Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: QJUEIe4RXVxhP0vsTFzeCVh2ov30a7zIRznneO5tm4g=
Subject key identifier: 7F:02:FC:B7:D7:32:2D:F8:A0:60:20:75:72:2D:6B:BB:38:29:E6:B5
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 019D2704D255B4BBAE77E4BB480607293EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 06DD
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: 8gR+z1FPjTOwv8fEnGf+3EOeYQAqE6uSC2xSwFE9o2s=)
2: cJoSZCFXqDtUSGkR6NyIWGdWJ5c.roa (hash: +4bfJl1WilU4FwTMIun4/VtCPiBZ9GR88vkRCY6T3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d2:55:b4:bb:ae:77:e4:bb:48:06:07:29:3e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=7f02fcb7d7322df8a0602075722d6bbb3829e6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:b3:97:f8:46:14:5d:75:eb:e8:9b:ba:29:
92:9e:8d:be:ea:3c:7f:43:ec:3a:ed:f7:be:55:9d:
26:d4:05:37:ea:7a:a5:4b:29:68:ba:a2:0b:b5:3f:
28:a6:51:c5:bf:f4:cd:fe:60:74:a2:dc:34:b7:10:
d8:43:72:4d:34:d1:fa:6c:38:0b:6b:80:40:bd:a8:
17:64:ae:1d:5f:55:27:bc:89:c6:0d:63:9f:72:08:
15:51:b4:bd:db:07:26:b2:73:5a:b9:3a:ae:4b:a9:
f9:6a:76:7f:07:81:aa:46:26:9b:f5:bc:27:22:ca:
d8:0f:c8:52:e7:16:ea:f3:d2:a2:b7:c4:7a:04:88:
fb:33:c5:9d:ef:40:9f:a1:e6:f3:96:bc:1a:81:f2:
d6:f0:1f:49:e1:df:98:c9:1e:f0:a3:b6:74:bc:6f:
cf:18:2e:58:90:75:29:df:98:ae:4e:dc:07:27:02:
9d:39:76:ca:03:3d:ec:1a:71:3b:84:a6:58:db:09:
74:b8:55:74:0d:82:a6:d6:cd:a9:1f:43:eb:9a:6f:
aa:f1:37:41:c0:9c:fe:59:a3:91:76:2c:92:0a:a9:
e8:0f:b2:cc:1f:8e:7d:fd:f9:77:16:2f:89:76:af:
98:d8:3b:0f:83:90:e5:1e:b9:4d:5a:ee:61:97:1d:
59:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:02:FC:B7:D7:32:2D:F8:A0:60:20:75:72:2D:6B:BB:38:29:E6:B5
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:32:d9:68:b3:9a:b4:cf:c0:90:cc:3d:8f:6b:bd:ee:47:08:
1a:01:fc:e0:19:77:30:42:79:e0:b8:c7:02:99:6c:f4:93:bb:
fd:ec:15:d4:6d:44:04:4d:5d:d7:fb:a4:e1:85:c8:62:67:88:
c7:b8:73:a9:9b:16:9d:b5:32:f7:3c:f2:68:0d:a2:41:55:86:
5a:f3:18:72:b0:bc:a4:d8:b7:24:5c:eb:df:e5:9b:91:e6:95:
25:ea:e4:32:55:3f:b6:18:f6:4c:57:52:a8:c7:0e:5a:d4:19:
a8:ea:05:66:f0:58:48:a8:49:75:8e:47:59:33:5d:bb:d0:db:
ce:c9:73:9b:09:9c:c6:0b:81:ae:29:00:02:61:e4:a7:b4:76:
bb:bc:23:ca:d7:92:fa:54:e7:97:ec:7d:c2:f4:a7:74:10:ab:
16:cd:2c:24:70:91:83:b0:f5:ac:61:93:32:c8:21:64:43:d7:
ae:dc:1f:ba:fc:03:da:1c:9b:24:86:b6:26:a2:68:f8:32:dd:
93:a9:f0:fe:54:67:a3:3e:d1:9b:aa:b0:58:1f:2e:ad:30:6d:
19:a4:59:6b:28:71:a9:56:3e:0b:4f:21:e8:ba:d0:15:f2:71:
db:43:38:39:f9:cd:8d:0d:28:9e:0f:80:e2:75:48:75:b0:6b:
40:9e:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:17 2026 by rpki-client