Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: 3y1SpNmiRQsYqFQ/Hocp09hBoPXA1H7Qp/ahw9zSJmE=
Subject key identifier: CF:A1:AF:93:38:8D:5A:9B:2D:2D:12:2C:19:97:98:39:3D:79:AE:3F
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019CA8A15C0FA2DC4C02863293663FFB6003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 09:01:12 +0000
Manifest this update: Sun 01 Mar 2026 09:01:12 +0000
Manifest next update: Mon 02 Mar 2026 09:01:12 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: HhSX59D+upJHBkBpnCgh3Og1CdrssRByJJru2Yr0Ed4=)
2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:5c:0f:a2:dc:4c:02:86:32:93:66:3f:fb:60:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Mar 1 09:01:12 2026 GMT
Not After : Mar 2 09:01:12 2026 GMT
Subject: CN=cfa1af93388d5a9b2d2d122c199798393d79ae3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:0f:3a:ac:67:5f:cb:18:48:fb:df:49:ed:
d0:63:fc:67:5c:60:9c:fb:e7:cb:66:7a:b4:b8:87:
22:7d:0e:ba:3d:b7:bb:85:1e:f5:ee:34:83:30:99:
cf:a0:3e:1d:7d:82:00:18:33:40:b9:65:ad:40:b6:
fd:30:bd:11:5b:c6:bd:89:5b:ff:cf:5f:77:9f:5e:
c7:3e:08:a0:51:eb:6d:85:ae:33:39:45:21:df:7b:
54:1c:c8:68:22:6b:bd:8b:8f:11:f5:83:fe:ae:31:
42:e4:25:e2:42:c9:3a:96:c2:a9:da:3d:b9:cf:dd:
0f:41:5a:6e:34:16:4d:8b:77:1a:c6:46:0f:b4:de:
08:98:a2:31:46:7e:ec:27:07:19:5a:6f:bd:7e:dc:
bb:e9:73:7e:1f:45:4d:09:f1:3b:d7:d5:c0:69:23:
58:9a:58:29:04:b7:68:e0:0c:59:ec:2e:a4:ef:b9:
0d:9f:ef:ef:7c:15:f2:81:96:4f:de:01:8e:32:8c:
e2:7a:d0:76:a8:a7:40:5b:31:9b:6c:31:65:49:40:
ea:ee:c4:04:4a:ff:d5:b0:06:66:f8:20:45:98:09:
a8:55:44:11:4d:9c:55:60:04:ce:a5:6f:d4:c3:f3:
e7:b6:cf:d3:61:be:53:05:e6:a0:03:35:e8:32:75:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A1:AF:93:38:8D:5A:9B:2D:2D:12:2C:19:97:98:39:3D:79:AE:3F
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a7:41:f9:89:cb:a8:6c:ef:5e:68:78:70:18:22:e5:9f:eb:
db:34:85:37:3a:57:cd:fa:fb:f5:bb:71:98:f2:d5:44:75:8c:
c0:51:22:2c:50:3e:7a:2c:90:6e:f9:e0:1c:03:88:b5:87:d5:
50:b9:e4:2b:32:37:8e:de:2b:b9:69:8c:c5:6b:76:03:ab:4c:
69:6c:8f:4c:b4:ad:a9:be:91:2f:33:99:2f:cb:65:05:57:6a:
3e:09:fc:f1:dc:bc:79:7e:ed:32:5f:ba:06:af:58:4f:2f:31:
62:a6:dd:a9:d5:97:9e:13:01:df:fb:d8:dd:1d:f4:33:9a:7f:
db:39:70:2e:05:1a:41:c3:93:cb:c9:c6:82:3e:fd:58:bd:13:
ef:a0:e4:0f:bf:7c:68:5c:c9:3d:d3:0f:9e:2a:5c:65:a8:51:
9b:77:db:59:21:bb:a4:f1:d7:c5:f3:d0:f1:15:b6:45:52:7d:
29:6f:ac:5a:e5:e3:6e:18:00:cb:6a:61:6e:b7:a3:07:a8:bc:
80:85:a7:84:e1:2f:d5:18:de:fc:bb:15:3c:d3:df:7f:9a:a8:
1b:69:94:f6:e2:b3:fe:a4:56:39:1e:7a:0d:87:ea:12:58:6c:
f0:4f:a4:54:c3:31:43:c7:a0:bc:73:d9:4f:3a:b6:e6:71:b8:
2b:f6:e4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:28 2026 by rpki-client