Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: BvGXow8mRYIMZ5Mc6X0xZy17mBIex9VgUGIRLV9bRzQ=
Subject key identifier: 3A:5B:CA:75:4B:A2:B7:60:F3:21:3A:B0:7D:3E:71:D9:85:94:00:19
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 019D9BF51888158909B52EE9F22B447E16C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 01F3
Signing time: Fri 17 Apr 2026 15:00:24 +0000
Manifest this update: Fri 17 Apr 2026 15:00:24 +0000
Manifest next update: Sat 18 Apr 2026 15:00:24 +0000
Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: BG7V4VNVhvo0s64NfnkLceSHH+tyvy/bbC8qL9liJDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:18:88:15:89:09:b5:2e:e9:f2:2b:44:7e:16:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: Apr 17 15:00:24 2026 GMT
Not After : Apr 18 15:00:24 2026 GMT
Subject: CN=3a5bca754ba2b760f3213ab07d3e71d985940019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:3d:8b:97:cc:f3:51:25:c4:96:d3:74:26:
9a:17:64:1f:46:06:9a:af:53:36:ce:80:6f:2c:86:
4b:24:5a:4b:55:56:38:be:1b:01:77:7f:f5:06:90:
6c:ee:e3:e9:0c:5e:26:47:b7:b0:44:64:a2:a9:f5:
3f:23:33:01:23:74:f2:d7:43:d1:a5:02:83:30:9f:
62:2a:07:3a:a0:86:98:42:00:76:32:a6:6d:c6:96:
e0:ff:50:cb:28:83:f9:60:22:28:2c:c1:ad:e2:2a:
3e:59:d5:1d:d0:af:a1:e3:85:f0:b8:4c:c3:d7:6b:
76:9e:f1:8b:78:b2:ae:25:ab:6b:a5:bd:38:72:f4:
54:1a:54:1a:51:7f:04:c7:b1:b9:9b:dc:62:9d:ba:
ff:70:1e:b3:5f:97:98:6f:8d:7e:c1:d9:22:54:21:
fa:6e:b0:dc:08:4a:51:a6:95:12:25:e5:d8:81:6b:
f6:d5:f7:16:ac:8c:56:06:d8:1c:9a:98:3d:8c:0c:
cc:bb:3b:91:9e:66:ae:31:da:c7:c7:e2:d9:5f:a5:
55:ce:1c:93:a9:21:1e:98:07:d3:a1:a4:ae:1d:62:
3c:b2:75:5d:33:5e:e0:6f:1d:8e:32:de:4e:d9:87:
72:44:21:7c:e6:67:dc:de:e2:c1:f5:37:f2:0e:15:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5B:CA:75:4B:A2:B7:60:F3:21:3A:B0:7D:3E:71:D9:85:94:00:19
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4c:5a:80:b1:67:09:4a:6e:c0:00:19:22:1f:6f:cf:aa:1b:
7a:a9:0f:b3:23:11:e4:db:5e:43:35:9c:22:e9:24:c1:13:3d:
29:4c:aa:4e:d8:93:7a:d9:4c:90:6d:e0:11:b2:65:4a:b4:06:
85:b8:b7:a8:04:10:74:ee:bd:5a:d1:76:ce:d6:15:47:6f:69:
52:82:9a:3a:10:16:fc:9c:4f:34:d0:ab:5f:16:2a:1a:80:8a:
95:a4:d9:0b:ac:f3:3a:10:be:bd:e4:96:38:cf:a0:e4:99:ba:
ff:ab:af:bc:91:6b:89:04:7a:ed:f0:19:fa:ce:ae:db:cc:37:
b7:39:99:7b:c3:85:24:b4:2a:90:96:88:5a:53:6e:b4:ab:ab:
cd:99:1c:9e:92:08:2a:f1:27:5c:c3:47:2c:d3:c1:44:8e:98:
7c:8c:ea:cd:01:b7:5c:f9:d3:7c:33:a2:96:49:c6:82:7d:f2:
51:73:1e:a6:93:66:2c:4c:33:16:25:50:35:f4:54:51:55:47:
3a:02:84:5d:8f:80:3f:b5:a3:73:a9:4d:ff:c3:8e:82:78:8d:
93:c9:58:1e:d7:8e:b9:04:0d:09:b6:36:03:ea:ee:e4:2b:fa:
89:5b:5a:eb:04:e5:6f:f9:8a:cb:f1:c2:11:4a:94:2b:42:e8:
12:a9:e9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:18 2026 by rpki-client