Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
File: O2BOwM_ulmxBmzptXwgrVjwYaL0.mft (raw, json)
Hash identifier: wB4IM+wjLzBCIjIH88UcnNTDGYKPBxIyZH9duscNghs=
Subject key identifier: C0:88:A7:48:69:D3:1B:46:94:41:53:46:87:F7:00:17:49:3F:AC:63
Authority key identifier: 3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
Certificate issuer: /CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Certificate serial: 019CAC4736FDDBB391BE8B7A44B964220E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
Manifest number: 0BF4
Signing time: Mon 02 Mar 2026 02:01:14 +0000
Manifest this update: Mon 02 Mar 2026 02:01:14 +0000
Manifest next update: Tue 03 Mar 2026 02:01:14 +0000
Files and hashes: 1: IQ3VIn1iC9RO_pLlQOak5neUqZY.roa (hash: IKGnOs4cAOZb712YaFJ/S+RpUStTEJE1H/K5bUrnGZo=)
2: O2BOwM_ulmxBmzptXwgrVjwYaL0.crl (hash: ytyMNfvXlyjSilrpSMMvF5EKOTv2nuqnxtO23+J1Vew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:36:fd:db:b3:91:be:8b:7a:44:b9:64:22:0e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b604ec0cfee966c419b3a6d5f082b563c1868bd
Validity
Not Before: Mar 2 02:01:14 2026 GMT
Not After : Mar 3 02:01:14 2026 GMT
Subject: CN=c088a74869d31b469441534687f70017493fac63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:ef:7f:08:7f:e6:9f:07:23:70:8f:8e:0a:
9c:bb:30:3a:b1:db:21:4a:93:f3:b0:43:f2:64:56:
83:a9:f9:2a:96:06:a7:46:b8:87:c5:6b:e8:1e:9e:
6b:5a:b0:59:a4:25:ed:c2:48:09:13:07:38:c5:8e:
5d:9b:2f:2e:53:bf:78:3c:09:c2:ec:f8:1b:35:3d:
a4:2d:b2:d3:3e:dc:e9:56:27:51:9d:24:fc:9d:c1:
b4:e4:ab:20:0d:99:ec:22:ca:52:65:2a:a7:f5:ed:
82:cc:c2:da:1a:35:fa:b1:2f:08:d5:c8:73:2c:24:
ee:43:f2:3e:4c:02:34:34:0e:e1:90:2c:e9:25:79:
08:fc:1d:49:ed:0a:28:b1:89:eb:55:3d:ee:30:36:
73:b7:7e:d3:cd:d8:f6:af:7b:be:81:26:e6:be:f5:
58:30:15:e1:83:f0:4b:0b:5d:89:1d:e2:7d:58:ac:
1e:7d:2b:88:33:1b:fb:92:2a:5b:39:8e:56:bf:66:
f4:92:68:f1:a4:60:91:00:b9:d6:13:a6:72:d4:6c:
07:c1:f1:5f:64:23:77:d2:1b:ab:8f:09:38:5c:2f:
69:d3:2c:46:24:08:0d:21:44:bb:3e:3f:82:76:2c:
87:37:6e:a1:9b:53:59:84:ca:b8:a5:70:db:2f:ba:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:88:A7:48:69:D3:1B:46:94:41:53:46:87:F7:00:17:49:3F:AC:63
X509v3 Authority Key Identifier:
keyid:3B:60:4E:C0:CF:EE:96:6C:41:9B:3A:6D:5F:08:2B:56:3C:18:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2BOwM_ulmxBmzptXwgrVjwYaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/3f5ea4-1868-4a0b-9218-87e9f21b418b/1/O2BOwM_ulmxBmzptXwgrVjwYaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d6:92:fe:d4:63:79:f6:5b:b7:09:15:2c:b8:90:14:69:54:
17:78:16:33:a7:db:cd:02:1f:5c:19:e4:da:27:e3:88:df:cd:
22:6e:3e:26:e1:f0:70:fa:c6:de:f4:0f:2c:2f:22:74:fa:55:
39:6a:67:bb:ed:2f:1b:da:cf:2a:0e:a6:f5:94:c7:24:dc:ad:
c0:e4:15:88:18:a9:09:e0:3c:6d:1e:b1:b0:b7:fe:46:21:06:
06:65:14:14:e1:e6:38:d9:6f:33:9f:be:47:06:30:c7:f5:9d:
96:24:7a:a6:5d:fb:33:05:aa:3c:53:16:3f:0b:3a:1b:ed:06:
6b:dc:09:21:80:6d:ff:b2:8f:19:72:10:c4:74:1a:82:b6:6b:
93:26:50:fb:73:2e:ca:8b:f5:2d:6e:ac:a1:86:90:ed:de:43:
23:cc:d3:8e:5a:18:d8:01:3d:07:73:8a:c7:94:56:55:c0:90:
01:f7:4b:38:82:66:c3:a4:18:9f:df:77:a8:d5:85:f9:28:c1:
6c:38:ca:67:0d:cd:57:4d:cf:da:2e:6f:31:a0:d6:a6:02:a7:
1a:de:45:d5:f1:8f:75:ef:68:d1:1e:61:10:13:ab:ba:14:fc:
00:c9:36:b6:6d:73:2a:0d:f1:4f:1e:ae:ac:76:f1:0d:d4:08:
b0:91:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:36 2026 by rpki-client