Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: RIWu2CXKR60bPQExYo5SGzBL51IUsJbsZSNqtqndwNk=
Subject key identifier: DC:79:FC:36:F5:E9:5B:A4:0A:59:74:E9:3F:7A:EE:58:50:0C:2E:FE
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 019D9999A2DFB5A96D57FF19226EB06B9C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 1087
Signing time: Fri 17 Apr 2026 04:01:15 +0000
Manifest this update: Fri 17 Apr 2026 04:01:15 +0000
Manifest next update: Sat 18 Apr 2026 04:01:15 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: lxP+GFrr1Zs9V/u+iPRAq0lVE0S+y0qddodnd/VXn0Q=)
2: fwsKv3gFuqhW1sf3BEMUe7UIGos.roa (hash: 1WCeYdLMrYmy3YdzxETcmdYKttU2fzCPworPqJW1olQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:a2:df:b5:a9:6d:57:ff:19:22:6e:b0:6b:9c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Apr 17 04:01:15 2026 GMT
Not After : Apr 18 04:01:15 2026 GMT
Subject: CN=dc79fc36f5e95ba40a5974e93f7aee58500c2efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:1d:b1:e8:be:b6:96:bd:73:55:cf:64:05:
4e:5b:f6:c8:2c:1a:56:3f:f8:c0:c2:3a:a7:f7:db:
1b:33:8e:1a:56:30:da:fe:3b:55:39:97:be:0d:00:
8d:a9:63:53:ab:7c:db:a5:69:ca:10:ed:74:7a:35:
c2:57:74:24:88:7e:5e:c0:24:25:16:25:eb:d5:ef:
52:06:f8:66:20:38:6f:be:13:c1:46:bb:d5:7f:c5:
61:89:6b:11:b9:16:29:7f:a2:c8:20:c8:5d:c9:08:
29:b1:7d:3c:ea:11:d6:a2:0e:e3:98:9e:d9:51:dd:
04:1f:6b:f8:ec:d7:22:dc:fd:bc:ad:44:0e:b0:44:
73:c6:b3:cd:0e:6a:db:94:1e:a7:96:1d:45:37:47:
8a:7b:f5:8b:0d:29:a8:04:06:ef:1a:e8:4a:57:5a:
ea:dd:a1:ab:c8:0c:4d:20:99:b7:4f:66:06:79:b4:
32:2f:2a:fb:9d:83:cd:51:66:77:25:c1:63:2e:9f:
a1:2d:c4:c4:4f:5c:67:26:ab:56:7c:77:6e:ce:12:
f3:33:f8:ea:f6:9b:90:54:25:57:ff:85:78:09:23:
8d:7b:67:87:94:52:19:b2:45:42:02:f2:b0:7d:a6:
e4:4c:f7:50:5c:3d:24:71:b0:20:7e:da:5d:56:95:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:79:FC:36:F5:E9:5B:A4:0A:59:74:E9:3F:7A:EE:58:50:0C:2E:FE
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d1:c7:83:6e:14:7f:95:cd:f9:86:04:4e:f7:e4:ac:fa:5a:
1c:08:67:9e:37:eb:39:86:94:e3:55:66:13:41:7a:14:8a:1c:
98:b8:05:c0:b9:56:77:55:47:ef:b3:50:31:ad:15:84:e2:8a:
c6:f5:72:ac:50:10:4c:39:b2:ee:5f:4d:79:c5:aa:61:e1:94:
c2:74:44:cb:7b:ac:bd:de:9f:65:e5:d4:53:e3:9c:3f:9f:7d:
f0:e5:76:68:42:c0:21:d0:fd:12:40:6f:48:77:59:32:1b:06:
d3:8d:75:1f:22:aa:ae:5c:03:7f:ef:e1:c0:98:ca:61:25:16:
24:5e:c1:8b:d0:8d:61:aa:fe:91:5b:c3:64:6c:26:20:53:89:
41:ed:09:86:81:ec:0a:3b:f7:3a:91:5d:d3:b2:3e:a7:7a:b0:
b2:1b:3c:bf:c4:48:c5:45:bb:8b:8b:fb:1d:9a:cd:94:be:42:
4b:f3:89:01:b1:af:c2:5b:02:cd:04:01:7b:45:f8:c7:d3:e2:
d8:1e:8e:fc:1b:cd:73:c8:76:63:2f:42:75:0a:df:d5:17:9f:
39:e1:7e:ac:61:08:6a:5c:1e:4e:34:c8:f7:92:1a:8f:99:05:
31:ed:83:ae:4b:8e:96:ab:87:85:b3:ac:2c:a3:e6:67:d4:51:
61:2f:f8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:59 2026 by rpki-client