Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: CzsmYNhc82s2BkunyGEeZ1LHUYQjY8tO/K31C85dslo=
Subject key identifier: BE:38:BE:C3:F1:56:ED:AD:22:3E:6B:C9:DD:EB:FB:2A:27:CD:67:19
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 019CAC472ABBB60355DE92D119CE3D919C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 17CE
Signing time: Mon 02 Mar 2026 02:01:11 +0000
Manifest this update: Mon 02 Mar 2026 02:01:11 +0000
Manifest next update: Tue 03 Mar 2026 02:01:11 +0000
Files and hashes: 1: QR6JCvg_yJC5a7s73DyQnmCM4I0.roa (hash: s2aQJ0ionOhGA/bORwEZg/xbj2CgaA7Pt0VzSP4Fylw=)
2: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: 59NCVHfiTDCwJL+rvRFMoe7CbAd1t7Xw1aICNeqT3iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:2a:bb:b6:03:55:de:92:d1:19:ce:3d:91:9c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Mar 2 02:01:11 2026 GMT
Not After : Mar 3 02:01:11 2026 GMT
Subject: CN=be38bec3f156edad223e6bc9ddebfb2a27cd6719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:48:b7:c7:04:72:cb:5e:6d:da:bf:ae:c1:e5:
7b:57:e3:2a:87:2d:16:48:57:a6:e1:c0:03:25:5f:
bb:1f:58:71:f6:67:8f:da:0d:03:8a:31:55:30:43:
89:c5:a9:1b:74:ef:99:79:85:f2:a2:5d:82:3c:e5:
c3:d7:53:19:3f:68:70:29:73:d3:28:0c:59:97:71:
0a:db:b0:30:9d:72:ec:72:a8:14:9a:4d:16:e0:17:
16:f5:9c:24:d6:67:eb:27:fe:e0:ec:f0:f9:58:e3:
76:5b:3d:20:93:cf:78:58:51:86:cd:4a:96:e8:85:
23:20:fb:4c:b3:f7:8f:c8:23:ec:64:cd:97:27:9f:
a8:ee:81:9d:77:26:e5:a5:8d:69:54:32:88:a4:ef:
b9:9b:8b:bf:e1:40:04:ad:ac:f0:b1:86:24:59:04:
f6:f8:74:9d:f1:63:5b:6f:04:85:60:aa:7d:ad:50:
0e:88:07:82:9a:af:0e:a9:4a:6e:22:30:7c:e6:0e:
e7:4b:eb:13:8b:a7:ac:31:1b:83:aa:f3:d2:e5:8b:
4b:a6:e4:bf:c1:47:9a:b7:e9:f2:69:27:0c:97:b1:
b2:21:39:69:03:e6:42:68:08:ee:2d:6f:35:25:b6:
c0:70:ee:b3:3b:5d:a6:a1:c5:66:a8:db:66:a9:5b:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:38:BE:C3:F1:56:ED:AD:22:3E:6B:C9:DD:EB:FB:2A:27:CD:67:19
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:6b:0f:73:3c:42:3a:bc:33:5b:89:54:5f:a6:7c:15:a0:
e6:73:65:3c:f8:11:8f:36:bb:24:d1:c9:e7:41:59:4e:05:cb:
22:97:b8:c6:f4:00:db:50:4f:13:22:5b:d8:96:a7:67:4d:96:
81:89:db:f2:e1:41:8b:34:a0:a0:e7:e2:43:76:2f:f7:5d:55:
38:1d:9e:93:14:3a:5d:32:f8:9a:44:32:42:b4:b8:a1:d1:5a:
d8:44:ca:4c:b6:a7:f1:81:aa:ac:c6:52:33:a6:72:46:1f:d4:
18:13:ff:78:a3:7f:c1:cc:a4:a4:2c:18:0c:c0:eb:0a:d7:8b:
bb:27:7b:d6:03:90:43:ed:83:0d:ae:9e:2e:13:14:11:40:cd:
e0:bb:07:b2:7c:af:7e:93:d7:25:3f:96:09:56:b3:fd:60:6d:
d6:58:e8:d1:ac:39:27:ad:cc:55:9e:60:6f:0a:a7:cb:b5:35:
ac:a0:82:5e:a8:45:87:62:12:28:4f:7c:4e:69:96:98:7d:a3:
10:d4:af:21:91:d5:ec:00:05:6c:24:cd:f9:c5:c0:50:c7:c9:
53:08:10:b3:2a:18:f3:82:13:2e:5c:8d:af:93:51:43:66:31:
68:85:37:b9:0a:c1:ff:cc:fe:e7:06:61:42:fe:0c:f3:e7:bb:
3a:2a:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:31:46 2026 by rpki-client