:3e:
8a:0a:60:27:8e:e4:a8:5b:a8:79:ca:65:18:42:a1:
5b:61:bb:e9:93:ad:50:24:04:eb:3d:2c:3c:14:d8:
3b:a9:61:a9:8b:7e:57:cd:8c:46:05:7f:83:df:10:
23:92:b9:7d:fb:60:17:5f:fe:13:82:17:dc:7a:4a:
5e:af:7a:2e:44:4f:a4:97:a5:9d:c5:08:5e:6f:9b:
eb:91:3f:f8:25:f1:f0:79:67:81:53:0b:48:04:4d:
83:f0:d0:43:27:8f:fa:ee:5c:87:6b:c6:e8:40:c9:
a4:58:35:16:1f:fd:bb:e2:79:61:11:82:8f:1f:9a:
82:65:f5:2a:0a:27:4d:e9:36:0a:53:62:08:78:c3:
66:dc:2d:ee:ba:f6:7c:81:20:7d:75:cc:22:10:39:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EB:04:C0:6F:4F:A2:2D:FF:95:B3:B7:9B:29:CD:53:1A:4E:0D:EC
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c0:3c:16:5d:f4:5d:8f:20:0e:72:49:be:be:96:e2:d9:ff:
73:93:fe:02:45:35:e6:40:7a:ba:4b:94:b5:fb:8b:8f:3a:c6:
c7:0d:cc:4f:eb:19:26:4e:a4:f2:22:2e:53:04:58:b4:4d:94:
70:fd:d0:e5:79:75:64:5c:f1:73:90:82:4e:73:47:f5:2d:b3:
01:57:14:02:9f:0f:72:e0:77:7c:32:5c:3c:7d:88:18:86:7c:
b1:21:56:e9:dc:03:79:59:71:45:66:dc:7d:98:05:e1:e1:64:
32:12:d4:23:16:59:49:ec:83:fc:54:91:eb:60:28:e2:73:f0:
a5:a5:ad:12:95:79:2a:96:27:76:e9:b0:22:6c:c7:5b:76:48:
65:d3:14:91:60:fe:a2:06:ea:ab:44:de:b3:9d:ce:fd:9c:22:
fc:24:07:13:fe:27:a1:b4:4c:42:dc:e8:23:0d:a3:9f:79:ea:
e4:f0:7b:6e:73:94:2c:89:c8:86:95:e5:48:79:98:df:62:0f:
75:f2:dd:37:0b:99:22:bc:56:69:58:f8:84:fa:d1:9f:51:10:
c8:33:2f:84:b1:6b:10:1d:c9:69:82:a7:16:e3:8f:2e:01:d3:
a8:c9:63:e0:d8:fc:4e:67:ac:54:74:5b:74:22:eb:0e:d0:f8:
cc:36:7d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:22:08 2026 by rpki-client