Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier: JMGOi/oTX5yAKyQoIijefUwAqBP6ry0wrGI/Y+zNgTk=
Subject key identifier: B2:30:17:68:3E:CF:2C:2E:E1:C6:24:13:A7:DB:7E:E5:15:81:54:50
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial: 019D9AE3791BA6E5B36F3E8E5333966BC92D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number: 0E1A
Signing time: Fri 17 Apr 2026 10:01:32 +0000
Manifest this update: Fri 17 Apr 2026 10:01:32 +0000
Manifest next update: Sat 18 Apr 2026 10:01:32 +0000
Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: hI0JhDXwsw/9yTEOltQWBbhmmc3UWzfI01LHJXK+6Rk=)
2: haiqd0uROE9igzZ6U-8DLmT0_wo.roa (hash: zy3b1gRK2HZuT5n0a04wvFSWWQ7+eD23DEYn7FkuZuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:79:1b:a6:e5:b3:6f:3e:8e:53:33:96:6b:c9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Validity
Not Before: Apr 17 10:01:32 2026 GMT
Not After : Apr 18 10:01:32 2026 GMT
Subject: CN=b23017683ecf2c2ee1c62413a7db7ee515815450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:d3:95:c5:99:9d:16:10:60:ce:c7:fc:66:
b1:7d:8e:4f:5e:b2:5a:7b:4d:ad:fa:99:08:5d:40:
c9:f3:97:fe:f2:67:86:c9:bf:2c:7f:c1:bd:0b:5f:
75:db:a9:90:71:8a:67:ad:e3:7f:31:4c:92:f3:fd:
fd:84:88:5a:b5:ec:69:70:ee:bc:39:8a:85:41:ee:
6d:f4:5a:59:d5:96:3a:53:d4:f5:36:e9:b1:af:14:
98:53:1b:99:bf:8c:b6:42:46:7b:4f:02:b7:84:e1:
07:0f:e4:92:db:e2:68:3f:0f:c8:6f:38:2d:48:07:
0e:9d:eb:5f:04:e0:d4:e5:ce:ff:c5:a1:92:b0:d8:
79:c0:bd:9b:7c:c5:82:a1:d5:b4:c1:d9:84:34:6f:
71:45:0f:98:8a:bb:a6:e2:25:55:83:e8:b3:6b:d4:
a8:b2:85:28:f7:f7:29:6d:a8:1f:e9:31:c9:d7:e0:
9d:f1:92:2b:96:7f:d2:c6:aa:c1:6a:e1:a9:31:07:
8c:3d:da:a0:a8:25:52:8c:be:34:7d:a8:fa:90:d4:
39:60:8a:17:4f:22:87:1b:25:c1:b9:35:57:d5:75:
df:8b:d8:33:d3:d0:a9:bc:37:6f:34:49:8b:48:65:
51:db:2e:3e:95:62:3d:8b:b2:90:81:8b:f7:98:53:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:30:17:68:3E:CF:2C:2E:E1:C6:24:13:A7:DB:7E:E5:15:81:54:50
X509v3 Authority Key Identifier:
keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:13:95:4a:30:d2:81:39:15:d2:e2:93:0e:8b:5e:60:02:e4:
cc:66:98:0e:61:e8:9d:4b:aa:12:b4:b4:03:ce:c9:0a:ec:e6:
f6:da:d5:21:6a:23:98:22:06:f4:02:2f:45:c6:0b:65:3a:b8:
b4:12:8d:82:0f:28:c3:50:66:9a:77:a1:f5:1e:09:dd:90:1d:
ae:9b:1a:1f:85:13:d7:20:3e:92:73:cc:5a:e5:db:dd:43:ff:
a5:a9:b7:4f:d9:62:04:70:89:68:db:5d:6a:68:74:03:1e:9f:
fe:00:1a:4a:49:a0:83:66:c4:13:61:bd:7f:c3:99:b8:62:84:
00:f4:42:a2:ec:7f:ae:2a:1d:7f:f5:25:bd:79:94:10:ee:a0:
9d:47:69:39:9a:6b:b8:29:e0:ab:38:89:79:36:bb:37:1f:02:
76:38:f4:8a:eb:12:41:b8:40:41:df:cf:3a:ec:f1:47:42:bd:
db:d2:0f:62:e2:55:c6:b7:ed:2b:6f:76:9a:d0:16:55:c8:fa:
3f:ce:36:e9:c5:11:89:9e:9a:71:df:30:fa:84:1a:0e:a2:22:
89:2f:62:f9:86:d3:9b:9a:13:47:af:c1:89:7f:a7:04:88:a0:
6a:37:1b:2f:06:fc:de:93:a9:6b:61:97:7d:f6:51:0b:3a:aa:
48:3f:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:14 2026 by rpki-client