Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
File: O-U4LPdsHE8EZFTfy45VXMlJXIA.mft (raw, json)
Hash identifier: OjqIiOBSpcZQEvQDHgP5gOZmIZcIKs4ThCUoroGz/tU=
Subject key identifier: D3:DD:3D:C2:2F:A1:32:18:66:CC:BA:50:10:29:4E:C8:57:97:1E:57
Authority key identifier: 3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
Certificate issuer: /CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Certificate serial: 019D2BF366BA2688D3C9423371C798F9F45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
Manifest number: E0
Signing time: Thu 26 Mar 2026 21:01:04 +0000
Manifest this update: Thu 26 Mar 2026 21:01:04 +0000
Manifest next update: Fri 27 Mar 2026 21:01:04 +0000
Files and hashes: 1: 0UiKB-W2Swet4yZkwt-cEISTHm8.roa (hash: 21qXUq6giXIzo60sm+LjiePUKIsWVBi36a4kVBUwoeE=)
2: O-U4LPdsHE8EZFTfy45VXMlJXIA.crl (hash: we3PxFM0gsf0gf6rC5ndGEKR2doToJDeodXb/cBP6P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f3:66:ba:26:88:d3:c9:42:33:71:c7:98:f9:f4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Validity
Not Before: Mar 26 21:01:04 2026 GMT
Not After : Mar 27 21:01:04 2026 GMT
Subject: CN=d3dd3dc22fa1321866ccba5010294ec857971e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9c:a1:6c:21:6b:3f:08:af:82:ca:51:a9:a8:
f9:02:c9:45:63:30:82:cd:d9:97:55:ff:97:a8:5b:
53:a3:e8:12:d1:ce:fe:3a:19:14:0c:e3:fc:56:5f:
81:d2:8b:26:16:cf:72:1d:c0:7c:d4:fc:0f:3f:9c:
e6:9d:a9:ce:17:db:e9:6a:36:9f:33:9d:9d:0e:79:
5a:e7:cf:7a:c8:36:8e:cb:5b:85:27:f6:0a:d5:11:
0d:ba:e2:7b:be:68:a4:15:d6:a6:ba:54:e9:7b:7b:
b0:3f:6b:45:8a:39:a5:4c:9f:1b:b7:92:bc:b1:96:
95:f4:7a:f0:8e:0d:08:9d:39:70:23:65:fb:59:6b:
16:8a:6b:6b:97:dc:3c:db:d7:44:f0:1a:e8:12:72:
57:f8:10:55:d5:4c:cb:d5:0e:0a:6c:f6:18:e3:78:
24:af:1b:eb:3c:13:2e:a2:4b:a6:28:6a:13:fd:75:
5d:85:d8:8e:e2:e1:c8:c4:7a:5c:31:a8:d7:b3:a0:
71:a2:b5:96:0f:ca:08:76:60:d0:24:a5:45:2c:d9:
4d:3c:68:a1:cc:64:5d:25:64:c6:ae:83:45:ec:8c:
92:cd:6a:e7:c4:ab:08:82:2b:9b:de:6e:d7:90:00:
97:c8:50:4a:24:d7:4e:4f:5b:e0:14:fa:63:bc:67:
b4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DD:3D:C2:2F:A1:32:18:66:CC:BA:50:10:29:4E:C8:57:97:1E:57
X509v3 Authority Key Identifier:
keyid:3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:8e:1b:7f:11:47:5b:bd:40:ae:72:d5:ee:21:5b:3d:21:e7:
b9:f1:19:8d:25:0e:2a:0f:33:db:17:ec:90:5f:b3:3d:62:9a:
6b:09:39:57:0e:90:f8:69:95:6b:80:99:5e:57:58:2e:7a:3c:
fe:ba:1f:20:c4:c5:d5:80:2b:31:63:70:6e:13:cb:ba:48:1a:
88:74:0f:0e:77:18:88:c8:93:8c:72:bb:1f:54:f8:be:b5:4b:
bd:81:7e:fd:22:82:ed:e5:2f:ec:55:81:25:a2:fd:6a:5f:90:
b4:5c:43:2d:48:d9:e8:73:d9:0d:c3:05:38:87:db:ea:16:6f:
3f:f7:94:d9:04:ad:91:95:97:f6:80:56:73:36:76:46:75:77:
46:aa:77:4b:c5:0e:ec:49:74:d4:34:a5:e4:38:41:ff:fe:19:
e4:92:17:fa:db:e2:45:d6:15:47:29:43:2b:d9:eb:3c:6a:2d:
8f:7e:47:8f:2b:bf:c2:3a:34:89:90:a5:cf:16:6b:ce:a0:cd:
c4:98:d1:92:5e:6a:18:a1:e5:b7:92:8d:e6:af:de:9a:61:4e:
ce:f3:c8:f3:ac:82:5f:35:08:96:15:ad:20:b7:e3:15:69:8f:
b6:ab:35:98:4b:3c:69:d9:9a:71:70:29:69:dd:16:c2:c7:8e:
a7:f3:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:07:53 2026 by rpki-client