Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
File: O2MTmh9PiMMM7iIckUajbbVU_3A.mft (raw, json)
Hash identifier: Lqrb6B0wZJqPykfGNy0/KwN4vn2/alKQ8b4g0lMHkqM=
Subject key identifier: 12:80:D0:7C:FF:83:6D:E0:0B:98:8D:59:87:47:A5:67:3F:BE:24:7F
Authority key identifier: 3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
Certificate issuer: /CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Certificate serial: 019CABDA001007FC4106D9D28E7F24EBEE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
Manifest number: 0AE1
Signing time: Mon 02 Mar 2026 00:01:56 +0000
Manifest this update: Mon 02 Mar 2026 00:01:56 +0000
Manifest next update: Tue 03 Mar 2026 00:01:56 +0000
Files and hashes: 1: O2MTmh9PiMMM7iIckUajbbVU_3A.crl (hash: sW7bxyMvQwkXKLjEXXbyJt9AgB4PvSmzWs//7xjtTkY=)
2: qukZOL3y-aU1clCkqnWrjrRORuo.roa (hash: AXo2TQQEBH5zNI61c1elakGj9Z6fZg1L8w+i18Gk+4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:00:10:07:fc:41:06:d9:d2:8e:7f:24:eb:ee:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Validity
Not Before: Mar 2 00:01:56 2026 GMT
Not After : Mar 3 00:01:56 2026 GMT
Subject: CN=1280d07cff836de00b988d598747a5673fbe247f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:dd:b1:cc:f2:bb:a2:c0:9c:7f:49:e4:e6:
cc:1a:24:5e:d0:fb:97:3a:d2:d9:7a:fc:21:5d:23:
45:54:5b:7d:16:9b:14:2b:30:87:c7:f6:dc:a5:03:
00:e9:ed:b5:26:5a:f6:2a:dc:a1:56:83:e2:b0:bd:
f2:fd:2e:6e:27:f7:7c:88:ad:cb:1b:64:6c:8d:e3:
6b:b7:ad:b3:75:d2:2f:34:f2:a0:0f:f1:63:6d:c4:
d1:09:7e:53:df:c0:67:c3:50:ca:5a:71:7f:66:f1:
88:f0:8d:7c:ba:bd:1b:36:f3:1f:e2:96:b7:69:e4:
54:f6:5e:3e:64:01:87:f9:04:03:65:28:37:34:b8:
12:f6:2d:f4:f1:5c:62:08:b5:16:71:92:59:7f:b1:
95:8d:d5:5c:e2:1a:a8:40:bb:96:eb:12:2d:48:7d:
c2:aa:e2:72:26:a8:29:56:f3:13:0e:89:a9:cc:80:
3d:09:94:ae:71:1f:3e:78:7a:b8:a3:84:fa:b2:13:
b4:11:cb:f4:96:ca:be:95:43:59:d8:e2:f5:be:be:
c8:28:39:72:e4:a8:aa:84:94:a4:90:52:51:58:31:
e5:41:c3:50:94:e0:ac:80:eb:31:43:bc:ec:8e:f5:
39:50:36:5f:f1:d7:30:c2:6f:67:a7:d9:4d:b1:f1:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:80:D0:7C:FF:83:6D:E0:0B:98:8D:59:87:47:A5:67:3F:BE:24:7F
X509v3 Authority Key Identifier:
keyid:3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ed:55:07:bb:d8:4d:9b:f0:7e:65:81:1c:a8:47:01:82:ea:
c0:fa:76:c2:78:cf:31:1a:ea:d6:b2:5c:2e:ad:7b:f8:fb:c6:
a9:6a:11:a9:ac:f8:38:3d:26:98:a8:49:c6:3a:28:3a:cc:ba:
46:5d:29:05:61:13:e6:a3:7d:18:48:e8:42:a5:3e:d7:41:28:
fc:cd:58:27:3c:fa:2c:ea:87:e0:de:c2:34:8d:bc:25:d5:7e:
5e:ea:0f:d1:a3:e6:ae:10:19:b5:5c:9b:05:d0:27:5c:52:bd:
35:a5:1b:5f:86:75:08:10:ac:36:c4:22:48:d7:7e:2c:0d:a5:
12:c4:ca:4d:f0:b6:c8:b8:c9:ae:cb:d1:e5:3b:8d:a5:96:1e:
55:4a:35:83:07:d8:5d:e1:96:b3:fd:42:42:03:9d:90:e6:27:
4f:fe:95:d5:de:e7:fb:2f:e5:4e:d8:3c:bd:19:00:12:e2:5f:
b0:8f:39:81:75:37:4d:8e:11:e6:a5:02:55:dc:13:73:fe:2f:
c7:24:dc:26:30:0f:86:f1:19:1b:e0:d3:fd:06:97:c4:e5:51:
17:06:62:33:26:51:2d:36:d7:c0:63:ab:8b:02:e9:69:98:1c:
bd:c3:94:a5:9a:44:fd:8a:56:c8:9f:26:e3:63:06:5f:62:e3:
00:76:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:27:41 2026 by rpki-client