Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: ZjRJe54CbyVCI4stYbY0D/5DOOTTUc/Xni0jmbZtvno=
Subject key identifier: C6:68:B3:AA:B9:BA:F1:EE:6E:B5:0D:A7:BA:19:56:A9:94:E0:0B:B7
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 019D99D096906DA56FC4995B40113A2F0463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 1849
Signing time: Fri 17 Apr 2026 05:01:17 +0000
Manifest this update: Fri 17 Apr 2026 05:01:17 +0000
Manifest next update: Sat 18 Apr 2026 05:01:17 +0000
Files and hashes: 1: QR6JCvg_yJC5a7s73DyQnmCM4I0.roa (hash: s2aQJ0ionOhGA/bORwEZg/xbj2CgaA7Pt0VzSP4Fylw=)
2: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: j2O0v0hwO0t+/GqEYdq5sGRf0tNr1MaKj/lTQhJwkxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:96:90:6d:a5:6f:c4:99:5b:40:11:3a:2f:04:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Apr 17 05:01:17 2026 GMT
Not After : Apr 18 05:01:17 2026 GMT
Subject: CN=c668b3aab9baf1ee6eb50da7ba1956a994e00bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:ad:26:36:a3:e4:0d:27:22:f9:c6:5b:cb:
80:5f:fe:52:3f:0d:4d:7c:e5:a1:65:ed:c5:03:b7:
ce:ce:7b:12:62:89:25:9c:bc:81:69:12:f5:b7:ce:
ff:24:46:7e:70:8e:79:3d:f5:23:d9:f0:82:21:69:
5e:11:67:6f:d0:35:bd:c0:e5:1c:f6:4a:29:fb:b1:
48:df:c2:32:12:be:a0:5a:ed:2b:af:3b:da:17:0e:
e4:bb:e5:02:4c:eb:14:30:1b:48:35:b3:83:c6:5d:
6d:5f:58:50:03:5d:22:b5:ce:9b:9d:11:c0:a9:54:
e2:db:81:1f:94:d7:31:20:e5:7c:5e:a6:86:e0:15:
80:2a:da:a3:43:6e:b8:ab:c7:5d:7f:a4:81:3a:cb:
c9:14:a2:04:c0:bd:ae:18:fa:7e:6c:87:29:dd:c3:
7c:9d:70:e4:12:2e:71:be:1e:2a:ef:fb:8c:de:82:
c8:f6:52:52:7a:80:1a:45:15:1e:a5:39:98:94:05:
77:20:50:5e:81:7f:93:c3:e7:ba:88:33:86:28:e3:
24:6b:5f:81:6c:d3:27:d2:10:31:27:0f:df:4c:af:
ad:fe:93:b1:fd:b7:ab:07:43:4e:96:a1:e3:bd:22:
c6:0d:2d:53:53:50:97:5e:53:f3:31:4c:bb:55:9e:
c7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:68:B3:AA:B9:BA:F1:EE:6E:B5:0D:A7:BA:19:56:A9:94:E0:0B:B7
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:19:88:c3:65:49:9e:12:4a:ab:03:61:ab:0d:49:2e:0b:e8:
d7:51:e7:89:27:6b:9b:7f:2a:55:f6:91:b5:16:d2:7a:74:ec:
0a:66:e0:21:4d:5d:0c:66:bb:c3:9d:72:2d:25:95:2f:02:7b:
3f:26:d2:4b:d9:65:d3:c2:ed:6d:3c:31:f2:35:d7:92:08:c6:
9a:3f:8d:c6:17:77:35:4c:73:fe:20:e6:77:e9:66:69:7f:ac:
a7:53:6d:02:f0:72:52:fd:80:df:48:b1:e2:3b:48:15:7b:6f:
7d:51:a0:4e:3b:94:bd:0e:0d:3a:9f:04:f6:f1:87:d8:0e:fb:
67:3c:6b:df:04:a8:e2:30:4b:e3:d6:88:17:2b:dd:07:ca:16:
21:67:f7:7e:ce:58:1c:c1:11:00:20:3c:9d:4f:7d:52:f1:8f:
c9:5e:e7:1f:06:a9:78:21:1e:dc:4e:e9:d2:13:c2:af:d4:4d:
73:b9:84:45:9d:68:0b:c9:17:5f:ff:9d:86:a7:62:2b:1e:0c:
41:ab:df:b4:d3:dd:3e:0c:c6:5a:cf:59:33:96:df:d8:0b:01:
20:7d:b5:e7:f6:41:e5:57:47:34:ba:f7:e5:8f:5f:0e:fb:65:
14:3d:03:21:37:5e:3d:c8:53:59:be:12:28:18:01:06:ec:3d:
d3:45:fb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:38 2026 by rpki-client