Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File: O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier: dyPEo+VTYtsZKP8yR6xGFaTGO5g70hsI3zAe8YrzgbE=
Subject key identifier: E8:3C:B2:2B:59:B2:4E:ED:0E:EB:51:21:5D:68:E1:03:0E:C6:7A:81
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer: /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial: 019DA453F43A0AF643D6C3CF25250FB70114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number: 03B8
Signing time: Sun 19 Apr 2026 06:00:58 +0000
Manifest this update: Sun 19 Apr 2026 06:00:58 +0000
Manifest next update: Mon 20 Apr 2026 06:00:58 +0000
Files and hashes: 1: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: chkys8ZX55/osfIR6LJw9TeSF/cMWR7BR2kVsxFtyGM=)
2: xZvTVsgAgTHbHn_16cZuYXn4mck.roa (hash: +oE3yDmB7hi9Ypi3E2o3IvseUAbSMG6NeT9277jObu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:f4:3a:0a:f6:43:d6:c3:cf:25:25:0f:b7:01:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Validity
Not Before: Apr 19 06:00:58 2026 GMT
Not After : Apr 20 06:00:58 2026 GMT
Subject: CN=e83cb22b59b24eed0eeb51215d68e1030ec67a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:45:ac:e2:ff:5c:d8:69:1e:8f:79:36:2e:
a6:10:7f:ea:68:2d:b5:70:dd:4e:4d:9f:de:60:dc:
7c:58:2d:da:ba:1e:2f:e8:f1:76:7f:80:4b:c9:42:
f3:84:28:15:56:6a:3e:9f:9e:6a:db:ba:40:67:6b:
23:6d:a3:ac:2e:91:af:1b:33:a9:56:f5:0d:58:8a:
1b:13:cf:67:0c:93:ce:7f:5c:11:7e:3b:fe:66:41:
c9:fb:5c:49:42:6d:e4:2c:1a:24:80:7b:e5:06:bc:
52:15:50:7e:99:9e:a9:75:41:8e:71:27:27:93:65:
4c:f9:8f:e3:27:11:a4:d4:62:b7:76:89:ed:9e:58:
78:10:e4:66:68:d7:89:7e:07:38:da:32:1b:e7:35:
e7:91:b6:85:c3:c4:e4:78:39:c0:c6:40:d6:bd:8e:
a8:25:c2:83:3e:f8:80:ad:62:16:57:40:bd:fd:36:
18:44:6f:ca:41:25:8f:e4:8e:cb:67:75:08:8b:96:
3c:ba:c8:1b:78:a3:40:15:c7:a5:31:f7:f4:78:37:
8b:41:bd:8b:c1:f3:31:04:f1:e3:6f:5a:fa:ea:2a:
75:0a:ad:15:6b:f2:7d:4f:f1:ea:34:2b:66:85:be:
17:d5:a3:de:4b:5e:b7:a9:b2:9a:77:b2:9b:91:ac:
ec:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3C:B2:2B:59:B2:4E:ED:0E:EB:51:21:5D:68:E1:03:0E:C6:7A:81
X509v3 Authority Key Identifier:
keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:00:6d:db:41:37:bd:55:a8:84:47:e5:95:be:6e:57:86:0b:
5f:15:68:9b:d6:22:2a:8e:4e:2a:6f:2f:d5:a4:14:ee:21:a4:
6d:a1:04:18:8b:24:ad:6d:42:f3:db:bf:e0:ae:a5:5b:25:1e:
e5:53:18:df:6b:a2:29:59:9a:60:2b:57:47:66:0f:b4:76:37:
65:2b:c1:f8:5b:01:95:58:22:4c:89:6a:c2:dc:cb:01:f8:d5:
78:32:8f:b1:13:f5:2c:39:45:d9:b7:40:d3:8c:e1:e6:ce:c5:
34:c6:7a:95:04:cf:3f:14:91:a0:e2:ed:fe:7e:88:1d:a0:47:
0c:28:07:15:2e:94:aa:ec:05:9c:ab:d8:27:9b:55:ac:fb:a3:
ed:5e:40:4f:80:1b:c4:44:bf:44:16:48:5a:fa:ef:14:4e:07:
7a:4a:4d:af:14:0d:3e:53:4a:da:1b:6b:7d:f3:5b:06:ab:41:
ac:e1:69:0a:e4:fa:b2:8d:2d:93:e6:b3:f4:db:d8:26:09:86:
69:79:02:d1:d1:96:c7:6f:10:37:96:bf:64:da:fa:3d:b7:d8:
2b:98:f7:d7:ca:17:74:72:d0:be:66:7f:1e:01:67:41:32:00:
d5:c6:42:61:e8:84:bb:fa:8b:f7:13:55:73:d0:55:83:51:65:
2b:ae:8d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:50 2026 by rpki-client