Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
File: O035pUYMvUULTnU4A5OoIehcdNg.mft (raw, json)
Hash identifier: Lu5wIf9TNWuf1LqSzlO6D3w1+1bSwbRgSAWExWhS4fI=
Subject key identifier: DB:25:22:2D:C6:29:7F:D0:4F:72:FF:91:05:80:29:1D:99:8D:8A:34
Authority key identifier: 3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
Certificate issuer: /CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Certificate serial: 019D9A06E13CC8A91030AFFEAE3DD644EABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:35 +0000
Manifest this update: Fri 17 Apr 2026 06:00:35 +0000
Manifest next update: Sat 18 Apr 2026 06:00:35 +0000
Files and hashes: 1: O035pUYMvUULTnU4A5OoIehcdNg.crl (hash: ABh9W2As0FiGPPg9KNQxZb0YUazAWbYOoCmglWK1gRo=)
2: dV_9uq8upfSUQm9X4RaRnXhXo0E.asa (hash: zly0ybhAqfJzcK9wAOncswwgaSXSRETRJXacbwSXNFQ=)
3: yv-OW_N6Uq-jDQ3EdCfxIbULs5c.roa (hash: Qu8VtwIrzD6nguGNzZTnf4XvAzHQDw9auayY6SSJ8gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:e1:3c:c8:a9:10:30:af:fe:ae:3d:d6:44:ea:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b4df9a5460cbd450b4e75380393a821e85c74d8
Validity
Not Before: Apr 17 06:00:35 2026 GMT
Not After : Apr 18 06:00:35 2026 GMT
Subject: CN=db25222dc6297fd04f72ff910580291d998d8a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:53:43:c3:5b:8c:78:85:b8:ce:6b:1b:22:
f8:5f:82:47:0d:1e:96:35:3c:ae:b2:a0:81:89:cf:
04:7d:58:b8:38:51:57:5c:88:56:be:16:b5:60:1c:
8f:eb:22:35:22:ff:75:c1:25:55:be:06:20:ce:fe:
83:89:b8:2c:95:1a:f0:90:10:18:cc:0d:48:22:f1:
31:da:13:63:64:c8:ae:0b:e5:db:2e:19:7a:5a:95:
2a:db:9f:7b:d0:1d:3a:e8:b8:03:56:a1:67:17:51:
af:d5:4c:8d:27:c4:f3:3d:e9:86:f2:25:4e:85:a8:
07:b6:f1:3d:44:d6:72:6d:e8:fb:03:b7:60:10:b8:
28:96:0b:70:67:cf:03:08:b6:ad:77:eb:34:4a:8c:
5f:66:70:f5:4b:a4:15:58:bb:8d:46:4c:18:f0:f0:
9b:5e:79:47:60:b6:98:94:0f:f4:7f:89:5a:ea:cb:
c3:68:b4:07:cf:71:53:b3:f6:6b:6f:f5:c9:7e:12:
52:80:61:76:bb:d0:66:dd:f6:32:a3:f3:db:ab:d7:
ee:b4:11:f7:0a:3e:94:4c:b9:fb:bb:ba:4f:29:48:
1c:88:09:39:e2:80:0b:38:3a:df:31:5c:7c:fa:06:
9d:f6:cc:5b:a0:10:2e:9f:37:4e:fd:de:77:c4:6a:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:22:2D:C6:29:7F:D0:4F:72:FF:91:05:80:29:1D:99:8D:8A:34
X509v3 Authority Key Identifier:
keyid:3B:4D:F9:A5:46:0C:BD:45:0B:4E:75:38:03:93:A8:21:E8:5C:74:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O035pUYMvUULTnU4A5OoIehcdNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/04975c-ef49-4754-96f9-9812d7cfd694/1/O035pUYMvUULTnU4A5OoIehcdNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:0b:03:1d:e4:b1:f3:3a:5f:90:9f:4d:5e:5e:7b:48:93:03:
64:26:99:d8:ff:94:59:12:6a:96:1d:59:a0:65:bc:ba:33:eb:
f6:73:39:9b:a0:44:e5:36:d5:a9:3d:6b:97:e1:b3:a0:a7:35:
3f:31:7e:3e:62:10:e3:96:b7:5b:d8:34:98:c2:b4:03:a1:f9:
be:07:57:57:99:52:85:40:42:d1:1a:2c:83:d9:b3:7f:bb:ad:
47:c4:77:27:42:d4:01:75:cc:e9:e7:ce:01:f2:30:bd:26:3d:
f8:21:bd:7d:15:a2:0c:03:3f:9b:20:bc:05:ee:53:f9:55:1d:
6f:93:20:ca:d1:59:cc:6e:dc:e5:76:36:91:71:3b:f0:65:a5:
42:17:1b:c1:64:fd:97:e3:a9:03:9a:f6:90:1d:ad:5e:8d:d8:
73:9f:1a:be:a9:5e:e4:5a:2f:48:bf:b5:41:ec:ab:9f:54:54:
d5:9d:da:01:5c:c2:f6:a6:9f:a7:b3:8c:e3:8a:42:e4:0f:08:
9d:27:14:85:c5:23:ad:03:d0:d3:85:75:c4:82:96:97:fd:82:
e6:fd:d6:89:51:a6:7d:35:5d:1f:97:cf:90:f3:11:fd:12:21:
ae:16:2c:48:22:2f:51:5c:e6:ed:13:f7:58:02:99:9c:b8:d3:
cb:42:de:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:17 2026 by rpki-client