Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
File: OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft (raw, json)
Hash identifier: 0lARGr7jLlueDRrCWeGeuaKb5QGoVVf4Qbel5kQNC90=
Subject key identifier: 0F:73:10:04:66:DC:38:6C:F9:FC:1C:EF:60:84:CA:27:B1:9A:D5:93
Authority key identifier: 38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
Certificate issuer: /CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Certificate serial: 019CAD9087725549D57ED377C45B90D2C41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
Manifest number: 0F3B
Signing time: Mon 02 Mar 2026 08:00:56 +0000
Manifest this update: Mon 02 Mar 2026 08:00:56 +0000
Manifest next update: Tue 03 Mar 2026 08:00:56 +0000
Files and hashes: 1: OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl (hash: j+nfzffJL0yGvqHAQfrPUyhP9cA4Efpzk73y028g5Vk=)
2: SA91wBhkikPDWTrAUdLpOxUcx_0.roa (hash: Y6pGr30mVBYxj09imikNObgMk7TKch+XIWYn2BcZKOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:87:72:55:49:d5:7e:d3:77:c4:5b:90:d2:c4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3829d131be52810e47c9cbbf83a3ffbd4f7cbdbf
Validity
Not Before: Mar 2 08:00:56 2026 GMT
Not After : Mar 3 08:00:56 2026 GMT
Subject: CN=0f73100466dc386cf9fc1cef6084ca27b19ad593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:0e:0b:1e:13:e7:bc:0a:d0:bb:46:0e:76:
99:9a:df:2a:59:29:5d:6f:02:41:3e:af:1b:cf:1f:
61:e1:0b:8f:d3:8a:42:f9:f0:23:7e:02:0b:11:f2:
f4:5f:df:a8:d4:70:02:a5:e2:28:5a:f4:68:ff:e9:
00:6a:d0:6c:2d:e5:db:c9:89:eb:c5:9c:39:f0:0c:
15:f6:50:63:d8:31:a1:aa:2f:f1:19:f0:86:41:00:
a5:2f:e7:7e:b9:89:b4:0a:67:c7:9d:2e:19:11:6b:
1d:60:7e:cb:71:37:54:6c:b4:cd:51:1f:9d:25:3c:
32:48:e4:ee:8c:46:fe:1e:db:65:40:21:fb:3b:90:
c9:87:44:51:b8:20:cb:d9:5c:d3:72:c6:b4:36:1b:
f0:0f:57:a0:47:66:3d:3d:06:90:ab:34:15:5d:8f:
72:28:03:a7:45:83:f1:88:4e:4c:b2:5e:2e:1e:f8:
51:e6:ce:6e:8c:bb:d6:5a:98:8c:3e:75:18:5f:dc:
51:2e:54:24:0a:5d:0a:f3:ec:b0:7c:7e:63:49:70:
9a:7c:46:53:ef:c2:f1:ba:29:0a:d8:fc:e7:9e:8d:
59:0c:4b:55:f2:0b:97:55:99:21:7c:8d:bd:27:e4:
da:58:6a:67:95:ab:d2:75:23:75:15:6f:01:24:e9:
ac:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:73:10:04:66:DC:38:6C:F9:FC:1C:EF:60:84:CA:27:B1:9A:D5:93
X509v3 Authority Key Identifier:
keyid:38:29:D1:31:BE:52:81:0E:47:C9:CB:BF:83:A3:FF:BD:4F:7C:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCnRMb5SgQ5Hycu_g6P_vU98vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b1a4e1-877b-4380-bfbf-b038db898b7e/1/OCnRMb5SgQ5Hycu_g6P_vU98vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:10:a6:a2:81:48:ed:e1:b5:19:1a:f2:00:e3:80:b5:06:e3:
ae:3e:a5:01:61:d6:9c:83:c0:f2:5b:d0:1c:da:d5:25:a1:a5:
8e:c8:71:a9:8a:cc:11:18:f1:d8:03:09:8a:81:1e:d7:bd:ae:
37:81:cd:35:25:9b:fe:75:14:5d:b0:d7:c3:80:2e:1e:9b:16:
0c:00:15:0d:43:d6:22:69:75:a3:f0:01:c2:a3:0c:cb:53:6b:
24:e2:30:ac:e3:5b:fa:af:61:a7:08:da:83:c5:01:ae:1b:2f:
0b:6a:d1:c0:5b:35:6c:98:6d:3a:fe:30:eb:1b:d7:72:2d:6a:
af:c8:4f:23:c6:5f:42:5d:28:2e:27:8f:ea:f7:3b:29:3a:37:
03:5a:d4:1e:65:8b:d0:6c:f5:de:c8:a6:cf:1d:45:a3:df:42:
63:9f:e5:47:23:bf:fd:de:0d:24:63:44:db:52:ad:65:13:4e:
b1:8d:f3:d3:f1:ac:f8:0d:d2:52:c4:56:04:13:ca:3e:59:22:
b0:b6:02:09:48:21:2f:55:7e:89:fa:ff:32:ff:74:9a:8c:8c:
3d:5f:86:8b:16:78:0e:47:9d:4d:29:2a:21:f2:ca:81:d8:99:
03:31:c0:21:61:1f:a3:95:ee:00:d7:7f:bf:df:fa:34:f7:49:
56:99:61:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:25 2026 by rpki-client