Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: Nb4FeFa9BIb4iBVJ8ReXXvQ9qRvIwie8QsocDs1NyOc=
Subject key identifier: 4E:F8:12:6D:22:30:0F:EF:94:0B:DB:5B:4D:6A:13:A1:5F:5A:4D:FE
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 019D27726F4EF897A504D0008303A023D063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 0C4C
Signing time: Thu 26 Mar 2026 00:01:44 +0000
Manifest this update: Thu 26 Mar 2026 00:01:44 +0000
Manifest next update: Fri 27 Mar 2026 00:01:44 +0000
Files and hashes: 1: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: OW7RLd84PD57GE6vNtjZyUHJAPnnd6CCaPOhbu5sdzo=)
2: _g97Og5G9vKazdZyvUt-VVIBpss.roa (hash: YuLCDVF+kjBYwqyUmxi84DtjJhA7vq/XSNvOonb9Y8Y=)
3: lpaC_L_3Kh3Us_J5PIM5IP-2MB0.roa (hash: 4WQbvnKdlS0s85jQle9ELQNyZdFgg7qqpkEdDrjdCZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:6f:4e:f8:97:a5:04:d0:00:83:03:a0:23:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Mar 26 00:01:44 2026 GMT
Not After : Mar 27 00:01:44 2026 GMT
Subject: CN=4ef8126d22300fef940bdb5b4d6a13a15f5a4dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3b:be:44:db:22:1a:6e:24:41:06:65:84:14:
6c:c2:83:84:22:dd:9e:5d:a3:16:4d:68:4e:f2:33:
49:84:e1:36:e8:33:45:6b:21:07:8f:e0:5f:76:b5:
89:a7:dc:29:71:aa:9a:da:f1:8d:01:e8:3f:86:35:
5e:40:ff:c7:da:b3:53:b7:e6:12:6c:f1:45:8b:a3:
22:62:55:36:d5:58:fe:1f:bd:36:b3:56:1e:d3:1d:
72:57:63:70:da:15:d4:0e:30:e3:6c:a1:d3:1f:ce:
72:a8:a9:20:eb:a0:3e:89:91:fc:80:17:19:40:a3:
00:e6:08:84:86:60:93:44:58:ee:93:b0:d5:9a:c3:
b4:bb:f0:b8:c9:fa:2a:70:ac:ce:4b:11:79:c8:8a:
2f:20:6d:c3:93:35:d9:12:20:c7:41:f9:61:6a:a6:
79:56:1f:e6:00:26:ab:14:65:14:53:d7:b6:97:d2:
ad:17:3e:c2:08:b3:7d:b6:18:82:51:4e:1d:b2:aa:
c4:f6:5b:fb:e0:c4:f1:a8:04:0b:db:40:04:01:94:
93:c5:26:23:b0:7a:e9:91:d4:df:13:07:3a:f3:8d:
5c:15:f4:f1:eb:6a:61:ec:9a:58:5e:34:1a:97:67:
29:b3:d0:85:86:a2:43:50:bd:a3:df:64:b8:37:ee:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F8:12:6D:22:30:0F:EF:94:0B:DB:5B:4D:6A:13:A1:5F:5A:4D:FE
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:31:a1:56:c3:f9:14:f3:f8:0c:82:a0:43:d9:91:0c:31:
37:43:da:a8:84:b2:50:c0:7e:46:6c:42:3e:7c:11:e6:99:6f:
3e:7b:c9:65:5f:16:48:b1:e5:41:bb:26:72:d6:0b:a9:44:67:
de:48:94:8f:3c:00:6f:a6:d8:fb:7a:28:11:41:7f:61:b0:d6:
0e:fb:da:45:9b:f8:f3:66:e7:6c:6b:59:00:31:05:fa:75:49:
c3:9c:bf:10:1e:c2:e7:ef:ce:3b:a8:91:93:42:e7:c4:e2:e2:
f9:af:95:51:f6:58:b8:24:d1:9b:d7:d6:86:1f:c4:75:0a:94:
01:0b:e9:f3:39:b0:bd:99:4e:9d:59:49:40:de:d4:a8:cb:e1:
6c:c2:87:3e:3d:00:30:a6:ab:73:2a:71:6e:83:95:f1:c5:dd:
30:c8:3b:dc:d4:f0:3a:8f:23:7c:3c:2a:ac:d1:fe:b2:00:1a:
9a:31:d0:bd:c3:5b:e7:19:25:ee:54:ae:7c:57:c4:9f:80:25:
d9:7a:b1:b5:85:1e:89:d6:89:2b:dd:84:44:18:db:97:2d:65:
bd:88:3a:9d:23:48:81:53:f1:63:be:cc:92:72:43:85:3b:f3:
94:75:c9:b2:f2:8c:53:52:0d:a9:ad:9a:3c:bf:33:14:e4:d3:
f6:62:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:22 2026 by rpki-client