Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
File: O5WuuspzMW3EaAyAi3k-aglWXxs.mft (raw, json)
Hash identifier: rsVcu/YSl0u0N78iQK2BvWQRCR+01gFiQhevWH42GFE=
Subject key identifier: 28:77:8F:B3:BF:B1:97:A1:ED:55:7C:E4:80:18:22:43:76:44:A5:98
Authority key identifier: 3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
Certificate issuer: /CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Certificate serial: 019D9CD179BD0910D5DD913034CF212ABEDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
Manifest number: 071A
Signing time: Fri 17 Apr 2026 19:01:06 +0000
Manifest this update: Fri 17 Apr 2026 19:01:06 +0000
Manifest next update: Sat 18 Apr 2026 19:01:06 +0000
Files and hashes: 1: O5WuuspzMW3EaAyAi3k-aglWXxs.crl (hash: /vYR7N9+wBbZzdWcIdgTS3dbE98kiGfk2Z0RwRAbick=)
2: cJoSZCFXqDtUSGkR6NyIWGdWJ5c.roa (hash: +4bfJl1WilU4FwTMIun4/VtCPiBZ9GR88vkRCY6T3TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:79:bd:09:10:d5:dd:91:30:34:cf:21:2a:be:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b95aebaca73316dc4680c808b793e6a09565f1b
Validity
Not Before: Apr 17 19:01:06 2026 GMT
Not After : Apr 18 19:01:06 2026 GMT
Subject: CN=28778fb3bfb197a1ed557ce4801822437644a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:67:40:fd:1e:ad:c2:a9:5f:94:93:08:46:
65:46:be:78:b5:b7:06:d9:3b:94:0f:fa:9f:57:c1:
a9:f7:d8:00:d6:14:c2:80:59:4f:23:31:44:6d:b1:
d0:0b:06:8c:ad:f5:24:8d:58:4d:ab:bb:04:f7:43:
33:11:1f:66:e5:df:be:24:e3:ed:d5:ad:1f:c8:8c:
04:03:1e:c9:ea:b4:67:2e:f2:96:c8:07:56:e0:11:
05:1e:86:f1:0e:97:e5:7a:81:06:d5:3a:8a:4c:58:
3e:25:21:1f:d2:3c:88:f8:44:91:4d:1e:77:e5:2d:
4c:31:9a:c2:67:31:1e:c6:4b:05:91:51:39:45:b7:
a5:81:d8:57:c5:94:b7:bf:1e:4c:8f:2d:b6:48:78:
de:4f:a9:98:ac:36:a2:f9:be:b7:9d:ec:89:fe:51:
6d:2a:da:63:0e:17:d8:a2:b7:3d:6e:bd:bd:4e:34:
b8:b9:34:51:51:8c:95:4c:99:23:d8:5b:ba:3e:77:
5c:de:1c:0e:85:25:97:e7:cd:f4:15:0a:d7:a0:02:
b7:b5:c2:f6:4a:18:ba:c9:72:1f:4d:96:fb:56:d2:
37:b9:04:18:3a:3e:17:fe:58:95:7b:71:8b:62:87:
2c:34:a2:e0:c1:05:aa:04:a9:c3:77:cb:74:89:ed:
11:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:77:8F:B3:BF:B1:97:A1:ED:55:7C:E4:80:18:22:43:76:44:A5:98
X509v3 Authority Key Identifier:
keyid:3B:95:AE:BA:CA:73:31:6D:C4:68:0C:80:8B:79:3E:6A:09:56:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5WuuspzMW3EaAyAi3k-aglWXxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab3f36-7850-4266-b67a-023cc1fc1910/1/O5WuuspzMW3EaAyAi3k-aglWXxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:86:96:fd:c7:3f:5f:18:e2:6b:f1:a0:1d:10:3b:c6:8b:19:
ab:2f:33:c9:48:fa:65:6c:62:cd:18:23:a2:55:d5:9b:26:be:
6c:98:a6:a8:76:82:58:88:2d:99:18:44:fa:23:05:7e:cf:1d:
de:cc:9d:fa:91:10:6d:15:65:99:09:08:80:59:07:e5:2f:c0:
cf:07:b0:bf:c2:21:0d:e4:73:91:d9:6a:87:83:87:d3:2c:a7:
da:51:65:9c:12:10:b0:a0:a8:b5:4c:53:26:65:99:18:41:7b:
50:c7:74:ac:34:46:81:21:82:d5:4c:65:5a:ec:88:5a:33:4e:
f9:9c:5e:09:54:cd:10:aa:8d:dc:01:99:80:dc:e7:88:6d:a3:
3c:14:fd:30:78:50:b2:b8:73:d9:73:08:7a:cb:d3:15:57:f0:
e8:5c:8d:6a:74:8a:de:0e:2e:c2:bd:97:cc:14:ef:f0:7c:b3:
90:41:4b:e5:00:b3:e1:06:32:91:df:ca:09:19:65:a5:87:6e:
5e:d5:ac:9e:15:0b:b4:bc:9c:28:6d:6c:12:55:c0:be:a2:f0:
5c:ad:fa:94:26:59:8d:70:1b:4e:e3:0e:7c:09:72:5a:1e:9e:
98:86:ab:ca:26:9c:a4:05:16:0b:f8:f3:40:cd:af:c5:54:b3:
fa:06:0e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:35 2026 by rpki-client