Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
File: O-U4LPdsHE8EZFTfy45VXMlJXIA.mft (raw, json)
Hash identifier: 0ovvPoQ9UAHme9jdgVJLrkKYdtAiG82QEnxyun7deyY=
Subject key identifier: A5:F7:0B:FF:95:96:F2:F9:23:3D:DC:2A:8F:82:46:9B:3B:C1:D3:ED
Authority key identifier: 3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
Certificate issuer: /CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Certificate serial: 019CB05AF481633F164727A5964DF5E51B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
Manifest number: A0
Signing time: Mon 02 Mar 2026 21:01:16 +0000
Manifest this update: Mon 02 Mar 2026 21:01:16 +0000
Manifest next update: Tue 03 Mar 2026 21:01:16 +0000
Files and hashes: 1: 0UiKB-W2Swet4yZkwt-cEISTHm8.roa (hash: 21qXUq6giXIzo60sm+LjiePUKIsWVBi36a4kVBUwoeE=)
2: O-U4LPdsHE8EZFTfy45VXMlJXIA.crl (hash: HVaNxrun+o2CBVVXop+gotrX3MRuhYHRD+YGnVs+xD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:5a:f4:81:63:3f:16:47:27:a5:96:4d:f5:e5:1b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be5382cf76c1c4f046454dfcb8e555cc9495c80
Validity
Not Before: Mar 2 21:01:16 2026 GMT
Not After : Mar 3 21:01:16 2026 GMT
Subject: CN=a5f70bff9596f2f9233ddc2a8f82469b3bc1d3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:3a:0d:55:90:e7:79:63:85:72:2d:a2:47:
34:40:80:4e:92:d4:04:3e:86:8d:4b:66:ea:e7:3d:
9f:94:44:78:20:3f:1f:97:7e:4f:2f:48:da:0f:7a:
bd:d7:fc:b8:ba:b0:79:3a:95:6f:5e:0d:e5:23:f9:
a0:90:c3:71:39:e5:0f:09:6a:4a:55:f3:5f:5d:c8:
e5:a1:6e:ae:d5:03:c9:b0:62:06:b8:92:be:e1:c1:
0a:37:53:af:ca:b7:4f:69:ec:26:b9:b7:10:17:e4:
d0:3f:90:42:71:da:4a:0e:2b:9a:62:8b:8d:5e:09:
bb:e6:99:a9:65:72:47:39:0e:c8:49:69:62:c6:88:
d7:4e:9f:6c:82:ac:cb:dd:bc:40:fc:59:ad:24:fc:
e9:bb:0d:fb:d8:61:4c:94:f5:42:8e:92:a7:1a:82:
cb:3a:c4:ab:75:ad:27:a2:5c:1b:a2:0b:d1:5d:6f:
ee:cb:c0:94:d8:a4:9a:12:ec:9a:0f:db:bc:c6:e1:
79:70:03:54:d6:cf:92:6b:7a:d3:a6:45:59:42:60:
10:7d:21:cd:79:04:0f:ff:be:54:f9:fe:bb:e1:41:
82:06:0a:b7:07:dd:b1:bf:d1:a1:aa:e8:b0:b5:d7:
51:7d:bc:9e:be:c7:8a:f4:55:f4:47:6d:be:ac:be:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F7:0B:FF:95:96:F2:F9:23:3D:DC:2A:8F:82:46:9B:3B:C1:D3:ED
X509v3 Authority Key Identifier:
keyid:3B:E5:38:2C:F7:6C:1C:4F:04:64:54:DF:CB:8E:55:5C:C9:49:5C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-U4LPdsHE8EZFTfy45VXMlJXIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/37b362-e6b6-4b18-840e-6f88edd40248/1/O-U4LPdsHE8EZFTfy45VXMlJXIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1c:73:d9:c0:5c:cf:06:bd:ea:5c:84:de:66:5d:74:11:3d:
98:a1:03:f5:5b:5d:5b:40:de:75:a3:59:e2:c4:30:f7:1e:92:
24:7f:9d:82:cc:77:f8:e6:26:ee:89:d3:26:4d:47:4b:2e:c4:
de:e7:9d:2c:e3:d5:8d:d5:e7:fc:e4:93:71:2b:ae:65:d7:31:
71:9e:8d:c8:eb:0d:a2:f7:79:22:d4:a6:7b:fb:2f:ca:f5:05:
bf:dc:26:a5:27:33:2d:b2:21:ef:62:cc:5d:06:2a:e3:c7:75:
cc:d4:d0:cf:66:dc:1f:01:bf:3b:15:16:f1:28:dd:db:61:c7:
1e:7a:c8:21:9d:a8:80:92:6c:1b:54:22:17:94:43:3b:c0:cb:
00:9d:24:77:d1:fa:ab:df:f3:84:14:3b:26:c6:96:d0:4b:39:
75:e8:12:9d:e6:62:da:5d:27:ca:8e:9a:59:99:ef:0b:03:71:
16:07:88:00:5c:53:6b:da:6d:14:de:fb:91:75:9c:c1:ad:9c:
c5:48:58:65:15:95:4b:d6:47:c8:f2:8a:22:0d:7c:91:f8:6d:
9e:21:50:fd:fe:33:7b:59:0c:c1:f2:5d:95:54:0e:17:fe:bf:
6f:03:43:27:5a:a2:cb:d6:2a:60:d2:b6:21:f4:dd:82:6e:3a:
f2:1b:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:23:18 2026 by rpki-client