Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
File: O-_lCkD7FzJUHoqXRQq13ndHcdg.mft (raw, json)
Hash identifier: cBSAg0C6saQPjXW0qgFEuvgt64f3yRdmieW8nVuLsBo=
Subject key identifier: 81:C0:1C:6C:D7:D3:4A:84:38:6B:AA:0F:D2:1A:AE:00:DA:ED:A3:96
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 019CAA590C1488E39511EA24517D371983FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
Manifest number: 05D7
Signing time: Sun 01 Mar 2026 17:01:28 +0000
Manifest this update: Sun 01 Mar 2026 17:01:28 +0000
Manifest next update: Mon 02 Mar 2026 17:01:28 +0000
Files and hashes: 1: 1UG_i4X68HiPHviRW1z0p_TSsXk.roa (hash: Rxi5VpSkCVYP7zpaawxiqgEVbztptEcbkSS6G+faZaE=)
2: 921A09PidqQ_DPqribEcJ4Ns9ic.roa (hash: 1p6ZvcbQbV5L2uaDpeFuyGxdzNA8guzksazYOvFT/c0=)
3: O-_lCkD7FzJUHoqXRQq13ndHcdg.crl (hash: tmd1XMczGtOleb1ujHJlNpj7PWKh6NQ4E80G0CcdFk8=)
4: QakAbn2qL6zC8DUBjSIVZLBbpXc.roa (hash: 6xvVEYi0a4GqVQ6WMVJR2REYvzQK/KHG+c6HRFsJwKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:0c:14:88:e3:95:11:ea:24:51:7d:37:19:83:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Mar 1 17:01:28 2026 GMT
Not After : Mar 2 17:01:28 2026 GMT
Subject: CN=81c01c6cd7d34a84386baa0fd21aae00daeda396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:45:8a:5e:33:a2:1d:2d:be:82:a5:2d:b1:
b9:4b:5c:0a:78:14:88:d1:c6:fa:3a:3b:f8:89:79:
86:e7:4f:49:ad:46:4e:ec:6d:da:1c:9a:80:bb:81:
c8:c5:ee:10:ca:cc:ac:75:02:25:51:36:cb:35:55:
d6:71:54:c8:5d:87:63:f2:c1:f4:b0:cd:7c:d8:5a:
d7:a6:6c:7e:46:7f:c5:4d:49:96:a4:5f:95:2b:b7:
07:ec:91:8a:e2:e3:de:bf:94:08:29:eb:2a:41:81:
72:be:c5:02:7f:fd:1f:88:f9:a1:2a:ce:1d:2c:46:
d4:a6:bc:55:bb:86:68:a1:9d:c9:a0:a7:26:62:37:
04:bc:30:2d:44:b3:78:37:ec:b0:38:69:dc:fb:89:
25:db:d7:45:5b:4f:a4:cd:4d:99:70:41:cb:fd:a6:
ac:b9:3b:70:82:96:5d:a1:88:40:7b:92:bd:92:0e:
f0:fd:34:f9:ad:12:34:16:a4:bf:80:a0:88:ba:80:
3e:3e:13:fb:97:4a:cf:8b:f3:ea:2d:38:86:c5:c5:
62:75:05:86:a4:0b:96:a0:c9:b0:02:9e:32:5e:9c:
ad:c7:ed:cf:c6:72:c8:04:68:8d:a4:9e:bf:48:bb:
ab:35:fb:43:32:e4:8c:81:5c:f3:ac:ef:65:54:bb:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C0:1C:6C:D7:D3:4A:84:38:6B:AA:0F:D2:1A:AE:00:DA:ED:A3:96
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:8d:15:18:9d:bd:00:bb:d3:31:b3:53:e0:a1:15:a8:0d:03:
6f:71:20:71:9e:18:c1:a7:73:b8:40:7e:ae:f4:8b:af:64:49:
77:68:59:75:e9:aa:72:02:a7:c4:72:f0:23:e0:41:24:2b:24:
2a:d8:a0:d8:04:8f:e7:ab:e0:4a:1a:22:96:fd:d8:2d:11:65:
e0:90:a3:fe:d0:3b:73:d5:c3:0c:fd:4d:3f:48:64:ef:db:ee:
31:3b:c3:90:d9:b0:9d:bd:60:75:da:73:12:67:95:39:48:45:
09:b0:78:c7:6c:b3:5a:49:fd:e5:a6:6b:d2:78:d4:9a:f9:26:
bc:3f:4c:75:0d:e6:fe:67:1e:97:99:e7:c8:73:25:b1:1f:f1:
75:5b:b5:e3:1d:b5:7e:6e:fd:95:58:04:de:c1:d9:4d:62:5c:
82:d8:01:6b:03:f4:1e:5c:df:12:9f:3b:05:10:f8:c6:95:50:
ea:01:8f:0e:ab:5f:fb:43:09:c5:d5:cb:53:9f:f5:d8:b9:27:
56:03:31:c7:6a:97:df:ed:8c:f2:23:c7:17:de:00:ac:79:68:
4a:f8:28:01:ea:da:d3:ab:37:64:c9:3a:5c:01:06:e8:9c:2d:
b8:cb:7c:58:06:d6:7c:c4:84:a1:4f:62:d1:b4:71:ab:e8:2d:
08:a3:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:56 2026 by rpki-client