Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: WV4FGuL/WVGOs7FrmbWd87a3x4oIGaTg3RpWCleXUCI=
Subject key identifier: 60:E9:BB:1A:C9:D0:68:C5:6C:94:FB:EB:85:56:25:B7:6A:3B:C4:0C
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 019CAC1043A2EBCE1B7DA9AA7FD8EE060E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:12 +0000
Manifest this update: Mon 02 Mar 2026 01:01:12 +0000
Manifest next update: Tue 03 Mar 2026 01:01:12 +0000
Files and hashes: 1: J_JGBAO8KIt2LuR7chBCFKy5euA.roa (hash: 7pbCXbgXt+DA4xsvYMLrfyOjNmWN+Wd7lStEGh4cqTs=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: RgRaYj0HeToZgq+xkKHYbllgSGdGAvAV2HAfhIIff4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:43:a2:eb:ce:1b:7d:a9:aa:7f:d8:ee:06:0e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Mar 2 01:01:12 2026 GMT
Not After : Mar 3 01:01:12 2026 GMT
Subject: CN=60e9bb1ac9d068c56c94fbeb855625b76a3bc40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:e9:89:e4:00:3a:8b:b2:75:14:74:f5:6d:
fc:19:49:4a:27:76:f7:9e:17:8b:ab:e0:15:75:b5:
6e:60:f4:fb:d8:24:5b:23:89:70:1d:e3:17:c5:40:
38:3a:76:15:f4:f1:0c:6c:99:49:1d:b1:09:d8:cf:
c7:93:29:dc:20:37:63:de:53:ff:35:0d:8d:c5:ac:
6b:70:e8:4b:64:1e:26:8b:04:ca:75:d3:0f:36:ef:
33:be:ef:4e:c4:e8:51:7d:7f:9f:09:2b:01:ee:67:
37:83:6e:a2:5a:37:f7:6b:43:98:72:ed:62:76:8d:
35:95:f3:d4:bb:29:69:34:fe:3f:34:35:5a:cb:90:
ee:4e:a9:cd:ff:4b:83:71:8a:5a:c5:05:2c:a9:e2:
c7:93:12:8e:9f:e7:32:15:c5:23:e7:e3:48:9f:23:
6b:c2:77:e4:e2:a8:8b:be:2b:b7:8c:4b:bf:b9:e8:
43:e7:04:29:d1:f8:2e:71:99:4d:f9:35:92:d3:a6:
c2:f5:e5:fe:cd:69:07:b5:bb:27:10:c5:54:64:67:
b2:e3:de:a9:d0:da:7c:dd:b7:26:da:c2:0f:b8:4e:
37:89:a2:71:72:29:f7:2b:e3:3d:33:08:38:18:ee:
74:96:14:18:35:b8:c8:a0:51:71:92:63:14:aa:ac:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E9:BB:1A:C9:D0:68:C5:6C:94:FB:EB:85:56:25:B7:6A:3B:C4:0C
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:00:5b:04:03:c0:38:46:fc:b1:12:18:a8:02:d9:ac:77:07:
da:c7:c9:17:a4:6b:33:25:14:de:e2:12:ce:5a:b3:70:23:d1:
d5:55:8a:13:0f:ff:ff:17:d0:a5:dd:21:e5:9f:47:cb:37:1f:
e4:33:12:a7:c2:ae:0f:8c:c1:d5:67:d0:43:1f:cb:e4:fe:0f:
b9:89:35:9e:f6:13:d7:3c:89:67:a0:e1:30:b7:ea:c6:7f:bc:
34:4e:1e:7e:8d:f4:bc:09:40:34:66:0d:60:a9:53:3a:8b:fd:
be:52:b0:35:36:41:5b:74:3a:09:a6:62:51:cc:23:b0:19:ef:
2f:99:61:61:8a:ef:13:fc:93:01:02:8d:54:63:68:3a:76:19:
96:3e:48:03:0b:1c:eb:b0:cd:68:3c:48:fa:b8:b9:e4:35:5f:
2b:ce:bb:36:50:0d:b9:7a:01:72:72:e8:52:4e:a4:be:e5:a7:
8d:e9:1d:0b:09:cf:79:8b:28:48:08:c4:ea:b0:d0:74:55:73:
11:5d:a1:7b:de:33:c6:8b:94:62:7f:8a:28:07:4a:16:74:ab:
a8:05:8b:0c:09:00:00:42:b6:0a:f8:6e:14:f6:14:dc:ed:2c:
d3:ed:ae:1b:c4:f4:77:b9:e5:64:9a:55:e4:24:d7:2e:88:da:
ea:22:44:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:46:47 2026 by rpki-client