Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: ipIq7vh/XSPIzD7ul3l74qQwg8/7RRQ/QgAY6X2R0v4=
Subject key identifier: CB:C3:AC:19:01:F1:8C:45:87:4D:39:E8:C1:78:F5:87:40:8E:56:55
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 019CACB57F56C776C7F1B7C60EE9DAF0E34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 10C9
Signing time: Mon 02 Mar 2026 04:01:41 +0000
Manifest this update: Mon 02 Mar 2026 04:01:41 +0000
Manifest next update: Tue 03 Mar 2026 04:01:41 +0000
Files and hashes: 1: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: brp1f3QEpEe95RRkdHobZ8fQ3ZEm5m61qUPpNWWsYIw=)
2: tRrojmCf6GIHy7rOSc8HEorjdDM.roa (hash: P8uZJNdgJmiR9RNimT+TldXg8dI9zNVaN+cuOggU5GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:7f:56:c7:76:c7:f1:b7:c6:0e:e9:da:f0:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Mar 2 04:01:41 2026 GMT
Not After : Mar 3 04:01:41 2026 GMT
Subject: CN=cbc3ac1901f18c45874d39e8c178f587408e5655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5b:0e:35:47:d3:4e:5d:56:07:c0:ea:36:39:
9d:24:50:ec:59:85:9d:4b:f9:be:ed:75:a5:a9:ef:
4d:b1:1a:0f:83:66:5c:3a:9f:6c:a2:cb:44:5d:41:
56:58:7d:55:b5:2f:a1:c4:21:18:56:4c:98:ef:f1:
f7:11:ef:7e:df:5a:fd:c1:75:ba:19:bc:86:5f:73:
94:5e:d0:15:36:c9:0e:a2:2a:ca:57:2d:2d:a0:62:
6d:7d:57:ac:23:a4:5d:99:56:1f:bd:83:b9:6e:22:
a8:28:b1:b1:34:10:76:5d:54:a6:f7:a0:55:d9:f7:
ab:84:82:2d:bf:2b:26:4d:a6:db:a7:52:d0:c7:03:
e6:18:f5:ee:87:d4:88:e2:3e:2b:09:e3:21:8b:5a:
60:e7:26:7a:52:5c:c5:da:c3:da:ff:9f:77:cd:62:
15:05:8e:5e:fb:c5:c3:4f:2e:bd:b8:2d:41:98:11:
07:73:cd:f6:8c:5e:5f:c9:00:b3:af:85:e6:23:51:
ff:33:86:d3:4a:ed:9a:a0:0e:7f:61:73:85:48:c9:
4b:23:2e:a5:6e:2e:f4:00:cc:89:dc:8e:76:d0:67:
3c:46:95:7e:8a:0b:0f:d5:85:f3:91:93:45:dc:6e:
dd:f3:48:45:02:3e:d0:72:b4:82:b2:f3:c5:9b:44:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C3:AC:19:01:F1:8C:45:87:4D:39:E8:C1:78:F5:87:40:8E:56:55
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:51:d0:6c:8c:4e:68:f6:81:6a:ae:21:b4:78:23:b6:8a:79:
7e:29:69:84:9e:45:b4:fe:95:ce:ae:95:ce:84:a8:26:c8:98:
6f:39:5e:ce:81:d1:5b:43:32:1b:ed:72:98:07:34:84:72:ab:
ee:3f:55:bb:d7:25:d8:96:dc:44:ed:18:bc:a1:41:d5:9a:da:
4d:5f:e0:9f:a9:b3:47:6a:cd:55:28:a3:45:5f:32:33:8e:17:
8e:a1:4b:e6:ed:72:9b:48:f0:e9:38:93:b3:41:50:a9:b2:7d:
c3:ca:23:7b:5a:77:47:d4:62:42:de:d8:ef:c3:b1:4a:a0:54:
80:f0:70:5d:b9:01:c4:3d:e2:52:35:e8:33:a7:b2:d9:50:17:
1a:7d:58:57:28:7a:6a:75:73:18:22:16:90:0e:bd:16:6a:d1:
3d:fa:78:d6:aa:93:d0:15:ee:e0:39:13:1a:d9:28:f3:e3:21:
b2:4c:a1:7e:6f:d3:de:b8:49:4c:ad:59:2c:7e:6e:23:5a:03:
a0:f9:3e:2d:32:a6:88:12:90:07:8b:f4:77:f4:b4:d3:bf:12:
a8:93:f1:dd:9d:0c:97:c5:39:e2:71:cf:54:1f:e6:19:77:35:
05:4d:53:06:54:b7:80:f7:a2:37:2d:5e:c4:24:78:83:32:8d:
ad:ac:31:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:44 2026 by rpki-client