Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: NWKxizb6XuCwSIQrRPwgls/cqRIFL9sGpsXiwPzQX3o=
Subject key identifier: EC:8A:E6:51:95:5D:FF:BC:D4:9C:1C:AB:A9:88:B0:57:2E:B7:2F:03
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019D273AF3393E63A53AAA00A1A3824D0933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0F7A
Signing time: Wed 25 Mar 2026 23:01:07 +0000
Manifest this update: Wed 25 Mar 2026 23:01:07 +0000
Manifest next update: Thu 26 Mar 2026 23:01:07 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: cNsVpo/WemV+CO5wUKCrWEkdI0sANqoBwAhQEb+/ITA=)
2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f3:39:3e:63:a5:3a:aa:00:a1:a3:82:4d:09:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Mar 25 23:01:07 2026 GMT
Not After : Mar 26 23:01:07 2026 GMT
Subject: CN=ec8ae651955dffbcd49c1caba988b0572eb72f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:cd:55:44:88:17:61:19:c4:97:4c:04:4c:
4c:c8:32:c0:22:2d:8c:8f:08:6a:56:e6:95:06:14:
a9:a0:e9:1c:62:07:92:12:fd:21:3c:12:fd:d8:8e:
01:76:04:92:a6:2b:1f:e9:1d:f4:70:00:7d:df:36:
84:49:c3:3e:18:6e:81:9b:fc:f3:c9:d1:80:60:52:
f5:89:50:0a:45:e7:08:61:63:0a:40:96:b3:22:5b:
5f:d2:f1:4d:93:44:95:0e:bd:d5:7b:7c:24:cb:bb:
86:cb:df:f1:69:bd:62:e0:e3:16:a1:db:c8:99:b9:
e3:27:0d:1c:39:e3:96:d6:62:8c:35:72:86:d9:a9:
18:c4:7f:7e:98:c4:41:16:69:04:e7:be:5f:db:38:
47:e1:48:e9:d7:3b:8f:9e:a1:bc:98:3b:df:cf:82:
0a:bb:fc:b5:e7:67:76:56:6e:fd:12:61:85:df:82:
ae:1d:fe:11:1f:a4:6f:24:c2:89:6d:7d:3a:05:c6:
9b:f3:d2:a8:42:a2:80:e4:17:14:dc:be:42:f2:00:
a1:e6:71:b6:0e:80:77:b1:ec:17:d7:86:2c:1e:64:
ee:c6:28:7b:2e:c7:db:22:d2:ab:d8:53:ff:0c:da:
18:43:e9:86:99:38:7c:54:0e:b9:9f:c8:9d:c6:34:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8A:E6:51:95:5D:FF:BC:D4:9C:1C:AB:A9:88:B0:57:2E:B7:2F:03
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:26:f0:19:93:1e:4d:f5:e7:c5:26:d7:93:fe:3e:f1:e9:07:
eb:ec:ec:4b:9d:f0:8a:55:6d:d0:50:6a:be:7a:eb:ba:6f:4d:
69:0e:72:d8:17:80:70:22:9f:06:eb:1a:b8:0c:c1:82:81:01:
92:8b:19:84:ec:7a:9a:f7:f9:65:89:40:9b:7f:17:10:74:ca:
90:71:b8:06:93:2f:3a:f7:08:a3:0c:7f:c9:e5:c0:13:d2:ba:
39:1d:01:0e:18:80:89:37:52:d6:52:6b:b8:70:6c:1f:cc:de:
62:06:87:ca:f0:85:69:a4:ba:fc:88:f0:ca:cb:ad:1e:7f:14:
75:7a:8e:82:24:60:f6:50:c4:37:21:fa:b9:ad:8a:38:32:8b:
b9:03:6a:2e:4f:a5:39:d0:7c:8e:21:c3:36:2f:7d:33:21:df:
91:84:9b:df:14:1f:3e:eb:1a:cf:e2:63:98:9a:9f:49:65:16:
75:ec:c9:09:2a:12:48:99:1e:94:c5:ee:38:b0:22:8b:09:25:
d7:9f:83:7a:2b:a0:9a:de:ea:db:fb:74:50:7b:c0:5c:99:c9:
bc:59:a4:48:89:52:00:12:e1:1e:6f:c9:29:12:57:32:68:84:
9f:e5:fc:98:e3:46:98:4a:5a:a5:30:a7:ff:b7:36:e3:69:6c:
d8:61:d8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:09 2026 by rpki-client