Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
File: o3JENI5x7Bvl9QB8jV7-cSWSByI.mft (raw, json)
Hash identifier: /R7wKR5zvHkbc4Zqn7X2TH1bneaByejRzkPkP2d6Phc=
Subject key identifier: FE:DB:BE:69:E1:A0:B5:9C:E7:F7:90:6C:E9:95:C8:9E:72:EE:27:D0
Authority key identifier: A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
Certificate issuer: /CN=a37244348e71ec1be5f5007c8d5efe7125920722
Certificate serial: 019CAEA31C4DB326E92D04DCEED1F3DFD842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
Manifest number: 0B73
Signing time: Mon 02 Mar 2026 13:00:51 +0000
Manifest this update: Mon 02 Mar 2026 13:00:51 +0000
Manifest next update: Tue 03 Mar 2026 13:00:51 +0000
Files and hashes: 1: RijzbLPJNYBBaQUNmuNuIQrf5Xw.roa (hash: v10XXGdmUOPRJJS1MaufQ22rkW2n2zH/GaaX/HJobRg=)
2: o3JENI5x7Bvl9QB8jV7-cSWSByI.crl (hash: Me6U8nGRzTqVx0U4hxjg3tKWAm1pYwGXwu91g5wOSOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:1c:4d:b3:26:e9:2d:04:dc:ee:d1:f3:df:d8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37244348e71ec1be5f5007c8d5efe7125920722
Validity
Not Before: Mar 2 13:00:51 2026 GMT
Not After : Mar 3 13:00:51 2026 GMT
Subject: CN=fedbbe69e1a0b59ce7f7906ce995c89e72ee27d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:16:a1:52:4c:96:93:08:70:db:13:c8:7c:
53:d4:77:2d:c0:c1:fe:7f:a5:cc:60:90:54:33:c5:
ab:1d:03:7c:d6:57:ae:73:b0:c5:69:fb:68:ab:1b:
95:d5:35:cf:06:37:ec:df:5e:ff:c1:72:57:86:14:
99:52:54:f6:14:35:7a:f7:8e:82:ea:f3:15:86:a1:
bd:b1:df:84:7c:01:22:df:51:61:c1:be:f9:9a:be:
b8:ea:11:11:9e:f9:83:09:71:36:1c:53:97:20:38:
79:47:8b:f6:3b:79:5f:6b:aa:6f:1b:a4:95:d7:2a:
da:f2:55:90:13:71:22:c8:f8:5e:3e:2d:aa:38:3d:
25:11:7c:4a:f1:71:b7:5b:f3:96:aa:fd:68:e1:29:
e8:b3:23:8d:7c:1c:03:ec:2e:0c:07:a0:55:c5:29:
e1:d2:2b:81:18:5e:a3:38:12:e8:b8:93:4b:35:9d:
2f:df:61:a5:2b:d6:ac:0c:e0:46:58:97:da:04:bd:
f6:f2:f7:d6:6e:eb:30:8e:fe:57:c6:65:1f:4f:0b:
52:06:5c:5f:4b:81:a2:42:9f:96:46:18:fd:d2:17:
0e:4c:80:23:6d:21:20:40:95:24:78:21:c6:dd:9e:
1e:c7:13:15:9b:1e:34:7b:11:a0:e6:9f:85:42:2d:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DB:BE:69:E1:A0:B5:9C:E7:F7:90:6C:E9:95:C8:9E:72:EE:27:D0
X509v3 Authority Key Identifier:
keyid:A3:72:44:34:8E:71:EC:1B:E5:F5:00:7C:8D:5E:FE:71:25:92:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3JENI5x7Bvl9QB8jV7-cSWSByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b4ad85-16a8-487a-8a77-8852a532ad45/1/o3JENI5x7Bvl9QB8jV7-cSWSByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:dc:2c:ce:cc:b5:35:a8:ce:ea:b0:43:d5:de:9f:08:33:52:
02:01:f9:e1:73:cf:1e:e5:79:7d:c4:5f:95:4b:23:75:26:13:
b5:4e:bd:90:eb:46:20:6d:a5:00:05:4f:46:c2:bf:11:61:ef:
c3:4b:cd:f5:6f:03:ea:1f:6d:81:c8:aa:a3:df:ca:33:f1:f8:
4e:13:2d:9e:2e:c1:3b:2f:75:33:8b:e8:51:38:e6:e9:ea:42:
a2:9c:0c:a6:3e:bb:0f:0e:91:2c:c5:ac:6a:53:48:51:8b:50:
24:c8:1a:c4:67:21:3d:ec:4e:20:72:24:f5:54:b5:a4:ac:57:
07:4e:44:a0:5f:65:30:99:63:bf:bd:3d:21:a5:6c:d3:4e:a4:
0f:19:2f:77:9c:fd:ce:ba:ef:7f:2d:9b:2d:05:b8:5c:ae:7f:
4f:45:fb:36:bf:d2:f0:20:7a:a0:be:be:9b:ec:47:bb:64:27:
40:34:c8:e3:cf:9c:15:24:ca:41:30:4e:23:b8:e7:3e:7e:9f:
96:e1:f2:15:74:46:88:88:af:ff:60:48:12:15:72:6b:04:05:
72:6d:de:b7:6b:95:10:d3:e0:5d:21:83:72:4e:78:5a:86:52:
be:b5:fd:00:56:69:7c:9a:76:53:f6:78:3b:0f:5f:33:cd:58:
6b:a0:9b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:39 2026 by rpki-client