Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: 6hsIpQl1xV30rFyZExdimXCOh6pJT1GveeBGPx+3Tuc=
Subject key identifier: 2F:C1:30:34:35:B7:41:DC:BC:5F:44:CB:16:98:29:1C:E7:A2:44:04
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 019CA9EAB4E10C86404FCD27CCFA66BBA99E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 0C0B
Signing time: Sun 01 Mar 2026 15:00:57 +0000
Manifest this update: Sun 01 Mar 2026 15:00:57 +0000
Manifest next update: Mon 02 Mar 2026 15:00:57 +0000
Files and hashes: 1: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: zr7gacYeE8LOmtB6CEpxUgwdBY2rOgormVPLWzpytNk=)
2: _g97Og5G9vKazdZyvUt-VVIBpss.roa (hash: YuLCDVF+kjBYwqyUmxi84DtjJhA7vq/XSNvOonb9Y8Y=)
3: lpaC_L_3Kh3Us_J5PIM5IP-2MB0.roa (hash: 4WQbvnKdlS0s85jQle9ELQNyZdFgg7qqpkEdDrjdCZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:b4:e1:0c:86:40:4f:cd:27:cc:fa:66:bb:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Mar 1 15:00:57 2026 GMT
Not After : Mar 2 15:00:57 2026 GMT
Subject: CN=2fc1303435b741dcbc5f44cb1698291ce7a24404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:82:e8:fa:2c:06:51:74:08:82:2e:20:55:e1:
33:03:f4:28:eb:55:1a:17:83:f0:44:ea:d6:3b:a7:
d1:67:d1:5a:12:19:55:4c:be:83:5a:8d:92:64:fc:
c5:20:88:f2:ff:7b:0b:1f:b4:a1:dd:87:1a:4c:fe:
7c:58:42:eb:4b:67:fb:7d:6f:1d:db:08:0e:2d:de:
8b:4b:cc:ab:0f:a8:d1:cd:44:35:9b:30:57:1e:0f:
f1:03:ce:2d:3b:05:3c:e6:d7:01:c5:73:e4:dc:6e:
69:21:8f:3f:cc:84:ac:82:7e:21:45:7a:e5:f8:52:
22:7e:f6:36:78:26:a0:72:2a:63:3a:38:c4:d8:0b:
27:1d:3a:e5:12:f1:ee:76:65:81:bb:9c:27:73:42:
3e:4c:f5:bf:8a:f1:35:3e:a1:a9:30:ab:d2:b0:32:
45:44:42:bf:bf:ca:7b:11:db:a0:67:76:84:c6:8d:
70:98:63:51:2d:44:d5:44:12:53:9a:5d:18:3c:c6:
8a:84:21:eb:69:82:f9:e2:e3:40:55:c9:9c:55:50:
70:bf:47:be:f6:c1:1c:ac:43:39:7f:16:4c:fd:c9:
33:63:4f:ab:2e:ae:a8:2d:15:b6:da:65:95:14:c1:
8d:7f:47:0b:19:d0:6e:5b:7b:1e:61:ad:90:81:50:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C1:30:34:35:B7:41:DC:BC:5F:44:CB:16:98:29:1C:E7:A2:44:04
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:49:70:4d:0e:90:3e:7a:0b:3d:9a:65:1f:b3:36:fa:df:a9:
8c:8e:fb:78:29:f1:7a:1b:16:b8:c2:0c:45:fc:cd:9d:63:87:
e6:96:11:31:d9:c7:a7:b4:22:51:4f:53:04:7d:da:87:c6:e6:
7b:24:db:c4:0d:ca:a8:7a:d1:b7:33:51:72:a0:0d:43:f4:8a:
53:a8:57:87:2c:b6:41:67:5f:3f:01:6e:4a:37:e6:69:0c:56:
b3:a6:2b:bb:e4:6e:1e:39:8d:d9:19:7c:3c:6d:82:91:4c:aa:
d9:b6:ca:96:f0:52:59:73:3d:45:cc:02:47:0b:44:2e:80:5a:
9c:0d:9e:2b:00:a8:22:22:dd:a8:7b:88:75:09:b2:9e:bb:12:
51:cc:d7:69:11:25:4e:64:93:46:ea:7c:88:cc:3e:0f:c3:19:
39:3e:a2:c4:bc:31:34:ca:63:2e:f8:af:88:8e:94:f6:f1:de:
a3:d5:22:44:84:95:3a:38:b6:a4:5a:d8:a1:8d:7d:79:56:38:
9a:67:40:72:bc:c6:95:06:6b:96:2e:a8:09:01:46:57:9a:fb:
9c:79:d5:d8:7d:9b:14:aa:cd:d1:b3:23:17:86:6f:0a:dc:d4:
57:c3:02:67:09:db:bb:ea:4c:e3:31:89:54:4e:79:57:f7:44:
a1:f2:3d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:42 2026 by rpki-client