Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: 6viXYGdmFI/VT00gPGSTVAi6zujySTsNdBxENSqKfhQ=
Subject key identifier: 69:C4:55:E3:9F:BD:23:2C:F5:3D:B8:17:93:B0:6D:B4:A5:B1:1B:EB
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019D29974F4188095934A50219F8375A97A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:15 +0000
Manifest this update: Thu 26 Mar 2026 10:01:15 +0000
Manifest next update: Fri 27 Mar 2026 10:01:15 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: G/LMiurxASUg3aeXUBXA7TPDFMpOwVfapSIWF+7dJp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:4f:41:88:09:59:34:a5:02:19:f8:37:5a:97:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Mar 26 10:01:15 2026 GMT
Not After : Mar 27 10:01:15 2026 GMT
Subject: CN=69c455e39fbd232cf53db81793b06db4a5b11beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:b8:c7:d7:7b:7e:7e:6e:16:e8:db:5b:b8:
dc:a0:4b:ab:15:d3:ba:cc:f2:f2:27:c4:bb:2d:0e:
fc:ce:6e:3e:2d:0c:27:74:c4:2c:9a:ee:b2:0b:96:
cc:5d:bd:76:e0:84:d2:75:c9:38:85:dd:a8:81:6f:
d9:68:46:97:e8:f7:5c:6b:ad:e3:bb:e0:09:59:2b:
47:fd:12:45:9b:98:88:52:89:38:28:cc:a9:a7:79:
56:cd:33:82:b6:1f:54:93:65:ad:21:41:e3:28:16:
66:78:0c:c4:76:f1:5d:65:89:c6:7b:b1:a4:f4:3a:
db:d5:62:38:24:d4:e9:72:43:3b:76:e0:22:54:1e:
24:cb:32:73:a0:dd:30:ee:bc:07:48:c1:48:a8:62:
63:3a:e2:1c:54:d2:4f:14:ce:68:05:91:9c:cd:c5:
eb:c5:43:af:e6:ef:ca:2b:f9:8a:3d:26:e6:5e:2d:
25:ed:3d:3d:7a:3e:39:78:f2:81:c9:2b:ff:bb:21:
b0:e5:5c:88:f1:56:34:cb:5d:9d:17:1c:29:bd:93:
0e:58:01:80:57:60:9a:35:1c:49:79:29:e1:05:bc:
bc:1a:2a:05:e3:f4:93:9c:cf:0d:0a:98:8f:24:d5:
e2:03:a5:66:82:0a:e0:45:33:30:19:5c:f4:72:ce:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C4:55:E3:9F:BD:23:2C:F5:3D:B8:17:93:B0:6D:B4:A5:B1:1B:EB
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e1:7f:20:80:b6:3a:3d:27:ec:bc:c3:b7:63:7f:f0:8e:6d:
9b:a1:a4:14:24:3c:a3:bb:32:14:91:29:ff:d0:80:37:7b:b1:
cd:e0:fe:e9:ab:6b:0a:7d:97:84:b7:69:20:c2:d3:13:00:fa:
79:de:a8:89:c6:14:2f:de:f6:0b:1a:9f:93:4d:6b:ea:2e:5a:
c4:78:b5:1e:d4:35:1a:76:bd:78:e8:7a:d7:5f:9a:7d:a3:e6:
40:5e:35:69:c6:68:72:86:88:0b:2b:d6:23:ba:cd:01:f2:8b:
5e:35:6c:0c:11:3e:5c:57:87:4c:ae:05:9f:66:ad:32:f3:b6:
a3:32:6e:57:e7:a6:8e:24:04:b8:cb:7e:52:0b:8a:62:89:9a:
b7:cb:84:3b:89:8a:5a:f9:3a:51:3a:fc:f2:c0:fb:11:af:d9:
df:5b:1d:8d:f2:65:3f:2d:fa:67:ab:19:69:11:2f:75:e7:ea:
39:7a:b8:1b:ab:65:b5:7a:09:6e:64:57:3e:14:bf:5c:23:4f:
f0:6c:ea:b5:61:93:36:5c:bf:0e:4a:38:bb:cd:2c:46:dc:71:
30:41:8a:ab:d2:48:e6:17:f8:d5:ef:ed:42:78:42:29:aa:51:
06:a2:bf:bc:e4:6c:0a:2b:67:49:a0:25:6b:b3:76:05:a6:56:
42:a8:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:57:55 2026 by rpki-client