
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
File: O1wkZ1RvSweKAiTaHMrFwofpNFM.mft (raw, json)
Hash identifier: APgse6Q0DwbLvxMpE0BLaBnpQAgLd7M//qbOb28PfEk=
Subject key identifier: 3B:47:37:3D:68:92:24:43:D4:15:CD:4B:FD:FB:6B:D5:72:77:56:F8
Authority key identifier: 3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
Certificate issuer: /CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Certificate serial: 019D9818DEF0485C4911537BFB2D7E6A3FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
Manifest number: 1610
Signing time: Thu 16 Apr 2026 21:00:59 +0000
Manifest this update: Thu 16 Apr 2026 21:00:59 +0000
Manifest next update: Fri 17 Apr 2026 21:00:59 +0000
Files and hashes: 1: O1wkZ1RvSweKAiTaHMrFwofpNFM.crl (hash: eJqV8As8aKxOq37+rK06au9htxgMa7L2b/aDQxIHl08=)
2: Q3KsXzG_1owp4twp3h32beoBh9Q.roa (hash: 95YPdhWrEz7hBrK+p1i4JTgHUiXN7Vq6G7x0WIDZtrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:de:f0:48:5c:49:11:53:7b:fb:2d:7e:6a:3f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5c2467546f4b078a0224da1ccac5c287e93453
Validity
Not Before: Apr 16 21:00:59 2026 GMT
Not After : Apr 17 21:00:59 2026 GMT
Subject: CN=3b47373d68922443d415cd4bfdfb6bd5727756f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:7b:24:c7:00:32:97:85:5b:3c:3e:34:0d:
cd:c3:ac:b3:93:68:79:d2:65:93:74:4f:62:d6:6d:
d5:43:7d:c8:f1:0a:09:21:38:f2:1e:40:16:0b:a9:
2f:39:ad:58:3c:1b:2b:fe:61:7d:54:7f:38:fb:07:
cd:df:e0:70:89:e9:dd:ad:36:29:47:dd:8c:8c:89:
56:c0:66:d7:e5:09:a6:b8:d4:38:30:d2:32:54:53:
4d:0d:f7:f1:2b:ee:ad:35:1b:ed:b1:4b:01:99:64:
a6:1f:cc:0c:13:41:10:af:5b:d5:3b:69:80:93:e2:
b3:12:9e:f4:39:a6:3b:24:63:4c:aa:05:e5:a9:72:
63:5d:a6:73:8c:0d:dc:2f:7f:9f:28:8f:71:9b:ca:
c3:5f:ce:eb:0d:c1:c2:35:ff:fb:b8:17:ff:c8:36:
09:77:77:f8:4f:86:f5:ed:e1:e8:bd:d1:39:95:e5:
1e:57:a5:5e:67:e0:43:17:87:71:a6:81:26:f9:4d:
ab:00:cd:76:a9:38:68:0f:2e:c1:15:06:8a:d4:46:
d9:43:9e:e4:19:77:08:2e:0c:14:ec:63:2f:10:c7:
a7:f6:96:64:c0:eb:10:6c:2a:d7:c6:49:fd:20:15:
f5:9c:77:aa:19:7a:b8:5b:1b:a7:44:f8:0b:1d:8f:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:47:37:3D:68:92:24:43:D4:15:CD:4B:FD:FB:6B:D5:72:77:56:F8
X509v3 Authority Key Identifier:
keyid:3B:5C:24:67:54:6F:4B:07:8A:02:24:DA:1C:CA:C5:C2:87:E9:34:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1wkZ1RvSweKAiTaHMrFwofpNFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b58d94-b564-4d49-a8fd-5c096a87bb07/1/O1wkZ1RvSweKAiTaHMrFwofpNFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c7:18:8e:b8:b4:19:d8:77:c9:97:c2:45:ef:b5:4d:28:a9:
a7:eb:0e:29:84:c0:9c:de:0c:b1:5e:46:22:9e:e2:d1:2f:8d:
06:a2:80:d4:07:30:3e:87:e7:dc:87:e7:f7:78:57:9c:4b:7e:
b1:82:64:e2:78:09:88:e8:f0:2b:82:5c:e6:8c:1d:fe:b2:e0:
d0:a5:ff:77:a1:6d:cb:90:b7:6f:25:c7:0a:be:3f:e2:f7:18:
95:9e:40:b8:3d:a0:ea:a9:ed:dc:d1:10:c3:c0:23:9e:38:27:
93:c7:5b:05:33:38:8a:5a:02:62:5f:05:d1:d0:2d:3e:35:fb:
8d:c7:55:c0:ad:6d:aa:e0:3b:74:0d:1b:ca:42:b2:7b:e9:d1:
11:ad:ce:b0:37:6d:a6:89:44:1f:17:e9:53:ec:d6:ed:18:27:
12:bd:46:e8:e5:c0:f5:91:22:8b:86:5b:01:77:30:2b:cb:20:
8e:2c:5c:e3:a1:0a:cc:fd:ca:ad:74:58:3e:93:57:5f:5e:a7:
60:6b:f3:db:f9:8b:95:9e:e9:d5:aa:62:bc:f4:51:36:ec:50:
aa:38:a1:2f:73:bd:65:c8:5c:86:54:f1:f1:ff:36:e6:9c:0a:
6a:8d:67:e4:32:e9:47:20:45:49:4a:40:a1:53:62:43:18:c4:
62:9c:f7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:58 2026 by rpki-client