Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
File: O95jhoTGRf7dYA7TxQzfMQsRbT4.mft (raw, json)
Hash identifier: DBKDrUlecBP4PKxdzE9hg5lfuJBWz7peWt4VPIXYzfY=
Subject key identifier: 6F:85:D5:0A:53:C4:7C:6F:F6:EA:2B:32:F1:47:53:D5:BA:D6:82:0C
Authority key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
Certificate issuer: /CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Certificate serial: 019CAA581C1DDEB8B55DC4F7ED37683DD4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
Manifest number: 1363
Signing time: Sun 01 Mar 2026 17:00:26 +0000
Manifest this update: Sun 01 Mar 2026 17:00:26 +0000
Manifest next update: Mon 02 Mar 2026 17:00:26 +0000
Files and hashes: 1: O95jhoTGRf7dYA7TxQzfMQsRbT4.crl (hash: dk8g5w6VvwhEHlbMbOFC2les3GHzZlfb/cDEQCM/WQk=)
2: Z7DXzXjQ1iWsLhA7bX6hUr5-ljA.roa (hash: 3kmZN3nQ/QKEMXaSVLOkM6zDUNMkeL4tJG0CWoaKc6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1c:1d:de:b8:b5:5d:c4:f7:ed:37:68:3d:d4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Validity
Not Before: Mar 1 17:00:26 2026 GMT
Not After : Mar 2 17:00:26 2026 GMT
Subject: CN=6f85d50a53c47c6ff6ea2b32f14753d5bad6820c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:6b:2b:8c:a1:47:42:30:ad:09:fe:e1:79:
94:f0:58:41:a3:6c:88:7f:4a:1f:73:4c:25:9c:fb:
8e:36:31:0e:ce:63:72:24:f3:26:41:8b:1c:e0:a9:
e9:b1:5e:28:bf:7d:b2:cb:3b:75:b0:a9:27:cc:0f:
90:8d:ad:e6:ae:9a:4b:df:ee:86:9e:79:78:74:2c:
fa:e2:96:d9:31:da:0d:35:97:98:53:e3:0e:de:40:
9b:90:a9:70:98:82:e4:87:7c:c3:48:b2:9e:f7:f1:
62:28:a4:59:a3:61:37:21:ac:e5:e0:a5:b5:d6:e5:
4b:47:2a:09:66:b4:46:fc:a1:7f:9d:25:72:09:87:
d9:af:64:2e:6b:55:b2:1f:ba:0c:1a:58:72:97:a6:
c5:c0:37:80:2a:03:0c:f3:18:1b:83:1e:60:e4:8e:
50:3e:5c:78:4f:1e:58:99:2d:80:65:bc:04:f0:a4:
46:88:f5:31:1c:1c:ac:d6:86:41:f5:ba:d7:be:00:
8f:1b:32:79:1a:3e:94:fd:d5:bc:08:32:55:40:8c:
e6:3d:99:f6:6f:8c:57:63:da:52:a0:8e:12:7e:56:
09:0a:06:1a:ea:8e:50:6f:3c:48:b4:67:a0:31:06:
7a:27:1a:25:bb:e8:2a:0d:ba:7b:13:1d:57:14:85:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:D5:0A:53:C4:7C:6F:F6:EA:2B:32:F1:47:53:D5:BA:D6:82:0C
X509v3 Authority Key Identifier:
keyid:3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6a:47:d3:22:ca:e7:c2:8e:65:f9:64:58:41:90:c3:bb:bd:
7b:dd:b8:9f:49:b1:d0:74:78:f1:e6:b2:14:b4:96:ba:8a:45:
69:7c:e4:29:6e:ed:5f:28:ed:af:62:6e:39:06:d9:f5:29:e8:
a9:eb:9c:4c:0f:82:f0:9c:37:61:01:82:82:f6:47:b1:15:15:
99:a0:6d:f1:d9:a5:27:b2:68:17:05:27:10:1b:c7:98:cf:a0:
34:45:0e:d7:8b:04:af:af:a4:54:ab:84:a2:f6:2d:28:66:5f:
ba:f3:d0:47:52:c4:5f:a0:b2:e5:78:85:a7:a4:5c:c2:e1:d5:
96:74:ea:5e:34:f7:94:13:f8:39:16:46:f3:fe:3f:31:9a:0d:
5c:e6:31:4e:27:34:a9:e8:9a:70:65:a2:c4:1c:bb:a7:2f:1c:
5a:87:9a:f5:45:86:53:a9:5f:76:ab:74:22:e2:3a:48:bc:0e:
e6:18:8f:18:f5:99:be:cb:2c:e7:37:7e:ff:9e:5a:8a:86:de:
18:a9:d1:83:0b:85:4c:6c:13:fa:c1:0e:ce:ce:a4:8b:56:4f:
9e:8f:19:bd:ce:70:9c:76:bb:aa:f4:e6:9e:77:e2:48:cf:96:
2c:11:8e:22:81:e4:fb:e6:5b:c2:d3:6f:7e:96:e3:73:2a:a0:
0a:c6:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:14 2026 by rpki-client