Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
File: O2BOwM_ulmxBmzptXwgrVjwYaL0.mft (raw, json)
Hash identifier: XQXt5FFSsFvti96vI+iaBzVC54D9LaHEymnHyydWlQ0=
Subject key identifier: DF:EF:CA:2F:66:7C:EE:5E:FB:AA:FF:20:94:CB:19:8C:8B:80:B2:E6
Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Certificate issuer: /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Certificate serial: 019D97E1B76F10DA74DCA813E91E2BA3E120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
Manifest number: 0C6E
Signing time: Thu 16 Apr 2026 20:00:45 +0000
Manifest this update: Thu 16 Apr 2026 20:00:45 +0000
Manifest next update: Fri 17 Apr 2026 20:00:45 +0000
Files and hashes: 1: IQ3VIn1iC9RO_pLlQOak5neUqZY.roa (hash: IKGnOs4cAOZb712YaFJ/S+RpUStTEJE1H/K5bUrnGZo=)
2: O2BOwM_ulmxBmzptXwgrVjwYaL0.crl (hash: 8vsGElV+GAGpxmwpzbG/18tPJBP+e0LqjzaRkgtNqmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:b7:6f:10:da:74:dc:a8:13:e9:1e:2b:a3:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Validity
Not Before: Apr 16 20:00:45 2026 GMT
Not After : Apr 17 20:00:45 2026 GMT
Subject: CN=dfefca2f667cee5efbaaff2094cb198c8b80b2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:1e:90:df:0a:b2:5a:d2:d5:38:de:42:e3:
26:fc:00:5c:7c:38:d8:b2:4e:0d:2b:f6:d7:d1:06:
f8:dc:68:c9:56:da:1f:16:8e:9a:f7:e2:df:f2:e6:
c7:d0:f4:06:e7:96:68:4a:c5:cb:fe:8d:00:0b:ed:
10:4d:74:57:1f:34:7b:b5:10:d9:8a:b7:0a:4c:86:
3b:28:7a:9d:f3:b9:79:41:b1:e9:45:e3:5d:9b:28:
06:e5:96:43:12:7d:34:6c:63:f4:f7:67:ff:88:07:
78:0c:f8:e4:4f:05:05:3c:90:dd:f0:ba:42:04:75:
c0:6c:57:5f:d5:5b:ad:0c:64:86:58:46:d9:cb:0a:
98:97:12:b6:53:26:e6:17:8a:68:60:94:d4:47:8c:
19:07:ae:5a:6b:88:48:91:fe:0f:4d:8f:7e:3d:f9:
1f:92:0c:64:05:bf:52:79:37:2f:bc:22:d3:5b:af:
f7:c7:1c:19:e6:0f:de:91:2e:b6:b6:a3:71:c8:96:
83:91:f4:3b:61:d8:57:89:dc:db:7d:71:91:53:d5:
4e:80:0e:6c:01:bd:61:4c:7f:9f:6c:88:de:eb:dc:
c1:37:29:fb:69:22:8f:90:f6:81:ee:01:1f:08:e6:
41:90:85:68:15:f7:02:a9:4c:f6:b1:40:78:6e:c4:
c0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EF:CA:2F:66:7C:EE:5E:FB:AA:FF:20:94:CB:19:8C:8B:80:B2:E6
X509v3 Authority Key Identifier:
keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fe:8a:78:00:e9:7b:89:04:37:df:f4:14:cb:c0:ab:2f:0b:
73:ab:47:1b:23:45:25:33:af:86:fd:36:fd:b6:6a:53:5f:ab:
a4:9c:9c:d4:0a:01:8c:1a:3c:c3:e7:e0:4c:60:fb:54:ff:99:
6b:56:a9:55:28:d1:68:8e:1a:21:8f:65:a6:b2:0f:b0:db:59:
97:6b:cd:02:c0:a1:57:8b:1c:10:57:e5:4c:50:6b:8b:f2:7c:
97:8f:06:e2:33:49:e1:bb:97:bc:57:d1:38:8b:f4:ae:56:58:
c1:ed:e4:ea:06:5a:6d:6c:cc:7d:73:a0:f0:ea:11:ec:f2:37:
fb:2f:95:54:2a:5f:af:d6:eb:8f:3b:8c:d3:1e:84:6a:8a:37:
fa:3a:4d:6c:35:23:03:9e:f2:c1:3f:41:c6:b2:d2:f5:ab:f3:
4e:b8:58:71:58:02:ad:af:b9:37:59:fc:8d:9b:31:c4:9d:a2:
fd:a9:42:b1:ac:1b:63:cc:d9:22:b9:53:7e:0e:ee:94:07:b1:
8f:ca:c3:86:fa:f3:e2:3a:8f:54:86:62:e0:08:16:f1:43:09:
4a:e0:28:e0:b6:db:c2:6b:31:56:e5:12:c7:fb:f9:3a:ed:e7:
a3:cc:dd:84:8c:2e:57:5c:8c:64:2f:54:83:fa:90:a1:8c:d7:
16:89:21:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:16 2026 by rpki-client