Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
File: O95jhoTGRf7dYA7TxQzfMQsRbT4.mft (raw, json)
Hash identifier: RVvGp6j+AEjwC1Ijv0J5mRoQiQn5WArdu/B0Gx9tIzM=
Subject key identifier: E3:38:73:29:D6:C2:A2:AE:14:5F:1C:6C:10:14:0D:29:31:AE:FF:24
Authority key identifier: 3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
Certificate issuer: /CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Certificate serial: 019DA5665566A75C3B6219F454A82FB6A1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
Manifest number: 13E5
Signing time: Sun 19 Apr 2026 11:00:40 +0000
Manifest this update: Sun 19 Apr 2026 11:00:40 +0000
Manifest next update: Mon 20 Apr 2026 11:00:40 +0000
Files and hashes: 1: O95jhoTGRf7dYA7TxQzfMQsRbT4.crl (hash: ZME6D6E0wBdWd8YAQX9QlurQlTsb150e+IqkPbsCZNs=)
2: Z7DXzXjQ1iWsLhA7bX6hUr5-ljA.roa (hash: 3kmZN3nQ/QKEMXaSVLOkM6zDUNMkeL4tJG0CWoaKc6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:55:66:a7:5c:3b:62:19:f4:54:a8:2f:b6:a1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde638684c645fedd600ed3c50cdf310b116d3e
Validity
Not Before: Apr 19 11:00:40 2026 GMT
Not After : Apr 20 11:00:40 2026 GMT
Subject: CN=e3387329d6c2a2ae145f1c6c10140d2931aeff24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:f0:6d:71:81:31:24:4f:93:87:08:94:1b:
65:b2:20:b0:01:84:86:c6:c2:2f:a2:e8:4a:b7:4c:
6d:37:e9:09:79:f3:13:a6:7d:39:ba:64:f8:c8:39:
ef:a6:89:e6:a9:09:51:38:ad:d7:77:8e:0f:fd:69:
3e:40:be:ee:80:df:d6:ba:64:63:0a:f1:22:f3:68:
4a:e5:62:5a:12:b8:77:91:bc:d2:8e:c8:ed:59:7f:
72:06:78:87:6c:82:0d:c2:2d:5c:c6:ba:db:a6:8b:
73:b6:63:71:ab:b1:fd:bf:d1:5f:ad:b5:f5:0d:81:
b4:ce:22:be:aa:c3:2a:2d:28:e2:0d:ca:4a:37:d3:
34:f4:36:ed:16:b3:e2:32:f7:a1:97:61:6b:5a:a1:
e5:e7:a7:c3:99:1f:51:2e:97:ed:b6:c6:b7:f7:4c:
bf:8c:b5:bc:07:15:23:42:e0:91:53:20:f4:15:fb:
66:73:0b:fd:7a:5c:45:3e:8a:6e:91:81:a4:de:a2:
83:26:d9:f1:7e:31:08:2f:c8:6c:0d:3e:9c:b6:19:
ca:fd:4c:b7:ab:b8:44:02:e6:22:8d:ff:74:8c:b3:
e4:ad:0a:3c:84:b1:1b:ee:46:a8:db:08:74:f4:54:
35:e4:32:e3:ba:24:ef:35:fd:70:9a:87:9b:bc:56:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:38:73:29:D6:C2:A2:AE:14:5F:1C:6C:10:14:0D:29:31:AE:FF:24
X509v3 Authority Key Identifier:
keyid:3B:DE:63:86:84:C6:45:FE:DD:60:0E:D3:C5:0C:DF:31:0B:11:6D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O95jhoTGRf7dYA7TxQzfMQsRbT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/62b15d-ee50-450b-8e2d-097b0510d3e2/1/O95jhoTGRf7dYA7TxQzfMQsRbT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2f:72:d1:84:d0:ba:00:80:53:dd:94:a8:fc:57:a6:c2:19:
b8:c9:a0:05:99:61:3b:b5:47:11:4d:d6:70:4a:c7:d3:38:4d:
9d:59:0f:1d:67:6e:ae:b2:5e:f9:97:ec:70:63:2f:8e:c1:89:
81:d5:cb:68:c4:58:58:a3:28:8c:08:ef:26:eb:97:a4:7c:c9:
1e:fb:c0:da:89:43:c3:99:f5:85:03:eb:eb:03:93:1e:ce:e9:
e4:a0:9f:62:32:7a:61:fd:a9:5d:00:b3:e5:af:05:49:4a:34:
15:7d:25:45:48:2e:cc:cf:1a:ae:c0:54:62:e4:e7:1f:7a:f4:
a2:67:ef:ca:eb:83:9d:62:24:55:21:df:0e:f5:2e:1c:78:56:
9f:50:8d:de:a2:96:31:79:0c:a8:e7:2e:f6:8a:0b:3b:a3:45:
45:e7:ce:0d:74:d5:05:dc:24:45:ba:ea:f7:72:74:e7:00:55:
63:4e:d6:79:59:5f:2a:24:69:a4:0a:56:ad:f1:4e:9c:92:6e:
2e:d8:fc:1b:1a:dc:54:88:73:53:09:6b:31:cc:0d:2e:8f:45:
61:09:37:60:64:fb:6a:ac:db:e1:4d:a0:b2:f4:05:0b:d5:6e:
e9:8a:24:0d:fd:32:df:ae:2e:d3:57:0b:d9:20:28:f2:32:eb:
5e:56:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:29 2026 by rpki-client