Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
File: o2n7GRvuUc3HQUppYxl_hrvzE6s.mft (raw, json)
Hash identifier: Y5sw9OSqcgTpI5QDWJhO+VOG9YUBOECQmAHY+5A2UY8=
Subject key identifier: 82:06:C1:F9:E7:96:7F:94:49:AF:CA:00:C6:5D:C4:B6:D5:D3:7A:2E
Authority key identifier: A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
Certificate issuer: /CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Certificate serial: 019D2816629F8ADFADC7A0FAEDB7FFB67CC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
Manifest number: 12E8
Signing time: Thu 26 Mar 2026 03:00:48 +0000
Manifest this update: Thu 26 Mar 2026 03:00:48 +0000
Manifest next update: Fri 27 Mar 2026 03:00:48 +0000
Files and hashes: 1: o2n7GRvuUc3HQUppYxl_hrvzE6s.crl (hash: BuSaHSs1Th3vf7Ct3yjOwsu8qnsig8PuLngV3qjjyPM=)
2: u-PjOq1WjK6PsqFBvXy59id7R_I.roa (hash: Pz8fOepb3H13pqdKO3L1FSkff2yUOqZGUk6QeB6m10U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:62:9f:8a:df:ad:c7:a0:fa:ed:b7:ff:b6:7c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369fb191bee51cdc7414a6963197f86bbf313ab
Validity
Not Before: Mar 26 03:00:48 2026 GMT
Not After : Mar 27 03:00:48 2026 GMT
Subject: CN=8206c1f9e7967f9449afca00c65dc4b6d5d37a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:90:d3:62:0f:0e:fc:b1:dc:8a:9e:b0:df:
7d:08:00:9b:fe:a4:88:1d:b4:79:d1:5b:ce:60:81:
bc:28:a0:6f:ea:eb:b4:66:fe:2b:e7:4f:78:b2:e3:
fd:09:96:f6:87:38:3f:8e:10:a0:d9:e9:4b:a4:9f:
4b:34:e0:c6:e8:46:3e:f5:ef:1e:be:65:ad:83:b0:
c6:80:06:59:bb:47:37:a3:71:52:ac:c8:ec:9f:5a:
fd:c2:25:46:02:93:72:f7:8e:21:68:5a:31:b9:ac:
4c:12:40:be:fc:b4:07:8e:9a:77:6b:3e:dc:ba:b3:
e0:1e:66:d2:f8:75:7f:ae:b9:9d:86:19:a3:26:ce:
55:e0:b3:49:6a:09:2f:e2:fe:e0:1e:93:a9:2a:57:
ac:fc:d0:75:03:99:f5:8f:96:4f:f5:ea:78:c4:6c:
0c:20:38:a5:05:c7:7b:a6:ff:c7:ae:f5:b3:34:e3:
ac:94:2a:8c:e3:d4:09:a8:df:66:b2:ea:ee:25:15:
99:5f:79:bd:5c:3e:ad:a9:e8:af:0d:02:c9:8a:45:
c5:bb:89:78:0c:bf:d4:17:a1:d3:08:da:92:6f:d8:
2f:80:ab:7e:52:4f:43:f7:80:8b:43:61:da:78:02:
c9:b8:75:a3:03:f3:09:54:a5:4b:7d:b7:6c:c6:74:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:06:C1:F9:E7:96:7F:94:49:AF:CA:00:C6:5D:C4:B6:D5:D3:7A:2E
X509v3 Authority Key Identifier:
keyid:A3:69:FB:19:1B:EE:51:CD:C7:41:4A:69:63:19:7F:86:BB:F3:13:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n7GRvuUc3HQUppYxl_hrvzE6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/20da60-c719-4be1-8e4f-e18052f381bb/1/o2n7GRvuUc3HQUppYxl_hrvzE6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:8a:33:a5:78:a8:75:d6:d8:97:4f:bc:4f:54:4f:1b:d2:6a:
24:56:c2:09:95:50:1d:29:26:8a:44:a9:0f:fb:87:e2:3e:33:
de:85:40:c1:2b:27:f3:a2:fa:09:55:75:83:4c:98:78:6f:db:
11:ef:a5:3c:70:48:e5:5a:80:c3:49:69:e3:ae:92:d9:f1:ac:
c2:99:75:be:78:9a:7a:0c:45:41:0a:84:95:84:8a:f1:c4:d8:
31:96:e4:57:72:9f:3b:a5:0b:e9:9b:a6:66:5f:53:a4:5f:c7:
c9:3c:c3:74:0f:64:fc:fa:15:55:0b:79:95:ac:b8:a0:82:0e:
d9:2f:42:aa:54:71:69:87:0d:a5:b0:ab:b1:76:bd:0a:d1:3a:
72:d6:52:08:b9:72:4c:32:58:a5:13:db:ee:dc:0e:a4:d4:32:
8e:09:6b:d0:da:21:e7:71:ab:d6:39:0e:74:c2:7f:ea:e7:48:
41:52:73:31:cb:9b:ca:00:13:79:54:7d:47:53:18:07:6c:ad:
e2:cb:e8:00:41:25:77:62:5b:3f:7d:95:51:4c:e2:ff:27:02:
48:ac:44:e9:cb:32:57:da:6a:f8:12:94:fc:29:17:e2:43:58:
5e:04:8d:04:68:59:b8:28:89:92:15:a0:2b:57:7d:77:0b:31:
c5:cb:65:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:50:41 2026 by rpki-client