Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: 477uHcWRMVCR6F4v1tc2VX0qzD0WvUdmz8EZhmQYIRI=
Subject key identifier: 36:58:A1:83:D6:E1:5A:D9:81:CC:96:F6:F6:7A:99:19:78:73:19:D9
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019D98F4D9B66A7B123D1BB85568F493AB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: dIqcjAoBzIZkmC54P/Ls3MMoScE9Y7WlsYh0FBuVXx4=)
2: o-KeOtGqQYJCymvrV8r9HfOrq9k.roa (hash: UoDtbFFKcrDfR017cPTt032e6iAULTmVfReOTRfK9VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d9:b6:6a:7b:12:3d:1b:b8:55:68:f4:93:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=3658a183d6e15ad981cc96f6f67a9919787319d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:f8:37:47:fe:88:32:2f:02:ae:3b:3e:f0:
92:4f:14:65:dd:4a:fb:89:40:05:e6:f8:f1:f7:31:
42:82:59:ae:58:53:97:a9:84:82:00:23:f9:2f:b5:
9c:24:66:86:a3:36:d4:9e:1d:bd:51:57:44:c0:21:
b0:5c:5f:1e:35:36:1a:f3:79:c6:87:22:70:b8:43:
24:f9:65:b1:20:6f:64:f8:00:ee:f0:ea:79:ef:cb:
7f:18:e5:c2:cf:32:8c:fa:67:77:8c:22:3f:09:35:
05:b8:9f:26:93:52:01:70:d9:1a:18:a5:31:03:bd:
62:14:2e:92:99:b2:26:3f:4b:89:1e:bf:25:11:fb:
0d:d6:89:7e:2f:ac:26:80:b3:d7:0b:92:fb:33:cf:
f3:40:22:cb:44:b3:ca:50:5e:fb:09:71:b6:76:e5:
60:fc:39:a1:70:3b:29:53:d3:80:1b:23:9b:34:d2:
f3:b9:93:85:31:fa:60:05:1d:7e:eb:f6:96:a0:35:
55:a3:8e:4d:c0:0c:a6:40:68:75:57:10:3e:90:ef:
5a:48:a0:42:90:2b:25:1d:09:a8:92:b1:f3:4d:05:
3f:f2:a1:94:70:80:95:c3:84:5e:cb:f5:ae:33:b6:
ca:49:97:4a:74:ba:45:00:75:d7:39:a2:57:59:4f:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:58:A1:83:D6:E1:5A:D9:81:CC:96:F6:F6:7A:99:19:78:73:19:D9
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:94:04:82:35:af:11:01:29:56:97:1e:06:48:a6:1c:67:fb:
bb:6c:4f:35:ef:b7:d2:ff:02:4f:a9:09:7c:69:f5:e3:ba:3c:
55:ab:5e:30:e6:53:3a:34:7f:0c:fe:bf:8e:72:a3:ce:c7:34:
66:c8:56:a3:71:38:e8:48:b6:3d:d2:f4:1c:e3:1c:d3:48:9e:
38:20:05:44:cc:34:9a:02:9a:01:db:b2:c6:9b:7d:cf:63:ee:
41:99:e6:0f:0e:fb:84:63:6d:58:6c:0a:09:96:02:7a:d7:ad:
4f:e8:a0:4d:c2:ed:e8:cc:1f:9d:a1:ab:a5:88:d5:11:04:7c:
c0:e5:3a:5e:fa:42:54:00:39:ff:76:c7:5c:b3:5a:25:ef:0a:
ce:3d:a0:e6:c5:49:59:7f:d2:e1:8a:14:1b:0d:30:7c:f8:a8:
4a:b8:50:f8:22:db:a8:ed:2d:6f:f2:73:45:97:d7:33:d1:e8:
4b:61:1f:df:ca:d6:45:5f:90:39:a1:46:ca:36:e0:5d:fa:52:
92:ee:6a:94:9e:86:14:d1:43:fb:2f:82:0e:27:d6:ec:fc:77:
62:da:4b:b4:13:8c:7e:74:b8:73:15:6e:22:61:4c:da:61:2f:
dc:e2:82:23:b9:f7:f0:b2:51:4f:c6:95:9b:8b:ab:1c:11:08:
f5:54:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:13 2026 by rpki-client