Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
File: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft (raw, json)
Hash identifier: a98MOJbW+4+BoQf8Rmi1sV751Va12Xirdvzvi7oEedQ=
Subject key identifier: 37:BD:1A:F2:5A:68:47:8D:04:06:5A:6E:8A:4E:7F:3C:05:22:61:F5
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 019CA9EA7D452F99662C773E9E3029A1E2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
Manifest number: 4C
Signing time: Sun 01 Mar 2026 15:00:42 +0000
Manifest this update: Sun 01 Mar 2026 15:00:42 +0000
Manifest next update: Mon 02 Mar 2026 15:00:42 +0000
Files and hashes: 1: 3DUSLYibsJXd_Fv_mFQGMWyoD3E.asa (hash: 217ApHrz+ZFZBxQTuwBPGHegzD2Mli8dYOKOyw3Mk20=)
2: 8a6S-UC-PzVNfuKH4VEcSEi_3xs.roa (hash: ggJLncnSKUJfbzTsD0cgxExXtCcR+Y6TnGQ+ZK/8VVg=)
3: GOh_vF1-6BQUJEcQX8oRJkKylB8.roa (hash: jR1wVIFs5Egh3AaDFo20t6uR94VmalgAodS+SYxaL4I=)
4: O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl (hash: 3DGgBDNffpgwIT3BKKgpjAsa8Gj1CM5o8BSdLMlKICY=)
5: bF4AIoJbZesIwX86iDSdyGssluQ.roa (hash: mpdkvKaWVXrslEPSu3+IjnM2tbW2AQwtygmvrWacIvU=)
6: hSst--j5VCqGQF-z8DIf_npvY-Y.roa (hash: BqwaIWDOiFPECUGgrwgZoSY04WbWfryAxU75uG2cx4A=)
7: y-sWnGP-0hQwy4lYSwzVC6rKYt0.asa (hash: 9jRAa+Up2q3z80Ly9J5h5nlaT4zsmd3d7aVIdsnLuHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:7d:45:2f:99:66:2c:77:3e:9e:30:29:a1:e2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Mar 1 15:00:42 2026 GMT
Not After : Mar 2 15:00:42 2026 GMT
Subject: CN=37bd1af25a68478d04065a6e8a4e7f3c052261f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:f4:5a:7d:80:12:c6:0b:38:56:05:c6:3a:
97:be:43:87:8d:16:7e:be:f4:8a:fb:e4:f2:b0:af:
fe:9e:9a:ad:d8:d8:20:28:f5:2e:e4:36:b7:87:7c:
1e:f2:52:d9:21:a0:7e:30:0f:3a:5e:ef:68:65:e4:
8a:d1:a5:6f:d3:d5:91:17:2b:d9:45:27:f6:4c:c9:
8f:b7:5e:8a:84:ce:33:56:c3:60:18:a2:2c:eb:de:
ce:0c:a1:7b:89:6e:95:7f:88:3b:61:48:a0:56:e6:
54:00:0e:65:04:e8:04:20:62:f8:1a:be:a3:09:9f:
53:a3:e8:7a:b5:2f:2f:85:ca:b3:ab:60:5e:07:cf:
bf:7c:32:97:cc:e2:4c:e6:c4:a9:18:3d:35:bc:5b:
bd:13:b2:30:bf:30:6d:3e:ec:4e:33:89:73:63:f2:
bf:f2:04:ab:24:12:02:8e:ff:c9:ac:b0:30:d9:74:
53:53:a2:bf:22:46:ab:46:b8:fa:8a:e9:a6:eb:da:
26:24:1d:31:d5:0e:56:6a:11:be:89:c1:62:b9:33:
82:87:f5:78:fd:cc:56:30:3f:a5:17:ae:1a:34:79:
6a:66:d1:19:fe:d4:a1:9a:0c:d0:a6:22:dd:da:7a:
ed:b6:b8:04:6b:39:d4:e7:65:2d:2f:56:1b:cb:4c:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:BD:1A:F2:5A:68:47:8D:04:06:5A:6E:8A:4E:7F:3C:05:22:61:F5
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:64:45:1d:2e:ce:88:c6:9d:3f:ae:b0:58:9c:24:5b:34:cf:
b6:30:5a:15:25:57:f6:cc:d9:a8:55:06:6b:b1:e1:95:f7:c4:
3b:c4:92:0b:71:a2:12:b1:82:a7:82:f9:61:bd:55:c5:b1:c3:
10:52:83:db:ed:ee:c7:ea:b1:a5:4c:05:fe:4d:8c:cf:dd:36:
cb:6e:23:4c:28:26:88:13:5a:2f:9d:9e:87:13:a4:a0:66:3b:
d6:cc:8b:a4:dc:21:9e:22:ac:98:27:a7:60:b0:26:bf:49:d4:
17:32:1c:df:b1:02:81:a5:8d:a7:6d:34:44:fe:75:c3:58:72:
e3:79:36:0f:94:47:93:16:35:44:67:69:0d:50:bd:ef:fd:66:
85:17:cb:9b:51:ba:61:e9:41:f2:25:e6:c6:14:2d:32:13:a2:
c4:3f:f9:2f:35:e9:c3:e6:89:04:ed:39:59:54:78:f2:50:33:
5a:4b:73:cd:de:e6:37:58:78:88:72:8b:35:48:3d:23:c1:dd:
48:74:73:2d:c4:6a:29:e0:48:61:b7:53:9c:ab:7b:af:6f:90:
8a:13:0a:13:db:0b:ee:a9:a0:8e:1b:f9:83:2b:5e:b8:cd:e0:
de:9b:76:80:6e:3a:48:64:fb:c1:9b:e7:5f:51:f9:19:98:3e:
65:c4:c7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:19 2026 by rpki-client