Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: RmneA/N2v/O3LVdHfP5OBxvnl3NBUaMl74yuimDAUQ8=
Subject key identifier: EB:53:EA:E7:BA:14:A6:64:70:1E:3D:E6:F9:C1:5C:31:CE:3C:01:50
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019CAAC72163C6465C0D371036D8D0D81213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 19:01:42 +0000
Manifest this update: Sun 01 Mar 2026 19:01:42 +0000
Manifest next update: Mon 02 Mar 2026 19:01:42 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: NsEtTifosjActjHrBA/RLyZ2sSLyJA+T0ypfWMMX++c=)
2: QqdbypBpxrcLYznZBUaAaDr_z-o.roa (hash: SckJVSoL8gUL5QOdfT/4r5cTNoKe863XSPeR8+BnWmM=)
3: avaEnMlL7981ZoHlCmFBVvkLBCM.roa (hash: 62norVZ5aOhRAssdJbDmNAm3FE+gQIMFJ2pokt5w/9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:21:63:c6:46:5c:0d:37:10:36:d8:d0:d8:12:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Mar 1 19:01:42 2026 GMT
Not After : Mar 2 19:01:42 2026 GMT
Subject: CN=eb53eae7ba14a664701e3de6f9c15c31ce3c0150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:c7:4f:4e:6b:4b:38:28:96:68:10:db:92:
a2:19:05:cb:a4:c1:b7:80:bb:40:88:88:ec:f1:0b:
0b:05:ee:19:40:07:59:10:2e:68:08:21:46:8c:bc:
76:db:74:13:15:c5:00:d6:3c:04:77:c3:18:6c:be:
98:18:e2:7d:c7:76:f9:01:a9:68:b3:82:79:ad:24:
b1:7d:3b:84:a3:1f:b7:9d:5e:3b:ef:ad:d2:ee:10:
b4:d3:8d:61:16:2f:86:83:bb:b8:6c:91:52:67:c5:
31:0f:90:75:83:ca:31:08:5e:07:03:40:6f:fa:b0:
b4:57:81:7c:d9:fa:8f:6d:2f:44:ad:0e:fa:51:28:
26:65:a9:9e:78:40:4e:d9:ab:fc:69:a9:11:8c:dc:
1e:a5:46:99:db:c5:1b:44:91:ef:84:6f:34:1b:45:
a8:e5:95:1c:00:e2:91:b2:7d:cf:50:6d:67:e4:1b:
33:13:28:6e:93:3f:b4:49:2d:bc:8f:08:2d:b9:0a:
a4:4b:88:4d:a0:fc:46:d8:37:2a:05:a5:4a:5f:f4:
cc:15:36:4a:34:0a:9b:d2:97:7c:59:44:a5:b8:a3:
e0:d3:74:87:94:72:d7:58:c5:d5:a1:33:23:0c:0a:
81:0e:7c:07:cb:ef:75:49:d0:6a:3f:c7:9e:4f:21:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:53:EA:E7:BA:14:A6:64:70:1E:3D:E6:F9:C1:5C:31:CE:3C:01:50
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6a:da:fc:b4:b6:81:82:ba:38:1e:2f:63:8e:5a:15:43:d9:
dc:9f:71:62:bf:e8:94:7f:cd:a6:5d:2b:ba:0f:9a:e6:a8:f2:
c7:2b:51:a5:be:9f:2f:02:4b:61:7d:4a:a7:4d:93:49:4a:4f:
ab:fa:b4:af:46:f0:4f:89:2f:56:04:64:49:58:62:fe:67:54:
ef:4f:a3:0a:01:f9:c6:07:39:57:30:79:85:bd:34:ad:81:f3:
04:d6:68:a4:af:84:dc:9b:b3:ec:f1:0c:e7:1b:cb:31:c1:2f:
2f:dd:20:43:75:78:e6:9a:c5:2d:66:8f:8d:25:37:62:d6:19:
fb:c6:13:5a:57:fc:a3:46:10:0b:f8:38:b6:ab:94:f9:c7:1e:
5b:d6:d9:2c:3b:84:4c:0a:36:81:e7:85:fe:a1:e5:00:c2:51:
c1:de:90:6e:6a:7b:aa:29:93:5f:a9:ac:8b:ca:91:03:41:12:
bc:9c:c8:ee:07:44:6e:81:a2:9c:fd:e0:65:f5:d4:e7:ed:96:
64:4f:53:99:bc:0c:86:bb:70:ee:29:68:a8:16:01:34:7d:de:
5f:66:c9:7b:a7:35:8d:4b:e6:a9:e4:0e:e1:f9:f4:1e:96:ab:
09:93:76:12:50:5f:d5:3e:e1:84:b6:dd:b8:7e:86:b2:a3:86:
bf:57:99:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:26 2026 by rpki-client