Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier: PyKF/53qHq2cEZC9lC4dAap59oerEYZdDoQ9UCjz4OU=
Subject key identifier: 88:4C:59:54:BC:6D:95:96:3B:AE:E0:78:69:ED:8A:65:E5:00:1C:A5
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 019D2704D98836A0BCFF1ECAA37EC3C094BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number: 0D80
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: E7N3AbX4XRe6TtepW4IKz_xhbuk.roa (hash: T0P6XuI3QLOIzu4AgydenL9szcYBu2vZyoMNm8nvA0Y=)
2: HglIl2BwTY2fpCe5GwP5ysjNj7Y.roa (hash: aHBtaErkZmaBHVd9P0AYZA/rEH87fSJk4r+cxPYL8Fk=)
3: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: HziInbFPLHNDGrQ81/D+ZnJomTwa2kV8bY7/WL1MpLc=)
4: iTmeATvkhdaQSx1hi5nnHidew6A.roa (hash: IYi+E84wN5bo5fjg0rwOe7narncl8RETFzc0nw+a92c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d9:88:36:a0:bc:ff:1e:ca:a3:7e:c3:c0:94:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=884c5954bc6d95963baee07869ed8a65e5001ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8b:49:5e:bc:cc:85:54:95:95:f9:06:72:dd:
22:9b:a5:69:32:c9:62:25:c0:06:a7:73:76:d7:2c:
63:51:49:26:28:ff:3b:1e:d0:d6:d2:ba:10:14:c4:
34:11:f1:b2:82:4c:cf:55:fe:3f:b1:54:12:b7:89:
c4:d7:e2:be:69:fb:22:2a:12:de:da:cd:5f:27:4d:
b9:1e:38:85:ac:dc:17:43:79:2a:3b:83:ff:80:67:
0b:11:98:11:6d:2e:3b:61:e7:7b:66:7a:95:d9:47:
9f:2a:f9:15:b0:d2:c0:2b:5e:83:7e:d0:4d:05:6b:
4d:14:9e:41:32:d4:42:6e:a3:72:b8:e2:a6:90:80:
fe:99:5a:2a:ad:4b:5d:87:12:e5:00:02:18:01:db:
ac:a0:ca:44:61:5a:34:e2:b1:a2:c2:6d:c7:cb:cb:
6b:91:d8:f1:e3:34:b7:60:29:06:7a:06:b9:c2:3b:
75:98:4e:af:c3:0d:54:3f:7e:d3:e2:68:1d:89:df:
66:c8:95:eb:41:1c:29:fa:1e:a1:f5:9a:87:36:74:
b5:a0:db:c5:e8:5f:42:9a:4a:06:95:c0:a0:13:b8:
ca:0e:d4:c3:51:b6:48:da:a0:43:0f:7f:09:28:29:
06:55:eb:81:e9:1b:22:4b:ba:23:e1:8d:b8:ec:a7:
19:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:59:54:BC:6D:95:96:3B:AE:E0:78:69:ED:8A:65:E5:00:1C:A5
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b6:fc:10:91:71:60:d3:57:78:17:2b:66:d3:20:2f:e8:f8:
f7:17:e4:ca:78:5f:ad:72:75:07:ad:36:9a:0e:a1:05:d0:b0:
71:68:a0:62:cd:7f:a1:20:79:ac:99:21:03:69:d7:dd:e2:5e:
ec:d9:58:d8:13:7a:b9:f0:ee:92:38:3a:b1:d5:72:73:ed:d4:
97:a0:6d:6d:fd:e3:77:5b:79:37:9c:2c:01:9e:47:34:2d:4e:
9c:67:d3:78:f1:ba:0b:7a:46:b1:1d:6a:65:20:3d:b8:d0:fc:
5c:26:ee:e8:d8:2e:cd:af:ea:59:3d:0d:fd:0b:e4:7c:fd:c5:
46:5a:bd:dd:c1:54:ea:44:75:ba:25:e9:c7:7a:c6:b9:a6:ea:
19:5c:a3:63:af:39:f3:2a:05:49:cb:0e:4e:99:a0:df:da:31:
7d:77:9d:79:01:1f:52:fb:90:5b:c5:ae:ad:74:ba:f2:67:4a:
a2:03:f3:f7:9b:d8:40:35:df:1a:69:1a:96:db:d8:c5:22:fb:
f9:54:17:42:9d:e7:b7:05:1e:93:37:d3:09:88:f7:45:3e:44:
4b:91:d6:a5:f9:8f:a8:d1:f6:b8:42:a1:33:01:32:04:00:78:
ce:13:17:1b:ce:dc:4f:e6:79:18:9f:fd:59:04:e8:a4:b8:f9:
3a:7d:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:07:09 2026 by rpki-client