Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: buqOrRRDNVr2shRnSdpCdyWUDjjc+dbab3Ik3Xtla3E=
Subject key identifier: 4D:3B:33:0A:9A:9C:0B:41:DA:1A:93:1D:EC:84:7C:4C:D3:6E:8A:12
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 019D9CD19E79BF752FD034D00976F9B464D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1512
Signing time: Fri 17 Apr 2026 19:01:16 +0000
Manifest this update: Fri 17 Apr 2026 19:01:16 +0000
Manifest next update: Sat 18 Apr 2026 19:01:16 +0000
Files and hashes: 1: OFa8deirJ8mX7gRn79xlLJ8oDFY.roa (hash: N+xsE/A93Q5FiilxuvU4PImtKOjqeD0giFP8OnmhGl0=)
2: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: xqR6fxwcs03r6jj0y7u95GVD8RtojA12FgZnTERNAvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:9e:79:bf:75:2f:d0:34:d0:09:76:f9:b4:64:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Apr 17 19:01:16 2026 GMT
Not After : Apr 18 19:01:16 2026 GMT
Subject: CN=4d3b330a9a9c0b41da1a931dec847c4cd36e8a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:29:1f:8c:03:32:7b:01:dc:04:e4:2a:2e:
65:86:2f:bc:d7:d0:57:fa:cc:ae:e7:c8:05:a4:25:
3f:d2:f5:eb:be:78:04:f5:0d:c8:73:00:fb:41:3a:
0f:67:61:ee:5b:46:c2:b2:3d:99:63:0d:50:9d:fa:
e1:d0:32:9c:26:26:3d:87:b1:be:3c:5e:5a:ac:26:
6a:d2:6c:ef:c1:56:cc:b1:7a:28:5d:40:e9:2b:22:
8d:dd:6a:25:70:80:e6:06:4f:a5:2d:ad:e2:79:40:
00:e0:18:13:ac:e5:e8:46:e7:93:c4:62:b7:43:dd:
f8:3f:bd:5e:e6:9f:5b:a1:cf:e0:3c:92:3b:49:3b:
2b:9a:54:0e:03:39:d4:0e:8e:5a:2d:40:b3:68:7d:
91:da:41:17:ec:6e:9d:10:b0:6c:ed:ea:05:b5:04:
04:a4:1f:8c:6c:bc:ad:23:9d:a1:b0:f2:5d:4d:48:
5e:95:5e:82:93:10:fe:a1:0e:35:0c:d6:b6:cc:22:
9e:05:54:9c:85:7f:68:d7:55:55:a6:cc:8f:1b:36:
22:97:e3:b2:2e:f0:67:17:8d:48:a2:26:bb:42:ab:
77:e2:f8:44:75:f1:b0:23:e0:40:2d:c9:73:ac:ce:
af:0c:f9:0f:67:eb:21:3a:7e:ce:95:63:da:73:3b:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3B:33:0A:9A:9C:0B:41:DA:1A:93:1D:EC:84:7C:4C:D3:6E:8A:12
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:82:a4:d5:f8:f6:d9:cd:1d:d8:ea:a3:05:08:9d:ac:76:1a:
c3:4d:d5:65:d7:a6:5f:22:96:9b:b4:0a:6f:66:2c:bb:65:f6:
c0:67:2e:ea:05:82:d0:fc:1b:ca:f7:d3:21:ae:29:37:97:8a:
bc:aa:81:ae:0d:71:7a:e6:c6:90:ae:2b:cc:ba:71:ed:16:fc:
2e:86:99:64:a0:8d:5c:ee:2a:69:1e:d2:3e:4a:b6:71:88:e5:
a6:0b:b5:4e:ca:6c:9e:fd:91:28:2c:8c:8b:59:3f:cf:0a:79:
a2:35:10:8f:bd:bc:33:e7:90:94:c3:00:af:b1:e6:31:5f:15:
46:4d:1a:c0:03:47:43:9d:b1:d6:ac:a0:db:cb:b5:8c:f8:99:
a1:1c:0a:ad:8f:f7:ec:05:15:05:bd:7e:94:57:70:7e:11:e6:
ba:0c:6a:9f:df:de:dc:17:c2:a4:ce:32:bf:7e:95:dc:3b:09:
57:7e:76:c6:02:de:92:35:75:05:32:e5:c4:78:71:5d:e2:38:
8d:1c:41:08:d3:ba:49:57:d5:5e:ce:d8:e6:46:3f:8d:a0:0c:
90:6d:39:df:08:38:af:da:19:bb:46:0b:dd:13:2f:dc:3a:01:
3f:7d:2d:d6:5d:ba:33:54:37:d0:26:e2:3e:b2:29:cb:b2:92:
7e:c3:b5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:37:33 2026 by rpki-client