Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: ZbXtyzlRijrv+dWSPvD7iC7rezc4tJJRs5rzTPjaf4c=
Subject key identifier: 8D:F1:A3:AF:DA:88:BD:D6:2E:33:E9:CE:A5:E5:E4:6A:52:AF:8F:43
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 019D29291FC20268ECAFDC257E15E665C67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0DD2
Signing time: Thu 26 Mar 2026 08:00:53 +0000
Manifest this update: Thu 26 Mar 2026 08:00:53 +0000
Manifest next update: Fri 27 Mar 2026 08:00:53 +0000
Files and hashes: 1: 1-F6a50KtQcu31PT6x_F9Z_uaDfs.roa (hash: P4rr0sjF2JMQ0Puk//ntxlDU0c1i5ZoIeElt4H2LfSA=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: dhl43D6aESpcFvReQ4MVzsNxowzGRxRJKJd2+41j24A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:1f:c2:02:68:ec:af:dc:25:7e:15:e6:65:c6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Mar 26 08:00:53 2026 GMT
Not After : Mar 27 08:00:53 2026 GMT
Subject: CN=8df1a3afda88bdd62e33e9cea5e5e46a52af8f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:ff:be:ee:63:6e:7b:7d:89:79:b0:4a:40:
86:ee:18:d5:1b:9f:dc:e0:0a:51:a4:5a:4f:18:a0:
84:71:18:d9:23:51:2c:ff:3c:e1:a8:47:0f:cb:26:
a0:17:b2:04:e6:bd:c7:fc:ab:d7:2a:54:8f:99:42:
a5:13:ff:72:fb:58:c4:de:a1:22:3b:33:06:b9:66:
e2:ef:8b:b0:b4:d0:34:83:b3:8b:44:67:a3:c1:58:
32:71:fa:23:ff:13:b4:b3:52:8e:02:0d:38:d0:ef:
0f:1c:ce:3a:a0:2d:90:88:f7:d3:b2:b8:9c:0c:51:
96:84:fc:97:c7:7d:17:3a:8a:e6:ce:7a:6c:fd:c9:
26:fe:d7:31:bf:78:79:26:4e:0e:86:fd:12:eb:d8:
62:11:bd:89:00:20:be:4a:89:64:b2:df:49:96:f5:
5f:43:0c:59:e1:cd:9a:6e:0b:8a:5c:63:e5:10:7c:
30:6e:c6:31:22:e4:c8:82:85:3c:d1:f6:57:9e:82:
4b:08:a4:49:1e:e0:b1:fd:0b:b4:5a:19:f2:37:cb:
74:fb:19:b0:0f:99:37:93:28:75:f0:3a:e1:03:95:
b3:84:7b:10:ac:d3:31:1d:4f:ed:e4:fa:b4:ae:3f:
6f:3c:07:10:3d:aa:1e:f9:bc:50:73:91:6c:2a:08:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F1:A3:AF:DA:88:BD:D6:2E:33:E9:CE:A5:E5:E4:6A:52:AF:8F:43
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b6:3c:29:7b:12:03:de:73:37:b1:aa:41:ef:84:b7:bc:0e:
93:ef:2f:02:72:a9:9a:78:f6:f0:a8:24:1d:48:65:c8:04:4f:
c3:50:d7:d4:c8:cf:43:1f:cd:03:78:87:42:bf:af:75:65:5a:
b1:6b:ed:73:43:f0:91:7d:69:c3:98:33:c0:7a:f9:a2:bf:37:
82:56:e9:61:48:a3:f6:07:fe:36:a9:c4:d6:32:39:43:f7:70:
0d:23:86:a3:f2:fd:a0:b7:bb:72:72:51:7f:ac:5f:f2:ac:3e:
31:0c:b4:c4:00:9e:f5:10:32:f0:6b:73:c4:f6:f4:2f:8e:92:
87:52:de:3c:fe:88:da:19:63:29:5b:16:fd:83:74:85:44:64:
02:27:79:a8:e9:84:74:e5:53:5a:20:49:c0:f7:9e:38:bf:42:
2f:fa:37:7f:23:b8:13:51:79:6b:00:1a:45:15:34:2c:59:28:
1d:84:ea:14:d1:76:7e:7b:1d:38:d1:3d:32:7e:d7:06:e9:0e:
d8:4d:a7:d6:22:78:35:70:ec:a3:95:ce:20:55:80:df:80:69:
eb:e7:37:7d:4b:89:cd:00:29:ce:fd:64:5b:55:a4:84:b6:61:
b4:26:af:ae:5b:bf:8d:57:a3:1a:d5:cb:f2:56:3d:71:39:e4:
e7:0e:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:01:57 2026 by rpki-client