Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: gwa4ETFS9SfqHlQTFKwEXYls4vigDdEMxj79p2qbit8=
Subject key identifier: A5:81:01:F2:D3:A0:89:39:A4:32:43:B0:EA:E9:9D:C7:82:CD:6E:5F
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 019CA9B3A19F78889F8809AD0FB317F59BDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0D90
Signing time: Sun 01 Mar 2026 14:00:47 +0000
Manifest this update: Sun 01 Mar 2026 14:00:47 +0000
Manifest next update: Mon 02 Mar 2026 14:00:47 +0000
Files and hashes: 1: 1-F6a50KtQcu31PT6x_F9Z_uaDfs.roa (hash: P4rr0sjF2JMQ0Puk//ntxlDU0c1i5ZoIeElt4H2LfSA=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: lk+QcdhvWQ2RWts/cZgDnCB29hWVIDftEO7LJxiEmk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:a1:9f:78:88:9f:88:09:ad:0f:b3:17:f5:9b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Mar 1 14:00:47 2026 GMT
Not After : Mar 2 14:00:47 2026 GMT
Subject: CN=a58101f2d3a08939a43243b0eae99dc782cd6e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:b0:31:79:22:e0:3e:07:2b:20:a4:ed:66:
ec:e6:ef:2a:d0:56:f8:8b:67:d7:fd:e6:56:86:c0:
c2:ef:11:99:0f:43:1a:02:31:a0:9d:ec:c9:be:1e:
e7:9f:03:2a:86:d7:bd:79:f3:27:d6:d7:dd:7a:15:
7a:07:c8:85:21:a0:c2:e2:9a:d9:b5:00:d8:89:e2:
9c:c8:06:f0:bc:32:ca:fe:7d:5e:54:e5:d6:39:c3:
47:7b:2f:58:a4:c7:0e:0e:ff:11:7a:fe:9f:ff:35:
86:2f:bf:b1:3a:6e:c2:3b:47:b2:84:70:3a:06:fb:
c4:4e:f5:c5:e8:e7:82:c9:58:14:49:e8:9a:5f:ab:
3b:9d:bb:d4:c3:3a:78:46:49:24:19:0b:f0:79:61:
69:38:db:ec:64:d2:da:5a:6d:c9:ad:a0:0b:0d:e3:
22:88:ce:a0:6f:b9:e7:4c:39:b7:98:22:fe:be:d8:
9f:aa:13:de:c9:31:5a:91:39:7a:43:24:e2:02:36:
93:99:12:3b:24:fa:a6:b5:6f:cb:c4:05:49:b7:75:
9c:8c:6c:e7:6f:a0:2a:0e:bf:89:f8:44:23:5c:5b:
42:9b:0d:2a:d9:4e:df:4e:b0:33:af:20:c0:bc:6b:
11:f5:ae:2d:ed:05:7f:09:d0:d2:38:45:f6:eb:d3:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:81:01:F2:D3:A0:89:39:A4:32:43:B0:EA:E9:9D:C7:82:CD:6E:5F
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b3:97:7f:3c:cd:28:5c:0c:1b:80:21:70:9e:b6:5c:78:fc:
61:b4:65:2a:17:9b:00:09:7b:f7:b1:97:fc:60:48:4a:1e:95:
a3:02:4e:b9:b1:14:05:37:ee:29:0c:f3:fc:d4:d5:07:79:05:
76:80:ae:66:a1:cd:23:dc:89:52:53:b1:5d:78:24:fb:a1:0b:
12:d2:da:50:e5:54:72:c1:62:da:82:ac:4a:1a:3d:2c:fb:f2:
44:55:13:9e:31:41:d0:cb:eb:b1:44:8c:ef:35:54:e7:79:8a:
55:86:88:13:b1:d4:b0:3e:38:fe:29:d9:58:0a:17:54:d6:3b:
8a:6a:94:39:17:e3:16:57:67:64:4d:c2:04:8d:f3:14:45:89:
d2:9a:ee:19:fe:52:8d:5d:6b:5a:70:03:48:38:53:4e:95:52:
90:ab:a4:37:43:2c:22:1b:7a:19:de:d8:ee:10:7f:94:1c:0e:
62:8f:82:bc:f3:a0:64:a3:94:85:dd:7d:df:a3:13:a9:95:b9:
79:70:39:24:47:28:63:13:d4:59:f9:3a:74:49:8e:d5:bd:14:
56:dc:86:9f:34:99:b5:54:48:4f:e0:a4:14:72:93:46:f3:cc:
22:8e:4a:a0:86:d8:61:b7:d1:ad:d0:ae:18:ef:a6:7b:44:33:
4b:6e:9d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:44 2026 by rpki-client