Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: 2dLpLA5h2JFFb9cGYboNuzRpccm9+KAt2DTKeB0yezA=
Subject key identifier: F4:F6:B5:00:69:47:CC:AD:22:1A:BE:2B:23:3B:56:51:75:55:71:6D
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 019CAC47117F7C840CB811512EA398C268D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 070C
Signing time: Mon 02 Mar 2026 02:01:04 +0000
Manifest this update: Mon 02 Mar 2026 02:01:04 +0000
Manifest next update: Tue 03 Mar 2026 02:01:04 +0000
Files and hashes: 1: IK0e8QDmHj3hNcr3qlL6Dq22OBU.roa (hash: rjt1GPioTzLz/WmxHMW/A6JbnHN5M/Apy60NB3OPgNY=)
2: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: +b4JfSYyoSplSXj2QDnDCluUTvw8R/t3h6sibQpWeXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:11:7f:7c:84:0c:b8:11:51:2e:a3:98:c2:68:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Mar 2 02:01:04 2026 GMT
Not After : Mar 3 02:01:04 2026 GMT
Subject: CN=f4f6b5006947ccad221abe2b233b56517555716d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:e1:28:e8:fd:17:19:e8:e3:25:de:66:e8:
03:f0:f8:18:5f:bf:11:79:ae:12:5b:f3:b9:c1:26:
bb:dc:4d:0b:fc:c6:31:e9:36:9b:1b:00:c0:86:14:
f7:bf:5b:da:53:a7:37:c3:13:fe:78:3b:ee:9b:cd:
ab:a0:fc:51:77:22:66:1b:26:3b:f3:db:f7:dd:93:
c4:63:99:0d:c3:9f:1a:70:4e:6c:a0:6c:86:b1:f0:
f3:a8:5b:e0:8f:51:56:f7:a4:a3:29:fb:e0:b0:ef:
c8:12:b0:73:95:25:af:1a:71:b6:06:4e:70:83:4f:
ee:d4:4f:d4:a4:fc:fa:93:25:ea:6b:6e:c7:39:55:
d1:63:31:c0:d8:46:a5:80:5b:b7:a2:59:7b:46:92:
5d:8a:29:b7:38:60:94:d9:1f:a8:65:63:f1:8a:7c:
9c:5b:4a:7e:aa:26:07:37:ff:b1:8d:c4:49:22:c2:
e4:66:61:63:bc:72:18:e5:32:ae:b8:04:1c:66:b5:
47:02:ce:0b:ef:51:fd:d8:cc:a6:f1:c8:c6:6e:a8:
47:c7:3d:35:3e:84:57:d6:7e:2e:f0:a4:4c:d6:6d:
23:fd:79:ae:ce:9b:f2:23:72:2e:a1:2b:0f:e5:de:
cd:b6:71:0f:21:8c:df:21:c0:49:61:98:4c:28:75:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F6:B5:00:69:47:CC:AD:22:1A:BE:2B:23:3B:56:51:75:55:71:6D
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:49:d8:f4:18:7b:a7:c8:2f:db:0a:86:57:7f:7a:26:c2:93:
84:a8:ad:1f:69:24:0a:64:ad:65:6f:01:3d:31:52:a5:02:38:
ef:71:b9:a5:65:78:45:94:aa:42:e9:f9:bc:5f:d1:76:fa:fb:
26:97:27:c7:8c:70:de:a1:fa:8d:76:6e:57:f0:45:38:1e:b8:
cf:8c:da:98:04:89:93:fb:f4:a7:03:69:c7:9f:25:4b:94:78:
c2:79:cb:6c:c1:98:c6:00:0c:f4:77:ba:8c:6c:f0:e1:5a:1c:
76:15:0e:71:5a:9d:c3:fd:88:63:4a:ac:42:bb:f1:9b:d5:02:
92:3d:64:13:71:b9:e2:6f:07:0b:2a:06:f6:e6:dc:84:d5:f7:
96:ac:8e:b4:9d:52:50:55:6f:66:e8:58:f5:da:48:a1:3e:1a:
5a:25:c0:51:45:6b:5a:17:37:dd:dd:99:f5:27:23:bb:bb:00:
18:c7:93:16:c8:7f:3e:b4:e6:c9:5a:72:f2:f4:c7:8e:22:56:
cb:fa:f1:88:ad:2c:1d:35:b1:14:01:3d:cb:a8:fc:4f:76:8b:
55:19:d7:69:fc:0d:d7:87:e0:a6:01:e0:32:42:54:c8:d0:dc:
f9:3e:b5:64:25:31:e4:f3:97:38:52:29:ff:a0:c3:07:c4:06:
c5:d5:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:27 2026 by rpki-client