Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier: C9TvYPtxVLEX2otp3oydJ60FEv9gnVSRIwYfQWvVhFM=
Subject key identifier: C2:C3:BD:05:16:D6:BB:7C:AC:32:AE:E5:64:F6:B5:B8:73:32:C4:83
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial: 019CAD59D3EAF545FB194D2B3BAEBDA64B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number: 0D9F
Signing time: Mon 02 Mar 2026 07:01:11 +0000
Manifest this update: Mon 02 Mar 2026 07:01:11 +0000
Manifest next update: Tue 03 Mar 2026 07:01:11 +0000
Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: CFryMft4DaA6P3c6Z2Gt252PSvF2wU6HrYmPLSzexSg=)
2: haiqd0uROE9igzZ6U-8DLmT0_wo.roa (hash: zy3b1gRK2HZuT5n0a04wvFSWWQ7+eD23DEYn7FkuZuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d3:ea:f5:45:fb:19:4d:2b:3b:ae:bd:a6:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Validity
Not Before: Mar 2 07:01:11 2026 GMT
Not After : Mar 3 07:01:11 2026 GMT
Subject: CN=c2c3bd0516d6bb7cac32aee564f6b5b87332c483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1d:b4:bf:40:b0:09:f7:3d:f1:cc:24:10:90:
18:80:07:7d:4b:04:3a:f2:61:bb:cc:cf:df:69:0a:
78:b9:d9:e7:f8:21:23:4a:41:00:a6:5e:93:05:7f:
38:ed:cd:05:9a:d5:d1:d1:0d:7d:63:5f:6f:48:11:
ef:91:10:70:a6:bd:e0:cf:8c:85:13:1c:f5:22:ed:
6f:d8:12:3e:ca:14:4d:97:2d:93:93:93:d8:2c:f4:
bc:ee:5d:ee:5c:6e:a7:c7:1e:72:3c:0f:88:a2:9a:
c7:f5:88:2c:9d:50:64:51:de:f3:37:32:61:3d:b1:
74:16:ca:e9:ce:59:58:ea:72:b8:6c:4f:7d:f1:08:
26:8f:4f:17:1a:eb:1f:8f:d7:94:a6:81:87:dd:d4:
a5:9c:1b:1f:a6:e2:3e:5e:d7:68:44:c1:a9:d2:c5:
0d:3d:51:44:00:e4:25:64:e7:27:31:95:4e:57:9f:
50:cd:b6:98:26:53:db:38:69:b0:71:f7:90:13:5f:
83:df:7a:c4:c3:48:d9:3b:13:7c:fe:9b:6d:17:fa:
61:73:17:de:3c:3f:fa:a0:69:75:c6:55:ef:f4:2d:
88:56:ae:f2:f0:e7:96:86:51:93:c7:f3:0c:d6:96:
29:c4:31:7a:70:2f:9b:67:27:85:ac:e6:94:e6:7d:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C3:BD:05:16:D6:BB:7C:AC:32:AE:E5:64:F6:B5:B8:73:32:C4:83
X509v3 Authority Key Identifier:
keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e3:1e:c0:8d:ff:3f:14:63:75:d6:fe:3b:8c:20:39:63:c9:
34:78:88:d3:90:ad:98:1a:56:e0:be:69:7d:fd:85:c8:96:eb:
26:69:20:de:60:50:cd:23:62:73:33:9c:38:48:c3:16:93:b2:
53:0b:d2:14:3a:52:42:a0:c2:ea:5c:64:e0:a2:3e:45:bf:98:
71:d4:fa:1c:d0:04:0c:91:83:cc:51:5c:09:fc:b1:e0:cf:9a:
76:1c:76:bf:52:0d:d8:dd:1d:52:0c:c2:2a:ab:9c:01:e9:ed:
73:a9:f7:0b:04:06:fd:27:30:4d:26:1e:ce:92:d0:f1:99:83:
8c:f4:d1:b5:3d:31:be:38:87:2b:99:d6:e0:96:ea:d6:6c:dc:
ce:3e:8f:a7:4a:c1:ad:c1:93:1b:c8:a3:e3:1d:66:91:26:ec:
79:13:c2:47:c4:2a:10:a8:dc:6b:c5:6b:c2:53:06:22:c0:02:
ed:34:d1:0b:a1:f9:17:85:37:29:67:cc:2c:8e:f4:ab:65:40:
63:2f:3d:6e:9f:54:c9:fe:b6:56:c3:9d:00:40:6c:1b:24:1b:
7c:39:39:ec:e6:3d:92:73:55:33:ed:f6:f5:fb:de:1b:96:08:
b0:8f:39:22:ba:6d:60:f3:45:55:8a:66:f0:d2:8a:56:e1:11:
d2:cb:4b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:42 2026 by rpki-client