Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: hKucQg9C2N8s+SUf0j/1Qcc5Yf15ZcUOKIO6h0xwJLU=
Subject key identifier: DD:27:57:4D:BE:56:EC:A9:0D:9A:AC:92:C0:C6:1C:43:E1:80:1F:B5
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 019D99D0E2E076A723CE4EA5FD224E21B2F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0CC1
Signing time: Fri 17 Apr 2026 05:01:36 +0000
Manifest this update: Fri 17 Apr 2026 05:01:36 +0000
Manifest next update: Sat 18 Apr 2026 05:01:36 +0000
Files and hashes: 1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=)
2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: Q/sEtnSZ+OW1yZEKxOKgLgFRNwr2ZYKQvhMUINyQadE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e2:e0:76:a7:23:ce:4e:a5:fd:22:4e:21:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Apr 17 05:01:36 2026 GMT
Not After : Apr 18 05:01:36 2026 GMT
Subject: CN=dd27574dbe56eca90d9aac92c0c61c43e1801fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:1e:37:1c:71:56:e2:b8:bd:71:f9:47:f0:
26:3a:cd:8d:4a:48:bd:f5:39:7e:1b:f7:e1:93:53:
a4:8c:9f:16:10:04:35:26:3f:e5:d6:ff:52:dd:91:
0d:19:3d:0a:8c:e5:22:f4:ca:05:46:de:fe:7b:3c:
5b:ee:ac:07:ba:86:cf:62:1b:0d:9f:b8:3b:da:4f:
44:36:f4:2d:a0:ad:3d:61:11:2a:6a:e1:bc:80:12:
ca:7f:df:57:ea:82:83:ac:76:a1:35:eb:c0:51:f9:
25:f8:7a:9f:e0:3a:cd:cb:1f:e3:e7:c8:97:b5:9e:
60:ee:b7:a9:45:5f:36:26:ca:6b:98:b5:d7:ad:33:
f4:48:9e:2c:96:d1:1b:f8:cb:5a:34:d7:95:99:ea:
38:23:e8:91:c3:1c:0b:82:d1:33:ef:ba:73:97:77:
a1:a0:b9:64:dd:78:49:4d:9c:8e:5d:f7:64:b0:fd:
36:5b:24:64:13:04:7e:6a:03:e3:ae:e4:cb:96:a2:
a3:58:c5:0e:e0:08:b3:2c:e2:5a:1b:68:f9:62:7e:
a1:2f:46:10:46:4a:30:18:94:16:22:24:92:99:6e:
e3:0c:98:ec:a2:e0:de:70:5d:9d:d6:a4:f4:83:e1:
78:d4:49:1d:af:c4:33:6b:a7:8f:64:56:4d:7e:dc:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:27:57:4D:BE:56:EC:A9:0D:9A:AC:92:C0:C6:1C:43:E1:80:1F:B5
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:aa:8e:92:f8:0e:c3:01:47:95:49:42:dd:52:6f:1d:44:45:
69:5d:c7:80:e7:7e:57:2e:a6:77:a9:2f:5f:19:5f:f7:ba:a6:
dd:cb:f2:3c:93:ec:5d:7d:dd:4a:82:73:89:05:7d:27:7d:05:
13:3b:5c:56:6b:1f:02:13:fc:99:36:cb:44:b1:60:b6:79:e3:
0f:aa:1e:2d:88:ea:d4:26:b9:f1:a8:fb:b4:e8:f8:9a:a1:8f:
b1:75:8c:be:36:df:15:b4:9c:dd:23:b1:cb:86:76:fa:6d:7c:
2e:d9:e6:0a:46:2d:f5:db:43:b8:36:2a:de:1c:35:b9:17:91:
cf:b2:69:03:87:76:fe:ee:af:ec:2c:aa:dd:f0:29:00:76:a3:
c6:3f:91:69:20:21:17:52:6a:05:a1:bd:76:3c:4d:1e:bd:a1:
7e:3d:6f:12:f4:ae:4f:4d:07:d6:b2:d9:31:e0:49:4e:bb:ff:
df:96:77:9e:54:2e:43:68:69:1b:02:dc:76:ed:21:c6:08:f2:
43:36:ff:85:5c:57:64:7d:fd:83:2e:ae:e7:ce:26:b1:ca:f3:
19:1e:e8:e5:ae:14:1e:4c:4b:c8:d3:be:6a:ed:0e:e3:f5:67:
90:81:ea:1a:81:b6:a5:18:b6:3b:6d:81:ec:ab:e1:84:d1:a7:
03:d7:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:27 2026 by rpki-client