Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
File: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft (raw, json)
Hash identifier: DFq4+KTu1owD/w8j7/PRhVmUeRxkaZzxJQwl2grcEy0=
Subject key identifier: 72:AB:C7:4C:96:58:D3:71:2B:6B:56:2F:AF:7A:B6:E7:36:59:AC:16
Authority key identifier: 3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
Certificate issuer: /CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Certificate serial: 019CAAFD214B5943E77991AB27356AFE148E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
Manifest number: 0451
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl (hash: XD8+H6aC2MZXVrlkD/4kyLDXG95b3tDem4Kets2D9uA=)
2: nmV4wo1OsK526xeTri2upmPsAys.roa (hash: IeXn8vSCp/SPxs1+dmemndjYyp23bbOiRhUmde7q2pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:21:4b:59:43:e7:79:91:ab:27:35:6a:fe:14:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b58eb58b5c61a23d0f2466c5cd73ce9ec965b96
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=72abc74c9658d3712b6b562faf7ab6e73659ac16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:a7:0c:ab:59:04:03:00:f1:fa:b4:8d:16:
a0:0f:ae:fa:29:85:26:d3:31:be:21:6e:4a:5e:ce:
ee:45:8e:81:a2:b8:84:ec:c6:5a:73:ab:d0:00:93:
67:49:3c:f3:0e:b6:3e:08:62:82:90:67:2a:39:30:
5b:42:83:5e:00:d4:fc:52:9f:68:3c:8e:17:8c:6b:
f3:43:eb:c2:9f:bc:c3:a0:42:f9:11:b6:24:82:ec:
1c:ae:85:f9:13:8e:6b:69:8f:d0:69:5e:79:01:65:
6e:31:83:59:35:c4:73:92:9d:79:64:e2:26:ba:17:
a3:bc:ff:5b:30:5a:31:04:48:57:d8:6a:ea:ca:1e:
4e:a9:65:2c:ca:95:b1:ee:3e:70:3b:ac:6c:f2:e7:
46:56:8c:38:d4:6b:2d:19:4b:42:95:bd:b9:9d:7f:
2f:b1:c8:84:9b:ee:d6:24:6a:55:d7:ec:f8:6d:a5:
9d:24:14:ef:02:11:d0:be:82:ef:da:08:2c:73:85:
07:b4:e9:a7:c9:cb:28:16:c7:6e:ee:74:52:5e:f2:
7c:71:12:01:7f:60:41:ab:a0:70:ee:48:94:90:a8:
6c:b1:a7:9e:71:3d:be:44:b4:cc:1a:c4:e7:e2:04:
e3:de:81:d6:c9:56:a4:e1:f7:86:9a:af:cc:80:8a:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AB:C7:4C:96:58:D3:71:2B:6B:56:2F:AF:7A:B6:E7:36:59:AC:16
X509v3 Authority Key Identifier:
keyid:3B:58:EB:58:B5:C6:1A:23:D0:F2:46:6C:5C:D7:3C:E9:EC:96:5B:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f2e150-3e9e-4f18-a53d-72ac79d7bb09/1/O1jrWLXGGiPQ8kZsXNc86eyWW5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ed:4b:46:27:b6:84:04:0b:4d:da:65:b7:cf:1e:96:de:d7:
45:d2:0a:b9:6b:30:62:1f:29:58:79:3c:83:11:32:22:98:ae:
70:ac:07:35:2b:37:d1:56:26:68:53:e9:84:37:49:f6:bb:e1:
e3:e6:84:2d:72:84:d9:1d:04:5f:74:11:0c:20:36:40:8b:3c:
38:78:16:a6:86:ed:f2:a0:6b:69:64:4d:b7:b2:80:f4:75:b6:
48:97:9b:29:d0:57:2a:59:8e:2d:58:f0:70:e3:de:cc:fc:ea:
78:15:17:b7:5a:e6:19:da:a7:2c:14:3c:d5:f4:e8:2b:15:98:
10:d7:89:2f:1d:de:24:14:0b:b1:d1:86:9d:18:0c:07:aa:d9:
49:6b:d5:d3:b7:58:be:6e:b2:74:8e:75:3c:ff:4a:bf:b8:e5:
df:09:6f:2d:43:48:d4:f0:ee:dd:43:4a:06:8b:a6:34:f2:fd:
79:7d:52:eb:d3:91:df:cd:6e:34:38:34:21:69:d2:00:94:7e:
07:45:53:cc:28:c9:29:e4:4c:1c:e7:01:da:01:8e:d2:0d:0f:
f6:d7:38:c1:4a:2a:13:af:8e:da:54:a0:d2:3d:32:99:4a:9d:
f0:53:98:2a:1b:be:fc:1d:8d:a1:c5:95:f2:b1:e4:4a:db:3b:
3c:63:05:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:44 2026 by rpki-client