Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: cpyzKIMeNanLX1kBt2l/NncAtuTgjInZL5cg6zXFhpY=
Subject key identifier: BB:25:53:50:F9:A4:AE:EE:A8:4A:AE:86:03:75:27:3E:10:E2:9E:2A
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 019CAD5927E5C7487F30251415DB1EF08D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 069E
Signing time: Mon 02 Mar 2026 07:00:27 +0000
Manifest this update: Mon 02 Mar 2026 07:00:27 +0000
Manifest next update: Tue 03 Mar 2026 07:00:27 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: +h/n+0ZNfJc18XEbzBS0Ij9ltvRj4zynxF5HgZq5I6I=)
2: cJoSZCFXqDtUSGkR6NyIWGdWJ5c.roa (hash: +4bfJl1WilU4FwTMIun4/VtCPiBZ9GR88vkRCY6T3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:27:e5:c7:48:7f:30:25:14:15:db:1e:f0:8d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Mar 2 07:00:27 2026 GMT
Not After : Mar 3 07:00:27 2026 GMT
Subject: CN=bb255350f9a4aeeea84aae860375273e10e29e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:d7:a8:c6:8a:8b:eb:d8:17:4e:10:cf:17:
d5:de:ca:23:67:57:3a:8f:73:f3:29:f6:0a:0e:3b:
ab:5d:4b:ec:e3:19:79:bd:4b:b4:1b:5e:ba:fd:45:
2f:19:26:f6:e7:91:68:27:03:37:d8:8f:9b:f4:77:
3b:41:8c:1f:08:b5:48:32:85:9d:cc:aa:b1:07:48:
29:f9:39:65:98:f6:46:15:d5:e3:0a:bf:9b:75:1e:
d7:6b:07:53:e0:95:a7:f6:60:25:d4:39:c6:6f:f2:
a7:e8:62:5b:4c:75:95:fb:cc:19:9c:eb:57:ab:4e:
bc:32:b7:09:d7:1e:4c:b0:21:c6:4b:2d:52:0c:15:
f3:a2:61:fb:37:94:5f:58:e0:f3:b3:4a:c5:82:17:
93:26:7d:51:d5:32:55:12:ce:77:55:36:d1:65:5a:
3f:cc:f7:40:6c:3b:b1:83:86:15:6a:91:13:50:18:
d5:c1:6c:c7:e6:19:32:05:47:df:0c:e9:7c:5a:04:
42:a9:61:ed:b8:1f:69:17:23:c8:e6:e5:0a:31:13:
39:77:8c:3f:38:45:83:62:4d:d3:b7:b3:da:43:3c:
3f:94:7d:e8:e5:28:25:f0:45:a2:9b:c3:a7:34:8e:
fd:86:0c:d3:83:cc:30:c3:7f:89:7c:87:2f:e7:3e:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:25:53:50:F9:A4:AE:EE:A8:4A:AE:86:03:75:27:3E:10:E2:9E:2A
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bb:ac:e1:27:bd:a0:a1:56:c1:17:16:de:dc:09:5b:d7:1e:
8a:43:a3:6c:59:82:ea:9f:b8:65:37:33:42:63:f1:13:12:5c:
ca:7a:d7:ae:49:66:bb:7c:76:05:9e:5b:cf:06:db:ba:40:bd:
2a:83:17:b8:f5:fe:8f:5f:5a:94:92:db:0e:32:cc:d4:fa:2d:
70:3d:92:de:f2:d0:1c:e5:a1:7d:43:a2:2a:4a:cd:35:17:ee:
07:75:e3:a0:7d:0a:62:a8:90:7d:dd:21:62:6d:e5:20:e9:a8:
78:42:08:71:58:42:b9:ad:21:cf:a4:78:80:76:23:10:73:0d:
0c:3e:8c:b8:4b:15:89:0c:95:ec:a8:b6:ef:f2:10:c2:19:db:
11:3e:e8:f7:9e:c2:92:a2:7b:ac:b8:28:8c:34:17:0d:93:ce:
92:fc:63:91:23:4b:a1:a7:d1:72:17:09:7d:29:bb:7c:b5:fc:
1b:c2:1e:cf:f2:3e:da:e9:61:63:4d:ee:a3:24:3a:93:dd:1d:
86:b7:38:1e:46:18:9a:60:5b:03:37:4c:a5:cc:29:77:0a:6f:
b7:72:68:8d:e1:05:d2:3c:ef:67:d0:59:0d:cd:a7:73:ff:d9:
57:dd:f8:9e:a3:60:f6:39:e3:f4:c8:11:b2:98:d9:71:10:8e:
71:2f:cf:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWSflx0h/MCUUFdse8I2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTVhZWJhY2E3MzMxNmRjNDY4MGM4MDhiNzkzZTZhMDk1
NjVmMWIwHhcNMjYwMzAyMDcwMDI3WhcNMjYwMzAzMDcwMDI3WjAzMTEwLwYDVQQD
EyhiYjI1NTM1MGY5YTRhZWVlYTg0YWFlODYwMzc1MjczZTEwZTI5ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRvXqMaKi+vYF04QzxfV3sojZ1c6
j3PzKfYKDjurXUvs4xl5vUu0G166/UUvGSb255FoJwM32I+b9Hc7QYwfCLVIMoWd
zKqxB0gp+TllmPZGFdXjCr+bdR7XawdT4JWn9mAl1DnGb/Kn6GJbTHWV+8wZnOtX
q068MrcJ1x5MsCHGSy1SDBXzomH7N5RfWODzs0rFgheTJn1R1TJVEs53VTbRZVo/
zPdAbDuxg4YVapETUBjVwWzH5hkyBUffDOl8WgRCqWHtuB9pFyPI5uUKMRM5d4w/
OEWDYk3Tt7PaQzw/lH3o5Sgl8EWim8OnNI79hgzTg8www3+JfIcv5z5m6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLslU1D5pK7uqEquhgN1Jz4Q4p4qMB8GA1UdIwQY
MBaAFDuVrrrKczFtxGgMgIt5PmoJVl8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2Et
MDIzY2MxZmMxOTEwLzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9hYjNmMzYtNzg1MC00MjY2LWI2N2EtMDIzY2MxZmMxOTEw
LzEvTzVXdXVzcHpNVzNFYUF5QWkzay1hZ2xXWHhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7us4Se9
oKFWwRcW3twJW9ceikOjbFmC6p+4ZTczQmPxExJcynrXrklmu3x2BZ5bzwbbukC9
KoMXuPX+j19alJLbDjLM1PotcD2S3vLQHOWhfUOiKkrNNRfuB3XjoH0KYqiQfd0h
Ym3lIOmoeEIIcVhCua0hz6R4gHYjEHMNDD6MuEsViQyV7Ki27/IQwhnbET7o957C
kqJ7rLgojDQXDZPOkvxjkSNLoafRchcJfSm7fLX8G8Iez/I+2ulhY03uoyQ6k90d
hrc4HkYYmmBbAzdMpcwpdwpvt3JojeEF0jzvZ9BZDc2nc//ZV934nqNg9jnj9MgR
spjZcRCOcS/PCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:12 2026 by rpki-client