Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
File: O_-2BdzjBg37ZtzMqI632grHSvE.mft (raw, json)
Hash identifier: eOt+it7a3k4LgDN/ozVePOxvZnCXPAvjk2S7nnU35q4=
Subject key identifier: 0B:DC:19:3D:F8:AA:C1:1B:5F:7D:97:F3:5A:79:B6:E9:68:80:D0:B4
Authority key identifier: 3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
Certificate issuer: /CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Certificate serial: 019CAA58886BEBE3FB3BB7E8A6CF8087210C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
Manifest number: 0C45
Signing time: Sun 01 Mar 2026 17:00:54 +0000
Manifest this update: Sun 01 Mar 2026 17:00:54 +0000
Manifest next update: Mon 02 Mar 2026 17:00:54 +0000
Files and hashes: 1: 8qvgkfD_thQ4z_WLXGgGH3lh3Jo.roa (hash: lpIuAWveKCKeQMUzXLJXzixQ82Be/vxjOdAft2Y84BY=)
2: O_-2BdzjBg37ZtzMqI632grHSvE.crl (hash: I7Dv8YaGVOuDrI0HdhobQPRv3lz5AghMqn7mJRYqQj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:88:6b:eb:e3:fb:3b:b7:e8:a6:cf:80:87:21:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bffb605dce3060dfb66dccca88eb7da0ac74af1
Validity
Not Before: Mar 1 17:00:54 2026 GMT
Not After : Mar 2 17:00:54 2026 GMT
Subject: CN=0bdc193df8aac11b5f7d97f35a79b6e96880d0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:86:c7:99:b5:84:2a:5f:86:b1:fb:e1:1c:
31:ea:41:78:1e:fb:49:68:e3:88:48:94:5d:ed:51:
ad:e1:35:c8:b5:3e:0e:4b:fd:60:ea:bc:d0:13:3c:
5d:11:4c:80:bb:53:f9:6a:cf:b4:b6:f0:9a:e0:48:
a0:24:9d:d4:3d:c6:95:80:c9:a8:b4:2f:e5:4b:a4:
5b:73:6f:d3:45:9c:96:ce:8b:4d:7e:b9:13:9c:83:
af:11:56:7c:ae:a2:57:c2:5b:f0:c0:82:8e:16:b4:
b5:41:e7:0a:be:45:b1:60:fe:dd:cf:e7:89:89:24:
ff:26:49:70:92:ab:71:0a:0a:9e:9c:75:03:ff:dd:
7e:67:df:e7:22:1e:fe:91:f6:6f:16:64:06:86:09:
d0:ff:f1:80:2b:6d:1f:3c:62:45:4d:a6:7d:e0:71:
63:90:17:79:2d:8e:13:bd:7e:c8:b5:12:56:19:64:
ad:b3:0f:4f:ef:b0:d5:12:b7:cb:2e:50:9b:d4:06:
96:9b:22:de:9f:15:d7:1a:da:7e:f4:55:2c:c1:de:
a7:b5:18:67:b7:8a:65:a1:bd:00:c7:1e:82:ac:31:
0d:d2:ec:c2:12:91:52:4d:f7:12:4c:93:e6:b7:f6:
ba:6b:26:57:20:72:14:45:66:84:25:75:dd:fc:c5:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DC:19:3D:F8:AA:C1:1B:5F:7D:97:F3:5A:79:B6:E9:68:80:D0:B4
X509v3 Authority Key Identifier:
keyid:3B:FF:B6:05:DC:E3:06:0D:FB:66:DC:CC:A8:8E:B7:DA:0A:C7:4A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_-2BdzjBg37ZtzMqI632grHSvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0caaeb-287d-4ed5-ad7e-6b1d0714554a/1/O_-2BdzjBg37ZtzMqI632grHSvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:72:ed:e3:2d:13:b0:1c:44:79:bd:e5:90:b5:69:b2:a7:b0:
ea:fd:c9:1a:d7:c4:10:06:f7:1a:ae:60:98:0e:5b:43:b5:6a:
9a:12:a4:25:8c:67:27:35:c1:21:25:7c:98:8d:5f:ff:57:65:
05:bf:ee:ef:3b:64:fa:85:cb:53:e1:fc:40:ed:d0:c5:b5:9e:
29:05:31:bb:44:97:ef:36:b2:8b:ff:c6:7e:c9:9c:4e:f2:5c:
f5:f8:1b:57:4d:0d:e1:0e:49:b9:33:2f:88:29:6b:d2:34:a5:
65:83:9a:18:e8:e4:1c:45:d6:d0:20:1e:ce:31:f0:64:fc:19:
b8:af:0d:08:10:a6:0f:54:81:30:25:6c:5f:f0:20:52:10:5e:
b6:1d:ef:d8:9b:bd:58:22:25:b9:65:81:37:60:7d:0b:1b:65:
96:65:fc:4a:a9:f7:6c:41:42:fd:2d:62:4c:31:ba:3d:2d:50:
75:fa:07:94:ab:2b:33:0c:62:1e:ba:7f:45:2c:02:ea:97:8e:
12:17:19:6d:82:34:26:6c:de:46:a7:cd:81:06:c8:05:8f:5f:
0b:83:a9:74:f0:45:77:7a:e6:7c:c4:ba:f7:c9:73:64:24:1b:
80:bf:ba:53:3a:16:d5:b3:7a:42:4f:ce:30:02:75:e9:8e:9e:
26:73:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:30 2026 by rpki-client