Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
File: O2MTmh9PiMMM7iIckUajbbVU_3A.mft (raw, json)
Hash identifier: lhRi/ntf//Z38Ail1NuUXWSQNIMCXM++RlfeOsdxYsw=
Subject key identifier: FA:4A:00:91:4A:6E:45:64:BB:91:3F:00:2A:4C:29:78:5A:E4:60:88
Authority key identifier: 3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
Certificate issuer: /CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Certificate serial: 019D9962BF600736F0BFE63908EE85AB8265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
Manifest number: 0B5C
Signing time: Fri 17 Apr 2026 03:01:18 +0000
Manifest this update: Fri 17 Apr 2026 03:01:18 +0000
Manifest next update: Sat 18 Apr 2026 03:01:18 +0000
Files and hashes: 1: O2MTmh9PiMMM7iIckUajbbVU_3A.crl (hash: cXbQFSrQw4cOVE4/muerCpBmsYuHQL4pY+3WB2vF+L8=)
2: qukZOL3y-aU1clCkqnWrjrRORuo.roa (hash: AXo2TQQEBH5zNI61c1elakGj9Z6fZg1L8w+i18Gk+4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:bf:60:07:36:f0:bf:e6:39:08:ee:85:ab:82:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Validity
Not Before: Apr 17 03:01:18 2026 GMT
Not After : Apr 18 03:01:18 2026 GMT
Subject: CN=fa4a00914a6e4564bb913f002a4c29785ae46088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:54:67:9d:11:db:13:41:a5:6b:78:ed:d5:d9:
ff:93:51:5e:6b:0d:2d:0d:37:14:eb:18:cb:81:6d:
57:46:bd:e8:d4:e5:5c:ed:39:bb:2e:ad:90:e2:0a:
5a:28:51:8f:cb:2d:6b:a2:4d:06:ec:e8:77:9d:5a:
5a:f9:97:2d:28:58:d6:38:07:38:a5:b5:22:d0:70:
3f:63:fc:bd:32:64:30:7c:9d:0d:c8:fc:35:9a:50:
88:f4:e2:83:f2:c9:e2:7a:14:c1:3d:0c:55:08:e8:
ed:d3:71:52:93:0c:c4:94:4c:5e:c6:4a:9b:7b:17:
61:2d:04:9c:93:10:f8:0e:37:43:7c:52:d9:11:e5:
2d:8f:0f:b0:94:c1:9f:36:d1:43:25:aa:e3:51:ba:
b7:01:a0:1d:fa:d7:c8:bd:3a:5c:e5:e9:24:4a:2e:
17:63:58:2f:cc:57:9d:e9:35:a1:6f:24:66:f2:fd:
aa:ae:d5:aa:8f:1d:8e:d9:bc:3d:25:eb:29:ad:c2:
4e:30:75:c8:34:35:21:eb:49:ef:7d:fb:8a:4b:b7:
56:f0:35:c2:85:19:fa:ad:d0:bc:26:74:22:fb:cc:
ae:95:6b:2f:69:c1:70:a8:2c:b1:88:51:45:3c:31:
ab:6d:4a:ff:61:d0:5a:da:8b:f8:b4:3e:29:74:12:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4A:00:91:4A:6E:45:64:BB:91:3F:00:2A:4C:29:78:5A:E4:60:88
X509v3 Authority Key Identifier:
keyid:3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1a:86:af:f3:a2:d3:3f:10:1f:7e:f5:54:6d:22:b1:a1:69:
eb:69:88:f8:ac:79:9e:b7:d2:d6:ec:8d:89:a1:9a:07:15:30:
82:21:0e:77:d1:fb:2d:06:9b:7a:bd:09:e6:d6:ac:8f:47:c6:
1a:be:2c:e2:0d:1e:5c:90:f0:b2:88:a6:10:a8:d0:a3:fc:04:
29:ac:17:bc:ba:ff:d5:9a:b2:50:8d:f4:d6:f5:e0:65:00:76:
8c:55:a5:68:de:ef:38:78:e4:86:73:ed:67:c8:33:b3:b5:22:
ad:69:9e:94:da:6d:88:8b:30:24:15:af:72:e3:53:21:fe:0c:
5b:b7:8e:93:56:89:0d:01:19:77:29:a8:c2:56:da:b1:62:92:
05:90:0c:93:72:fe:81:19:4e:49:b1:70:d6:ec:34:e7:5c:f5:
91:c0:fc:67:77:43:30:bc:af:84:bf:74:78:da:67:c5:d3:3d:
4c:53:aa:35:7a:da:3d:5e:25:f5:ac:8c:8c:0b:b2:5e:58:d8:
af:2a:37:22:18:1b:67:e8:80:10:95:5a:28:70:35:27:0f:6d:
b3:91:29:8f:af:5d:8b:9c:69:33:6a:70:e6:1a:c3:14:4b:3f:
f4:f7:c0:e0:e2:e8:55:ff:dd:bd:7f:7c:c1:79:17:d3:92:70:
6d:4a:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:20 2026 by rpki-client