Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
File: O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft (raw, json)
Hash identifier: V2pRQ47uHthzadHM/CtVTcdPqzyRT//Q5zPQnXhjyLM=
Subject key identifier: 4F:F4:01:E8:D0:12:7F:57:71:49:7D:73:A5:19:60:B5:63:8E:47:11
Authority key identifier: 3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
Certificate issuer: /CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Certificate serial: 019CAB6BA119B13164BB3D4E23A895AE4153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
Manifest number: 0D40
Signing time: Sun 01 Mar 2026 22:01:23 +0000
Manifest this update: Sun 01 Mar 2026 22:01:23 +0000
Manifest next update: Mon 02 Mar 2026 22:01:23 +0000
Files and hashes: 1: E7N3AbX4XRe6TtepW4IKz_xhbuk.roa (hash: T0P6XuI3QLOIzu4AgydenL9szcYBu2vZyoMNm8nvA0Y=)
2: HglIl2BwTY2fpCe5GwP5ysjNj7Y.roa (hash: aHBtaErkZmaBHVd9P0AYZA/rEH87fSJk4r+cxPYL8Fk=)
3: O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl (hash: 2mhM4jzr4ca38whTuWCfEnmKBU55EETiH29xyZc3I+8=)
4: iTmeATvkhdaQSx1hi5nnHidew6A.roa (hash: IYi+E84wN5bo5fjg0rwOe7narncl8RETFzc0nw+a92c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:a1:19:b1:31:64:bb:3d:4e:23:a8:95:ae:41:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b637ccf393f52e0b56fb58ee35af54411daf644
Validity
Not Before: Mar 1 22:01:23 2026 GMT
Not After : Mar 2 22:01:23 2026 GMT
Subject: CN=4ff401e8d0127f5771497d73a51960b5638e4711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:2c:ae:71:22:d5:3b:dc:f5:ae:65:14:1f:
5c:ee:88:e0:c9:19:12:6b:f3:dd:f5:6b:a0:9b:14:
59:f5:f6:a8:c5:ab:71:aa:0d:c5:89:90:0c:bf:bf:
25:2d:ff:41:ae:11:59:4c:e8:d3:a5:8c:cf:99:70:
18:a0:7c:47:e8:80:d2:0c:bf:44:7b:c2:e5:ff:33:
e3:0b:bc:ac:22:80:b0:cd:d5:e6:9c:4a:33:54:90:
cd:ab:07:25:fe:7d:2f:a3:f5:38:6e:65:c4:61:0a:
19:72:21:31:ca:93:e1:b0:c2:3c:31:2f:a3:83:39:
05:94:19:d6:a1:60:56:ab:0f:c1:dc:65:f7:59:4e:
0c:8e:9a:07:d8:97:c6:8b:97:6a:d6:44:87:b8:85:
38:95:2c:5a:01:c1:fa:47:28:df:fb:07:79:90:cc:
b6:85:0d:a0:40:2e:2d:d6:d9:2a:dc:7e:c9:02:06:
dd:bf:94:b9:29:ec:b1:8c:69:01:68:d2:bd:16:58:
cb:8d:d2:a1:b3:f4:25:4f:b8:ab:ee:97:d6:03:c2:
fb:1c:54:87:19:43:5c:11:bd:c4:2b:8e:97:97:4e:
6f:de:4e:1a:78:d3:10:28:05:51:05:33:60:55:f3:
d6:e7:a8:f0:ef:a2:34:c3:89:14:d1:21:5e:a0:7d:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:01:E8:D0:12:7F:57:71:49:7D:73:A5:19:60:B5:63:8E:47:11
X509v3 Authority Key Identifier:
keyid:3B:63:7C:CF:39:3F:52:E0:B5:6F:B5:8E:E3:5A:F5:44:11:DA:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2N8zzk_UuC1b7WO41r1RBHa9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9c5c1f-f4b6-45a8-9c9f-30733d370df3/1/O2N8zzk_UuC1b7WO41r1RBHa9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2f:f7:66:f1:4b:69:b5:29:5e:2a:af:81:86:6b:47:99:52:
6d:28:bd:e4:2d:dd:ca:73:b4:aa:25:ab:c3:b4:35:e5:14:5d:
b6:c2:b1:37:11:2b:6f:ce:78:25:19:60:b0:8e:a9:42:2d:2b:
d8:5a:4a:4e:85:c5:d9:1a:a7:3f:ba:5b:f2:d1:40:51:95:a0:
f9:ac:01:c7:c3:38:fe:63:99:a9:de:6d:8c:3f:41:8e:d7:46:
fe:27:7e:ad:d5:d7:13:05:79:09:9f:d7:d9:0c:18:fe:41:74:
77:8c:70:7f:84:cd:e2:02:a8:34:04:4e:ce:15:9d:1c:6a:5c:
92:d1:c4:55:b4:7a:01:0c:66:32:46:66:36:66:fd:b0:cf:36:
ba:a7:6d:a7:2c:ed:62:17:72:5f:44:4c:a4:a7:bc:8b:57:51:
76:54:08:99:ce:51:4e:b8:be:ab:bd:a1:02:07:fc:9f:c5:0b:
46:90:2c:b6:36:0e:f0:e7:96:25:2c:5b:d3:de:61:c6:ea:b3:
2f:d3:a7:9f:6c:46:98:35:e9:4b:18:de:8f:87:54:d5:a5:e1:
1e:52:2f:22:1c:d8:42:9e:53:a3:82:e0:c4:74:b9:b5:8e:87:
72:5f:f4:c9:7f:97:ff:a3:e9:42:39:3f:b1:7f:b9:cd:9b:c8:
96:c9:68:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:33 2026 by rpki-client