Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: MloR2I+HzGVX+pguxa3q313LlTiNv97HIRi3X1tYVok=
Subject key identifier: 7C:74:94:94:5B:D3:EA:8C:F9:6C:92:E8:F5:72:59:3D:9F:1E:25:C4
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019CA9EB20F1C984C8056503EFFA0095C0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0DD2
Signing time: Sun 01 Mar 2026 15:01:24 +0000
Manifest this update: Sun 01 Mar 2026 15:01:24 +0000
Manifest next update: Mon 02 Mar 2026 15:01:24 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: sXKcAEfrB7nANogkcqtOpLYl+739zrfVhVcxg9AgSpk=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:20:f1:c9:84:c8:05:65:03:ef:fa:00:95:c0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Mar 1 15:01:24 2026 GMT
Not After : Mar 2 15:01:24 2026 GMT
Subject: CN=7c7494945bd3ea8cf96c92e8f572593d9f1e25c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:02:45:9a:7a:57:36:fc:23:db:69:c7:67:6e:
be:e4:65:fc:6f:12:1a:1a:7c:fc:1d:9e:58:00:d6:
74:9e:3b:73:e0:a9:bb:c8:f6:f1:89:70:81:c3:3c:
33:29:00:5c:e1:8b:92:3e:ca:f6:df:6a:58:f9:81:
62:57:36:4b:ac:78:61:67:d0:db:2e:3c:4f:95:f5:
96:63:b2:66:58:7b:c1:16:3d:4b:9a:3b:c8:e4:fb:
bd:3f:7d:96:b3:96:fa:41:b6:27:54:6b:5a:47:15:
d8:b3:4c:da:93:af:a2:b8:17:e2:15:d2:6f:8e:78:
c4:0d:ed:00:6c:33:60:a0:0d:f1:d9:67:6a:d8:2a:
d6:66:11:fe:36:f3:64:e5:07:a8:4a:64:65:9e:5a:
fa:94:98:78:dd:82:af:b6:11:cb:01:a7:70:3d:85:
8c:fc:d1:d7:42:0f:26:a0:58:e5:c1:6f:a2:65:a8:
9c:29:8e:45:73:b2:78:eb:8c:f4:74:25:87:4f:13:
dc:b5:40:d8:02:8f:88:7d:f9:37:15:b9:cb:61:28:
e3:39:17:0d:4b:80:4a:c6:fb:d6:55:a4:f9:db:3e:
79:08:72:2f:44:65:9a:40:f3:1c:f8:97:c8:c8:1a:
68:99:64:2e:f5:bd:50:a5:f9:f8:7d:30:8a:64:22:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:74:94:94:5B:D3:EA:8C:F9:6C:92:E8:F5:72:59:3D:9F:1E:25:C4
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:90:5e:50:e9:b9:4c:95:41:c8:22:a7:7b:4a:63:08:5f:42:
d4:17:ba:e4:fc:d1:03:b0:87:81:c3:f5:d7:17:6d:db:db:43:
99:5d:b7:a7:27:81:86:c0:f7:85:ed:77:84:8f:04:0f:9a:fa:
d4:a5:11:f1:bd:9f:95:97:9a:c0:01:3c:1b:56:89:7d:8a:a1:
f7:5a:3f:0b:3e:46:7d:fa:e3:9d:5a:6d:92:95:6a:d3:4e:d3:
6f:c4:c2:a2:60:97:bf:de:5f:7e:24:33:8c:75:0f:61:28:15:
6a:9d:82:73:ed:04:78:b4:06:d5:cd:11:f0:34:f5:54:04:98:
0d:9a:ba:ce:fa:73:ab:3e:87:8c:18:5d:c2:b5:a7:d0:5d:a9:
9d:bd:62:e1:43:11:8f:b4:61:62:bd:db:f6:d6:fc:ec:92:cb:
1c:b3:10:23:de:38:fc:9c:43:20:3f:27:3b:7d:67:32:a9:9c:
86:df:ec:bb:7d:1c:5d:7a:12:b0:78:27:10:79:63:bd:aa:c9:
30:04:f7:8c:4b:31:aa:73:9d:ce:d8:fa:fe:ee:0a:64:ab:58:
14:fa:8a:8b:8a:ef:cf:cd:5b:5e:31:ad:63:67:d6:3f:48:6b:
cf:b5:db:26:a2:e6:57:ce:4c:5e:5e:4f:f7:2b:ed:ef:b5:bb:
76:ae:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:42 2026 by rpki-client