Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: Jn2+vHZdQL14CyNHEBX/uuI9fzRDC4M/ZgedPAj5PkI=
Subject key identifier: 2A:1B:8E:40:EC:04:F1:4F:8E:83:3F:C7:21:38:DF:93:20:07:3F:68
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019EBF9132773AB0B1F24EDD32EE94439396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 06:00:24 +0000
Manifest this update: Sat 13 Jun 2026 06:00:24 +0000
Manifest next update: Sun 14 Jun 2026 06:00:24 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: k5n7mtGxiiSJJGPCKs/UojOugcCHKwrwd6GlhEc1Lcc=)
2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:32:77:3a:b0:b1:f2:4e:dd:32:ee:94:43:93:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Jun 13 06:00:24 2026 GMT
Not After : Jun 14 06:00:24 2026 GMT
Subject: CN=2a1b8e40ec04f14f8e833fc72138df9320073f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:81:4d:b1:6f:22:42:e2:5f:7e:00:44:16:
5f:16:d0:ae:fa:2d:76:a6:c2:99:50:1d:ce:0a:fc:
04:49:b5:6d:81:15:ff:e5:34:1b:d4:13:83:f1:53:
e9:c5:b5:e8:51:39:ba:e5:0d:a0:d9:10:b8:37:de:
cd:ba:55:c8:ae:99:db:04:d6:05:67:29:9b:b2:0d:
0f:57:f7:e4:f8:b5:5a:93:a9:c1:71:eb:aa:26:e7:
35:ca:67:56:86:f0:e5:21:88:10:32:05:37:e8:08:
d6:ae:bc:b0:b2:44:43:4c:04:37:bf:33:c3:f6:bd:
91:ad:a0:42:2b:f9:b0:71:8d:d3:e8:3f:05:0b:7e:
e3:78:d3:ab:d2:ca:3c:55:e7:9f:d0:83:b3:1a:63:
90:d0:cc:ce:cb:bc:e6:53:1b:4b:7f:cd:cd:e7:4a:
f8:33:29:08:12:69:05:dc:73:32:4a:73:dc:b0:8b:
5b:ab:b7:dd:57:db:c5:46:3e:de:a5:96:df:10:6b:
38:a6:ed:ee:f6:d7:ba:fe:53:0d:f0:58:b7:fd:15:
29:b7:b8:0f:f1:7c:80:f9:f3:09:56:69:3b:60:09:
59:ce:5d:ec:a4:c4:03:3f:57:07:0d:49:a8:29:c4:
f8:19:16:a7:73:84:43:c8:e6:be:b9:60:ac:d7:30:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1B:8E:40:EC:04:F1:4F:8E:83:3F:C7:21:38:DF:93:20:07:3F:68
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:92:a5:3a:e4:64:74:37:bc:f6:e3:05:8d:3d:a3:fe:fe:f5:
4d:ff:ed:81:bb:79:f2:ba:cf:49:32:d3:39:34:9a:33:76:a5:
c2:a3:b5:65:53:77:fc:9c:8d:06:39:0a:05:d8:3b:b8:9f:7b:
81:56:e6:9b:f3:0f:25:79:1b:d3:0a:55:83:4b:1d:55:80:de:
26:b0:f9:ae:07:10:ed:3d:f6:33:dd:14:8d:f6:47:bb:84:da:
2a:8b:8c:0b:5f:b5:c6:46:89:4c:f0:21:61:c8:49:3f:6b:5f:
76:73:0c:d9:ff:cb:01:89:00:e9:e3:0a:42:ce:7e:31:0e:6c:
31:53:2f:2f:c6:51:3f:3b:fe:cd:4d:3e:25:4c:88:b2:c6:6a:
44:d5:3a:dc:3f:b7:66:f7:bf:2b:a9:3c:79:8c:c1:82:0d:c9:
ec:1a:16:a9:37:49:b8:f8:1c:be:58:42:aa:af:0e:54:a0:4b:
46:db:e2:df:ce:23:5e:be:c1:85:a8:b7:f9:91:06:94:d5:4d:
45:70:60:3d:3b:a2:53:3c:ac:39:b3:97:0e:25:8e:71:12:3b:
38:94:e5:ca:0e:e5:2e:20:e9:1d:e1:b6:a6:a1:d1:2c:c4:89:
74:49:fe:31:dd:17:85:a8:a8:78:0a:13:cf:ca:47:63:32:17:
02:68:ca:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:37 2026 by rpki-client