Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
File: O5pBDtUm-GwybZG2KApEGhbAxnY.mft (raw, json)
Hash identifier: Z1ZA/JYt+4TeL83bKF25JI3+vADjMIbFMiuYRvj0nPQ=
Subject key identifier: C0:1B:56:EB:D5:2B:58:B7:02:55:3D:C8:54:4B:17:40:99:B6:73:76
Authority key identifier: 3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
Certificate issuer: /CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Certificate serial: 019CABD8F6B283EF13682E960233086C6CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
Manifest number: 09B0
Signing time: Mon 02 Mar 2026 00:00:48 +0000
Manifest this update: Mon 02 Mar 2026 00:00:48 +0000
Manifest next update: Tue 03 Mar 2026 00:00:48 +0000
Files and hashes: 1: O5pBDtUm-GwybZG2KApEGhbAxnY.crl (hash: yPCo1jxjqJ6Fr606tpWQ9thkRFTY/wFNrWr7w7X/olg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f6:b2:83:ef:13:68:2e:96:02:33:08:6c:6c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Validity
Not Before: Mar 2 00:00:48 2026 GMT
Not After : Mar 3 00:00:48 2026 GMT
Subject: CN=c01b56ebd52b58b702553dc8544b174099b67376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:8f:fa:a9:71:56:16:70:82:e9:59:48:15:
e7:f1:9f:2a:bf:c6:71:61:9c:47:9e:a3:69:f7:c8:
34:74:01:11:b9:91:0f:28:47:60:94:59:aa:01:dd:
17:f6:74:06:37:38:ba:a1:76:88:78:86:48:da:f2:
42:1d:2b:9c:25:6e:8f:01:90:94:b2:32:66:8a:de:
67:fc:cb:93:2d:91:30:29:af:3f:1d:54:68:95:ca:
8a:b9:b0:8c:7f:fb:40:b8:e3:d8:42:34:0c:b6:6b:
d2:d0:2a:e6:35:ea:31:f9:58:0c:07:da:c1:ae:45:
a3:7d:4d:80:ee:82:cc:15:06:96:a8:d3:54:0d:6e:
10:9d:ac:0e:12:c4:e8:cc:f3:2a:c7:dc:89:70:4d:
94:4f:56:31:87:6d:d9:b3:e0:29:c1:5e:1e:96:cf:
9b:56:65:22:83:d0:31:1f:c9:df:d2:b5:95:49:54:
a8:c4:ce:54:cb:52:d0:a5:1d:84:4a:1c:7c:ca:ec:
7b:9c:2c:9f:1d:a7:34:57:64:a3:82:23:d2:c0:37:
f8:60:73:06:5d:16:e1:ca:01:3f:bd:dc:dd:c4:b7:
7b:91:5b:d9:b5:b9:1f:f5:85:7c:c4:6e:6e:7a:db:
31:78:01:9f:cf:09:bf:07:7d:6b:94:cf:d4:e0:86:
6c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1B:56:EB:D5:2B:58:B7:02:55:3D:C8:54:4B:17:40:99:B6:73:76
X509v3 Authority Key Identifier:
keyid:3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:70:d9:c3:f8:58:16:aa:72:57:01:7b:59:27:ec:ba:50:b9:
87:b0:ac:1c:7a:20:06:3e:5e:4d:1a:67:37:c4:19:2a:53:4d:
08:1b:37:8d:ef:89:1a:b9:fb:cc:a7:ad:fa:94:43:a7:78:db:
b0:76:44:f3:ec:d6:61:41:31:86:40:30:6a:96:bb:d4:8c:de:
3f:9a:f0:e3:57:c2:8b:5d:2d:31:76:23:f3:88:27:44:ab:6f:
fc:6c:c7:57:b1:1e:74:dc:57:fe:5a:3a:3c:ab:da:1e:b5:9c:
7e:69:f7:b5:24:be:17:c0:26:80:81:7a:8e:b5:b9:b8:2e:fa:
b7:30:c7:0f:6e:cb:75:6a:23:9f:a3:f0:6e:bd:86:66:38:fb:
4c:2f:b6:02:d6:82:bf:f2:17:5c:ef:85:86:b1:85:9d:92:9e:
d8:52:b8:be:fe:a9:51:0b:6e:6d:64:fd:e7:9e:0a:0b:c0:65:
a7:5f:a3:73:fa:03:a4:39:7e:32:16:b9:51:1c:f3:bc:74:e8:
ae:17:2c:31:fe:98:ac:e6:85:7a:2d:ae:b4:8b:b1:4a:ec:b3:
08:8b:e2:d5:b7:b8:0b:50:6e:f4:77:36:7e:f6:96:df:32:ce:
5b:e9:08:91:68:fd:bb:08:61:9c:5d:cc:d5:92:8c:ec:b2:9f:
b5:b7:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:34:43 2026 by rpki-client