Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: 8I5XAZZ2NANFAiqBHZ5VC3Ns7kTjJrdtVVDt7MwyXU4=
Subject key identifier: 5B:1B:01:DA:73:5B:CD:29:0E:AD:0B:54:08:1E:6A:83:09:7A:90:5B
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 019D996290107A381A3A5999D95C50C5F228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 0C87
Signing time: Fri 17 Apr 2026 03:01:06 +0000
Manifest this update: Fri 17 Apr 2026 03:01:06 +0000
Manifest next update: Sat 18 Apr 2026 03:01:06 +0000
Files and hashes: 1: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: fm9VmcS6BfYyHr02sdg1yCSQRYZ4e/3LuyrG15vilXs=)
2: _g97Og5G9vKazdZyvUt-VVIBpss.roa (hash: YuLCDVF+kjBYwqyUmxi84DtjJhA7vq/XSNvOonb9Y8Y=)
3: lpaC_L_3Kh3Us_J5PIM5IP-2MB0.roa (hash: 4WQbvnKdlS0s85jQle9ELQNyZdFgg7qqpkEdDrjdCZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:90:10:7a:38:1a:3a:59:99:d9:5c:50:c5:f2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Apr 17 03:01:06 2026 GMT
Not After : Apr 18 03:01:06 2026 GMT
Subject: CN=5b1b01da735bcd290ead0b54081e6a83097a905b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f2:52:1b:71:f0:e9:27:4e:e0:0b:49:e9:cc:
0f:6f:6a:e0:82:7b:94:0b:dc:5e:db:45:af:2f:ec:
20:dc:01:4e:81:c7:9d:d6:43:bf:07:f5:f7:ff:95:
6c:91:ec:db:65:6e:d3:96:ee:23:43:16:e0:84:bf:
6b:d7:bc:85:6d:ec:e7:42:14:1a:24:22:9c:a8:8a:
97:57:0c:7b:27:f3:43:d3:ef:34:b8:d8:64:81:e6:
ed:86:21:ae:71:90:9a:60:b6:e2:0b:18:a7:cf:39:
48:21:ea:94:9b:2b:61:a7:84:ed:df:e2:c9:64:4c:
b7:99:49:db:4b:20:36:16:24:30:a9:3a:a0:ae:95:
e8:70:9a:0b:f8:cb:18:df:dc:df:f5:5f:a0:30:a7:
5d:93:2e:8f:24:bc:8f:f3:a0:3a:f2:d7:2b:80:60:
ff:9e:f4:79:e4:e5:80:dc:93:9d:82:87:15:78:60:
9d:36:28:24:51:01:15:83:08:01:f2:11:72:e7:c9:
a0:be:27:85:37:69:64:00:18:4e:a0:92:58:33:a3:
ea:d2:d4:1c:14:29:06:2d:01:1b:7a:b4:52:0e:5c:
22:81:a3:eb:d0:b4:ab:3d:72:37:ff:14:30:1d:55:
fa:ef:72:e2:05:88:66:4f:11:e3:59:2f:24:6e:30:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:01:DA:73:5B:CD:29:0E:AD:0B:54:08:1E:6A:83:09:7A:90:5B
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5b:ff:ab:62:4a:0a:86:43:d4:11:91:d5:07:12:d6:a2:1a:
c6:88:ce:ed:5c:bb:ba:8c:5e:00:07:b6:d2:29:ed:d3:07:b8:
3f:e5:c5:23:18:65:90:75:3b:28:8e:55:58:3e:7e:9b:1a:6d:
8c:c4:ee:d6:5b:62:de:3f:de:b9:99:84:6d:c1:8c:61:cf:ad:
8f:a0:f5:f6:90:35:e2:90:6c:b6:16:af:3f:84:aa:46:8a:97:
3a:22:99:05:0b:58:f7:cc:33:78:3f:9e:98:f2:bc:ad:ea:04:
61:af:2e:49:31:f9:22:ea:43:0b:c6:b1:43:18:0f:23:90:f1:
7a:7f:b2:57:99:51:68:8a:02:41:3e:37:0b:9d:84:df:8d:59:
71:7e:4e:1d:35:22:fb:88:b8:f9:a5:2a:c3:85:ff:da:12:54:
f8:91:72:4d:6e:8c:d3:b4:d1:93:dd:74:c9:b8:6b:77:ff:06:
ad:25:65:45:07:cb:d3:74:96:59:c2:71:94:1e:0c:0d:fa:16:
ec:75:d8:ae:e9:e0:95:d5:83:c2:b6:03:42:31:24:49:fb:68:
48:ee:1e:d6:68:c8:4e:06:a3:29:81:40:76:36:5c:c4:65:f5:
36:f2:a2:f3:fa:b0:ea:12:b6:e4:27:d4:7c:59:ca:09:c8:c3:
1b:cf:ac:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:04 2026 by rpki-client