Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: 1dGth8gZ9bdCOtlsUeswDJ7eZsQ6b8MRmq22ML0t2s0=
Subject key identifier: BB:AB:D4:1B:CC:F5:8E:3F:8F:58:72:1A:5F:66:1D:5E:62:70:2D:15
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019D284DD3C95700A36DAA260FAD4ECB9E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 07EA
Signing time: Thu 26 Mar 2026 04:01:22 +0000
Manifest this update: Thu 26 Mar 2026 04:01:22 +0000
Manifest next update: Fri 27 Mar 2026 04:01:22 +0000
Files and hashes: 1: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: 2RKt859aHVYYvHyqgZYyhKwNA/nt9JrwM9scuzS3N/Y=)
2: TGFQ-v8iwwj26A1wGgSnz3RdIYI.roa (hash: qpNJM6IYQFJO0DDo4i0rSAgHt9c5GNaow4wODjswgv8=)
3: bB9tiwhbq6hYU3Uiwj1rg_6lHoQ.roa (hash: XwQfxbXuM3OGYVnPS+i0ZnmylsJru3PWg0dqFXCZLBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:d3:c9:57:00:a3:6d:aa:26:0f:ad:4e:cb:9e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Mar 26 04:01:22 2026 GMT
Not After : Mar 27 04:01:22 2026 GMT
Subject: CN=bbabd41bccf58e3f8f58721a5f661d5e62702d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2e:a8:f6:1f:fd:2b:38:cd:23:17:05:c1:b1:
b1:44:65:78:3b:08:a5:24:2b:18:05:2f:41:29:56:
f0:27:9e:c9:c7:ba:59:b6:e0:08:95:79:be:29:06:
6d:92:2c:b3:29:f6:8d:cb:b3:ad:3b:69:15:5d:73:
a6:06:11:c6:b7:64:c6:8b:89:2a:ca:41:4f:5e:3c:
e9:92:11:ec:af:62:86:d2:22:5f:3e:26:d4:a8:f2:
57:1f:c3:74:49:ba:e5:49:7c:b6:18:cf:27:52:6a:
2a:76:b9:c3:af:b8:3b:91:fc:3a:c5:40:51:c2:46:
0d:71:c9:80:76:38:5f:86:c7:59:a7:b5:f4:2c:08:
da:a7:00:c6:ef:63:19:11:4e:a1:ce:8b:c9:fb:13:
b1:28:5d:43:a5:07:07:e8:bf:00:eb:8d:f8:4b:3d:
b2:fd:08:5e:ac:0a:74:50:99:58:db:57:65:e5:2d:
de:91:96:f8:1f:89:cc:1a:64:cb:b7:60:14:75:40:
41:80:6a:89:54:e0:0f:50:5f:82:0a:86:8d:a5:99:
ac:ba:ae:1c:4d:73:4f:25:00:6b:d5:74:fa:38:09:
3a:53:ff:6f:1f:b1:16:4f:93:c9:64:a6:0c:0a:c0:
52:7e:8f:0b:d8:9d:a6:82:02:63:fe:a3:bc:7e:d6:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AB:D4:1B:CC:F5:8E:3F:8F:58:72:1A:5F:66:1D:5E:62:70:2D:15
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7a:5b:40:4e:a2:a0:ac:8a:c4:a2:60:07:b2:ae:60:5c:3c:
b1:9c:4b:9b:83:17:25:51:c7:71:8c:aa:f3:56:dd:b2:37:38:
18:b2:e3:94:60:61:8a:b1:7e:42:36:85:b5:20:a9:02:3a:85:
58:f9:93:16:bd:02:c3:43:53:ba:63:bf:41:60:ed:d8:65:a3:
da:8e:45:d6:95:5e:a1:aa:72:18:41:94:e3:a0:90:b1:6b:43:
4e:12:f7:36:b0:a4:1d:81:bf:53:2a:d6:85:42:9a:d6:17:00:
90:04:c7:d4:31:c8:0f:7d:d1:60:0f:ff:fe:75:f2:d8:be:9a:
4c:b2:b4:c1:bf:8f:ca:49:74:02:04:a6:b8:e6:98:03:00:ae:
25:bc:9d:d9:2a:db:2b:6b:4b:9b:75:52:54:6f:c1:0b:45:2a:
91:87:0b:fe:91:2e:67:f0:8a:97:0c:d9:cf:ea:c6:67:35:b0:
39:29:71:76:95:f7:40:70:24:ff:21:7c:d0:a6:f3:6c:90:22:
01:76:7a:5c:df:6b:84:4d:32:e1:ce:5a:4c:b5:fe:30:e5:10:
c0:a0:7b:4e:d5:7c:41:12:98:50:88:0e:3c:15:16:bd:09:8d:
90:ff:5d:02:84:e6:7f:70:4f:cb:59:17:82:f5:56:2e:50:f4:
0d:64:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:00 2026 by rpki-client