Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: k4gYe8154Wae4ofONrv01gx0N9PtkBoQ5ojJWAmhJa8=
Subject key identifier: 1E:53:BD:4D:8A:2E:C5:52:7C:DA:65:43:4F:E7:E7:32:CE:22:04:39
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 019D27A869ECB7AFD4C33C8A822D898BB11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 104C
Signing time: Thu 26 Mar 2026 01:00:41 +0000
Manifest this update: Thu 26 Mar 2026 01:00:41 +0000
Manifest next update: Fri 27 Mar 2026 01:00:41 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: vfqmXJ8eZQcuPKLJIHoZ2fcbQOWR+Cl2Lo7ZUSXLCf8=)
2: fwsKv3gFuqhW1sf3BEMUe7UIGos.roa (hash: 1WCeYdLMrYmy3YdzxETcmdYKttU2fzCPworPqJW1olQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:69:ec:b7:af:d4:c3:3c:8a:82:2d:89:8b:b1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Mar 26 01:00:41 2026 GMT
Not After : Mar 27 01:00:41 2026 GMT
Subject: CN=1e53bd4d8a2ec5527cda65434fe7e732ce220439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:00:7d:cc:d6:fe:5b:0f:4a:b6:0c:dd:8e:b5:
40:29:d8:37:73:a7:8d:ff:0c:32:e5:06:20:7b:94:
a3:db:cb:0a:29:1c:95:ea:78:be:49:75:e8:9b:42:
99:33:fb:fd:e0:02:d6:af:68:3f:22:b2:f5:ef:bb:
d8:d5:67:c6:fa:1e:f0:24:01:a5:46:e3:6e:be:76:
7a:60:75:fe:23:c7:4e:ea:ce:8e:62:6b:bc:5d:49:
d7:32:ff:35:10:b4:e3:d9:3e:75:5c:68:6b:93:e6:
d7:a3:f1:5a:27:65:60:a8:92:d0:14:6e:b6:3b:f5:
d1:6a:06:b4:e2:e1:4a:55:63:49:1d:aa:b5:85:e5:
cb:c4:b8:a5:78:a0:ba:4a:5d:43:b8:8a:1f:eb:5e:
44:0d:64:99:bf:92:f7:35:be:92:ba:f9:5f:0e:36:
0a:e8:21:81:f3:17:4f:f3:1c:60:46:a3:33:dd:31:
9f:d7:2a:67:90:b7:50:1a:67:d9:0e:1e:97:f1:8e:
1f:67:3d:57:6f:83:4e:3e:98:d1:86:0b:56:8b:8e:
cd:b2:fd:53:aa:29:5b:c4:d3:1e:f1:cd:f7:19:64:
d2:10:f6:9f:a0:2f:31:c3:03:20:f6:19:9a:45:49:
6e:ac:30:63:d5:4b:69:8c:4f:67:45:4d:8a:d6:44:
1d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:53:BD:4D:8A:2E:C5:52:7C:DA:65:43:4F:E7:E7:32:CE:22:04:39
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:89:9e:5d:4b:1d:9b:f0:e3:31:be:b0:24:39:5d:64:44:97:
76:ff:82:91:8d:fc:85:7d:2e:de:62:e8:73:d9:60:f0:0b:c9:
20:7a:a3:f6:76:7e:a8:7a:d1:54:3b:20:18:c4:76:38:14:cf:
55:25:35:8f:70:2b:0a:44:3e:5e:18:1b:47:86:d9:91:80:05:
1f:ae:88:52:15:a1:ef:da:f7:7e:e6:24:d8:50:89:73:c8:44:
ba:89:b8:a9:ec:81:9b:ed:4e:8f:1b:af:c6:2c:23:9a:8a:be:
71:73:7a:b4:7e:b8:7c:c1:2d:46:80:ca:e9:dc:9e:26:68:3b:
b3:7b:7b:35:c7:12:f3:53:7e:dc:2b:84:38:8d:db:bb:da:a4:
d5:aa:83:4b:1c:67:28:3f:ed:da:63:75:7c:56:0e:a3:ba:20:
89:cd:3e:1b:7a:9b:b7:85:1f:9b:43:08:fe:2d:a4:64:84:e2:
84:72:3c:6f:85:a6:34:5a:65:06:e9:df:69:7a:8e:62:29:4e:
14:8f:9b:d4:77:65:f5:0c:ea:63:11:e4:fc:af:61:23:fe:54:
fa:3a:a6:7b:35:6d:07:7e:0f:94:ba:4c:35:91:7e:4f:67:ad:
aa:0a:fa:04:74:82:32:e4:be:38:35:c8:e8:44:4e:02:64:31:
18:49:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:14 2026 by rpki-client