Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: 6wEcf46qyh0jwUDYRqXltUmxqLfuvijguPeI348p7yc=
Subject key identifier: 80:41:0E:A7:9D:B2:EF:22:25:73:40:28:AF:2E:7D:15:3F:F6:DD:D0
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019CAB6B7915B1348A0BB29628B08CD07B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 22:01:13 +0000
Manifest this update: Sun 01 Mar 2026 22:01:13 +0000
Manifest next update: Mon 02 Mar 2026 22:01:13 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: gouO/LrUWJSDLRftE7Kd4CB74JkAi7MBTDCEPqqAGz8=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:79:15:b1:34:8a:0b:b2:96:28:b0:8c:d0:7b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Mar 1 22:01:13 2026 GMT
Not After : Mar 2 22:01:13 2026 GMT
Subject: CN=80410ea79db2ef2225734028af2e7d153ff6ddd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:3a:35:aa:62:23:be:88:91:99:bb:35:53:
33:90:b1:fd:52:7d:fe:6d:56:ef:42:c1:d8:cb:fe:
ab:c5:16:93:f0:c3:ca:99:76:81:a5:ef:e9:ee:40:
bd:30:8d:f8:21:6a:d2:9a:bd:d3:b0:26:57:48:e6:
d9:f1:3c:8d:86:a3:50:fb:be:60:54:d5:96:1f:a2:
57:d6:4c:03:fd:87:2e:45:a4:69:50:d0:74:67:95:
66:79:50:a4:9f:69:b8:26:e6:1b:2b:49:85:a8:b7:
c8:3a:ba:c3:a3:2f:a4:60:65:cd:67:42:4a:e3:2b:
b3:21:ce:77:1b:ad:c3:40:6c:18:b4:c8:27:07:5d:
21:ec:5c:7d:40:0e:1c:7a:cb:b1:44:63:81:f4:77:
f8:2d:8f:75:05:07:6c:25:25:64:a2:d3:b8:d2:c4:
ee:da:cd:9c:54:aa:4b:d0:e6:64:92:53:ff:57:a7:
47:b8:d4:e7:e3:48:48:77:4a:17:98:c5:ee:5a:07:
6f:36:df:c1:56:e1:fa:9a:49:33:19:5d:d5:b5:b3:
9d:ac:3c:2d:2f:cc:e8:f2:36:3c:e4:63:18:75:19:
3d:2b:e0:0a:42:31:1c:18:31:59:9f:79:05:87:31:
68:45:a4:89:c7:da:07:f2:ea:52:1c:2b:9e:48:76:
bf:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:41:0E:A7:9D:B2:EF:22:25:73:40:28:AF:2E:7D:15:3F:F6:DD:D0
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:71:39:61:a4:9b:13:d4:e5:85:ce:bb:d4:5e:f4:fc:ac:8f:
56:45:e5:e2:45:4d:53:8a:10:af:7e:e8:bd:7a:72:c1:76:1b:
e6:61:c9:66:68:6b:3b:a3:84:fd:7b:4c:6b:f9:01:14:6e:fb:
26:c6:83:63:d1:5d:8d:4d:be:3c:22:40:e2:74:8a:75:2e:e6:
54:14:f4:ea:60:92:4f:b9:93:f6:9f:b6:7c:59:54:e8:c5:a7:
fb:56:ef:d1:da:3e:57:63:01:39:ef:3e:2e:de:94:28:22:96:
7e:fc:07:66:e4:2f:66:87:80:50:db:23:18:5b:5d:c9:23:cf:
80:ea:1c:92:59:f4:2e:6a:af:3d:dd:d8:ee:1f:82:f4:ce:3b:
d7:9d:dc:61:a5:96:15:9f:c1:f1:68:ab:ec:4f:5e:7e:ed:5d:
db:b3:f1:47:a6:66:0a:92:18:e5:75:0b:a6:5f:51:a7:96:e5:
da:e0:79:75:b5:69:a2:6e:99:57:27:3d:b7:d1:54:8b:94:01:
97:40:81:1d:12:2a:03:4f:17:16:fd:97:ba:40:8c:1b:23:50:
8b:d5:f5:14:d3:3f:43:e9:a7:9a:1f:18:72:99:88:53:46:27:
be:19:f9:a5:9c:da:2e:92:25:8b:13:60:b5:dc:e8:dc:30:2c:
c9:84:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:38 2026 by rpki-client