
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: 9dSvX8nLalBsNjBoXgf6poc0vbZRWLjinu3L2GyvApU=
Subject key identifier: 24:CA:EB:51:6D:CC:AC:BE:46:80:BB:96:86:49:29:C1:99:11:34:F9
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 019D9A3EF141C8EAFF28E6C8C07ECC3456FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 1144
Signing time: Fri 17 Apr 2026 07:01:49 +0000
Manifest this update: Fri 17 Apr 2026 07:01:49 +0000
Manifest next update: Sat 18 Apr 2026 07:01:49 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: FSQsI7nUWAZ3RgIZnJNFWmyB1JbqCJjDhOkbnCwCTr0=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:f1:41:c8:ea:ff:28:e6:c8:c0:7e:cc:34:56:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Apr 17 07:01:49 2026 GMT
Not After : Apr 18 07:01:49 2026 GMT
Subject: CN=24caeb516dccacbe4680bb96864929c1991134f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:2f:d1:57:ed:b8:59:1f:5e:9d:13:9c:d4:
1a:fa:e3:d5:95:3f:0e:3b:ea:2f:d6:c2:f4:81:a6:
a8:e1:13:b2:ac:f9:c5:0a:17:3d:61:79:6b:25:4f:
b8:cb:10:6a:f2:03:e3:e9:7b:37:7e:bb:18:68:3e:
73:12:d0:e5:c9:dc:53:70:64:43:3e:99:90:d6:14:
3a:1b:b3:f5:26:91:a2:6f:c9:6b:b2:5d:08:f5:b5:
ed:cd:f3:3e:4c:1d:77:cd:7c:49:c3:ef:54:67:e6:
58:8e:ac:62:76:68:20:bd:c2:39:5f:fe:4a:3a:2f:
3d:e2:cc:12:53:a7:a8:a2:ae:63:11:9e:94:da:43:
74:39:b8:0e:cd:df:1f:2e:cd:1e:26:63:7b:c1:7f:
b7:9a:46:ce:25:55:c3:bb:3f:bb:76:8c:59:e2:f5:
0e:4f:32:29:d6:94:76:f7:16:e0:5e:98:66:93:96:
31:fd:06:32:1e:de:32:5a:4c:98:bc:ff:8a:d6:1b:
d4:d0:fc:17:ac:21:ca:ac:7f:ae:e5:51:ab:59:12:
c1:cd:c0:11:bb:5c:88:ac:2c:46:f4:dd:d6:95:82:
9f:ef:8c:0a:bf:3e:c4:09:66:50:ce:6e:b9:1e:fa:
9f:50:7a:90:d1:6f:af:67:b0:aa:08:48:dc:88:a8:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CA:EB:51:6D:CC:AC:BE:46:80:BB:96:86:49:29:C1:99:11:34:F9
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ba:15:aa:38:4a:f4:3f:00:f6:7c:18:70:71:13:7b:81:6b:
86:40:bc:57:b5:7e:1e:a0:71:f7:1b:41:e3:d1:ec:02:c7:c8:
bc:d4:88:84:58:f7:40:0c:d7:73:77:2c:eb:92:c8:38:85:53:
23:c3:9b:44:73:a8:37:31:77:46:cb:19:4c:b9:73:1e:73:fc:
a0:49:d4:3b:a9:c7:6f:f7:3f:3b:bd:d0:6c:95:72:e4:e7:2f:
9b:52:8f:08:11:26:d8:f4:55:93:81:b8:96:34:82:83:56:4d:
f2:cb:58:a0:77:51:7b:e5:18:c3:4e:d8:5d:c4:d5:6d:9f:42:
ea:00:e6:61:02:bb:20:38:8e:7b:45:a0:4d:4f:d7:a5:40:6c:
60:61:fc:a3:fc:c2:07:d2:bd:93:2f:18:f2:46:9c:94:ff:61:
d9:71:7f:77:d1:4b:9e:29:a2:84:3c:d8:8b:00:e8:eb:16:72:
ca:e1:ef:e4:74:73:b9:a6:75:b3:56:b1:aa:bf:57:4a:e6:fe:
76:77:5b:6e:9e:07:ae:b2:66:78:52:f3:ec:57:f9:fb:05:d0:
3d:e4:83:61:09:9c:13:71:c2:4b:a3:81:55:dc:e5:46:ca:cd:
b8:ce:66:29:a6:5f:a8:81:53:1c:19:b3:a8:ec:30:a3:23:4f:
55:ea:28:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:09 2026 by rpki-client