Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: Kr9JOAsjdDyv0T16JdeH5s0OYqow4Tojlg55Lv6uRkE=
Subject key identifier: 64:1E:22:12:21:6A:31:DE:D4:2B:69:2F:E7:18:D1:6B:EE:9E:5F:A5
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 019CAC105DE19B17C8E4ED8FFEE904D12322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 100C
Signing time: Mon 02 Mar 2026 01:01:19 +0000
Manifest this update: Mon 02 Mar 2026 01:01:19 +0000
Manifest next update: Tue 03 Mar 2026 01:01:19 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: Mqiai9YfAyes+sKUXIooVRwiswDZYRbbZtraQXvH3tI=)
2: fwsKv3gFuqhW1sf3BEMUe7UIGos.roa (hash: 1WCeYdLMrYmy3YdzxETcmdYKttU2fzCPworPqJW1olQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:5d:e1:9b:17:c8:e4:ed:8f:fe:e9:04:d1:23:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Mar 2 01:01:19 2026 GMT
Not After : Mar 3 01:01:19 2026 GMT
Subject: CN=641e2212216a31ded42b692fe718d16bee9e5fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:1c:71:c8:ca:d4:89:75:db:87:16:7d:5e:
23:e2:f5:42:98:70:ae:f6:30:67:02:15:0f:6d:80:
3d:f3:ae:37:d3:20:11:11:7f:65:57:b4:29:b6:67:
08:0c:e7:9b:31:b2:da:69:81:80:a7:f6:7d:8b:ee:
ee:e9:38:6e:bb:16:55:56:a4:4c:33:84:73:0c:24:
de:8c:e0:00:55:db:a9:5b:42:21:ba:d7:48:68:6c:
91:5e:ca:9b:bf:96:fe:a0:03:61:41:5a:d7:28:c7:
9b:f2:a3:ce:32:27:6c:49:4a:2c:fd:65:23:84:8f:
32:66:d9:14:ca:7f:c8:57:3c:aa:0a:b2:72:a9:f0:
4f:24:9d:d1:7e:dd:d9:55:19:42:2c:3e:6c:bb:fd:
bb:e5:b1:be:a0:92:ac:50:44:86:16:56:5e:71:e2:
f6:79:dc:10:56:fc:44:6f:89:34:d5:22:fa:23:3f:
11:b0:05:dd:a3:f6:56:e7:13:09:44:3d:65:44:6b:
34:5a:87:eb:b4:59:63:29:d2:e9:b4:b4:56:40:8b:
21:46:d8:7a:66:07:23:20:72:1b:0e:e7:6c:b3:2c:
8f:62:fa:f9:2d:b4:52:08:ff:cb:89:6c:d9:3b:ae:
5f:2e:76:e4:db:72:b0:45:0d:9c:7f:b7:85:52:46:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1E:22:12:21:6A:31:DE:D4:2B:69:2F:E7:18:D1:6B:EE:9E:5F:A5
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:1a:b5:a8:33:d6:b2:b9:df:b6:ef:c9:70:52:54:08:e5:
2f:63:5e:75:c2:16:55:b6:68:d3:70:c9:d7:d4:f2:d1:85:e7:
66:d7:4c:c0:39:a0:02:76:b8:a2:54:11:c5:db:52:3f:97:5e:
11:96:0e:f2:f4:33:7c:67:bc:40:b8:8f:83:ce:04:a6:b3:cc:
a7:92:77:1e:ab:28:c1:9a:6d:e5:e5:37:4d:db:69:9d:59:5e:
fa:63:7e:47:62:f0:38:16:a9:11:88:4a:24:8e:16:79:c4:4f:
a7:80:12:e0:fe:54:cd:83:c6:9b:c2:5b:01:22:a3:a5:42:d4:
49:17:d2:07:1e:c8:85:a9:48:3d:4f:95:19:c0:0a:89:f2:ef:
aa:6f:ab:b2:7d:cd:96:89:80:0a:4a:fe:2c:35:b0:c6:9d:b3:
03:85:47:f7:0a:1c:25:8c:19:bb:1d:e9:6b:74:7d:9b:bc:2a:
83:18:98:7b:c0:3e:28:48:67:2e:9a:3f:07:d0:e0:46:44:ed:
7c:e7:06:a5:0e:4e:ac:31:e7:bd:4c:15:4c:4e:e0:6b:6b:e9:
9a:b8:70:ac:80:98:06:55:27:59:51:79:79:da:da:a6:29:c7:
5e:d5:f8:25:76:a4:8c:e9:00:b2:bc:cd:b5:34:b5:c6:3e:14:
7f:3c:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:29 2026 by rpki-client