
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json)
Hash identifier: PcvjZ5UN6vsVuoWdQSX4iAm0kGXD7YEod6jLpf4K3EU=
Subject key identifier: 84:A7:16:28:EC:D9:D6:8D:AB:05:87:27:A5:B2:AA:D3:F1:49:C4:38
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 019CABA260C533F67E6086430B208495C792
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 23:01:11 +0000
Manifest this update: Sun 01 Mar 2026 23:01:11 +0000
Manifest next update: Mon 02 Mar 2026 23:01:11 +0000
Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=)
2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=)
3: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=)
4: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: ndAFu0Y4lQmkwTiBf9DNWphV64d6RtTd+F7BjOI722A=)
5: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=)
6: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=)
7: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=)
8: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=)
9: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:60:c5:33:f6:7e:60:86:43:0b:20:84:95:c7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Mar 1 23:01:11 2026 GMT
Not After : Mar 2 23:01:11 2026 GMT
Subject: CN=84a71628ecd9d68dab058727a5b2aad3f149c438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3e:6a:07:70:5b:54:a6:2f:f3:3a:f1:3e:7c:
dc:90:76:08:a2:47:99:de:38:96:1a:b4:1b:a5:70:
5e:eb:34:5d:d4:0f:73:46:9b:14:68:c8:99:ab:af:
3c:06:18:c4:88:50:b9:f1:bd:55:31:d4:3a:81:2d:
49:5a:e6:3e:23:87:63:d7:ac:c4:c3:d0:e7:2f:5a:
59:68:24:77:3c:0e:71:5b:d6:a3:2d:4b:b7:de:cf:
9c:2f:a2:e8:3a:08:f3:e4:6f:f5:3b:45:e6:53:2c:
a7:65:8c:d6:76:95:dd:ac:8b:bb:4a:8d:62:a6:f1:
98:cf:09:d1:05:44:c9:68:26:c5:53:73:3a:ba:8f:
d5:41:89:ae:4e:92:e2:07:23:5b:6e:09:e3:8c:2e:
cb:79:15:81:16:89:e9:34:77:8f:b1:d1:dd:85:e5:
0b:3e:c0:35:e1:6d:d6:ca:92:0d:78:c0:9c:d4:e5:
b8:99:0e:13:f9:68:52:0d:0c:af:e9:d7:54:ff:15:
12:16:87:2d:04:bb:47:5e:eb:3e:27:a7:75:01:dc:
83:cc:17:f2:cb:a4:8b:10:d8:f4:12:76:1b:40:d9:
64:b1:9b:fa:bf:b5:e2:e8:8c:b0:6b:0e:96:76:6e:
94:b4:e5:da:d4:9e:0c:48:e0:b5:32:f3:d4:3e:1c:
dd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:16:28:EC:D9:D6:8D:AB:05:87:27:A5:B2:AA:D3:F1:49:C4:38
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:59:2c:4c:65:dc:1d:76:31:dd:94:f4:db:cb:09:15:f1:76:
d5:6b:d3:0b:5c:5a:a6:d0:28:64:06:7c:a3:1d:85:69:8e:ba:
be:3f:d2:e0:de:52:ef:01:de:04:b8:85:74:43:7a:36:e6:8d:
11:31:de:64:ef:69:f5:20:95:39:1c:f4:be:37:34:d9:83:a1:
76:fc:17:75:d5:18:18:8f:36:b8:e7:3f:62:f3:87:8e:c9:6b:
23:62:8f:bd:1d:b4:cf:0a:27:75:a2:99:45:ee:be:cf:ca:bb:
82:d0:29:7d:8b:bb:bd:fb:70:8f:4c:74:25:87:2c:88:77:1b:
06:7d:d0:cd:e1:da:89:6f:21:7a:03:fe:d1:b7:31:eb:2a:28:
58:2b:98:ad:31:e4:5d:3f:ab:d5:74:38:78:5e:c5:e6:6b:97:
c3:3e:2f:4f:6e:da:6b:f2:69:d3:34:ac:3d:18:5f:bf:b0:53:
3d:3f:50:22:fb:f6:be:b9:11:42:97:92:d9:1d:6c:35:23:b9:
dd:42:11:ab:00:0c:9c:56:be:79:b5:0a:2f:db:35:64:ad:a5:
28:4e:c4:c6:45:7c:fa:50:bb:bf:9c:f7:67:56:34:df:59:3d:
3e:e8:b0:e9:92:2a:e4:80:f5:aa:1c:7c:85:1a:86:ae:e8:b8:
1d:8c:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:53 2026 by rpki-client