Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
File: m_OG1KjS4YgyzyP7819iQNuOokI.mft (raw, json)
Hash identifier: FzSlrqrCNstVMa9vBDL6GENaCanQDuj+YCFXaP2a84U=
Subject key identifier: 5E:FF:2A:92:5E:87:BD:D8:F5:F7:3B:F3:B6:CE:7A:27:F1:37:95:EE
Authority key identifier: 9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
Certificate issuer: /CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Certificate serial: 019CB1A44E974F702B80418B42011595CBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
Manifest number: 03BA
Signing time: Tue 03 Mar 2026 03:01:01 +0000
Manifest this update: Tue 03 Mar 2026 03:01:01 +0000
Manifest next update: Wed 04 Mar 2026 03:01:01 +0000
Files and hashes: 1: m_OG1KjS4YgyzyP7819iQNuOokI.crl (hash: g7zXv9TmzkrVhgh/Rl7BMvLsk8zWkLL2r/6DIRQeEoI=)
2: qcRxwVaFJKZNZxKItMTgD_sHnKI.roa (hash: zSxjrYYqoeDrJlezU9Vi0F+/e6UNxqHigCDZbFFsf0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:a4:4e:97:4f:70:2b:80:41:8b:42:01:15:95:cb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bf386d4a8d2e18832cf23fbf35f6240db8ea242
Validity
Not Before: Mar 3 03:01:01 2026 GMT
Not After : Mar 4 03:01:01 2026 GMT
Subject: CN=5eff2a925e87bdd8f5f73bf3b6ce7a27f13795ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:40:b1:e7:59:fe:89:63:46:ff:b4:5b:3e:
2f:13:24:fc:5a:9c:6b:5b:3a:df:16:25:c4:e8:d8:
29:dd:a4:32:bf:7b:2b:4a:49:d5:c4:8c:e5:f9:ea:
41:f7:d4:fd:13:0c:76:d0:68:b9:e7:f2:54:50:dc:
6d:19:a5:08:92:a2:03:e4:56:a0:80:62:bc:8b:64:
8e:e8:03:aa:b6:97:5f:d1:df:7e:8a:e0:16:27:9b:
c9:0f:ea:40:7e:a4:d8:0e:51:e9:92:89:bb:28:66:
a7:4c:8e:7f:57:64:d3:f6:86:f6:f6:7b:17:47:ad:
e2:6e:3c:f3:1d:29:c2:06:67:7f:d4:d1:3c:c1:4c:
53:03:05:22:12:1c:5f:8b:31:5a:ec:69:01:41:9a:
67:68:eb:38:ae:53:7d:1d:a6:9e:07:34:8f:79:ce:
fa:d2:cc:35:e3:4f:4f:72:99:53:dd:64:a9:84:f9:
f6:b1:44:d3:b8:7f:d6:62:31:9d:39:4c:ba:99:a3:
6c:e3:5c:b4:50:bd:55:e8:16:72:c8:ab:88:73:15:
e4:4f:df:24:94:10:d5:8b:77:d3:50:2c:e9:39:44:
fa:a5:74:c7:4d:7a:c6:59:4a:14:d7:96:02:5d:8b:
02:05:f4:63:26:a4:d6:71:45:a0:4b:cf:c2:92:f4:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FF:2A:92:5E:87:BD:D8:F5:F7:3B:F3:B6:CE:7A:27:F1:37:95:EE
X509v3 Authority Key Identifier:
keyid:9B:F3:86:D4:A8:D2:E1:88:32:CF:23:FB:F3:5F:62:40:DB:8E:A2:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_OG1KjS4YgyzyP7819iQNuOokI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/648bcc-0911-4f64-b6d1-0a2f29aecdb3/1/m_OG1KjS4YgyzyP7819iQNuOokI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:23:50:a9:a3:72:68:c3:62:9e:4f:1e:e3:e9:12:0a:16:9a:
ee:2b:90:a7:b8:99:06:cd:e7:41:32:7d:38:63:6f:c8:1a:cf:
82:ab:43:f8:27:b5:17:3d:b6:0e:d1:b0:37:01:8b:93:1d:52:
37:5a:74:a1:5c:e8:8a:93:8b:78:d9:25:02:d7:08:25:cc:9f:
1e:7b:53:ab:b3:f7:1d:4d:e1:41:4e:8f:da:f8:4b:21:01:c0:
cc:68:e4:f6:23:cb:aa:11:b1:a1:d9:a5:3b:d9:b1:5b:d4:60:
58:94:25:58:36:72:98:d3:aa:ec:04:e9:00:d8:fc:b0:e0:56:
18:1e:20:92:54:5f:4a:c0:5d:33:0c:b9:20:4f:6d:d6:da:f8:
ad:02:05:59:49:94:08:d4:3b:16:41:9e:7d:29:bc:7c:55:fc:
86:55:76:33:d2:ad:7f:d2:bd:38:0c:52:5f:af:8c:45:d3:48:
16:ab:66:07:3c:a5:31:7c:45:ab:a3:8c:70:30:e0:f4:d3:6b:
34:19:7e:23:04:e5:e0:ae:e2:65:d0:55:7b:a0:65:5f:e0:b7:
6a:f1:b1:c4:12:78:3b:02:55:9b:d6:53:3f:9d:61:0d:54:59:
b4:91:91:6e:7d:d2:fc:0a:68:d6:6d:67:43:a4:cd:7f:ed:f2:
23:d4:4b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:56:10 2026 by rpki-client