Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: GQP3oKzeG5J8iSfW4oSTxGXUW74T4zIn4nFTM+YSmDo=
Subject key identifier: 19:25:E7:A1:CF:33:03:E2:F3:FD:EB:D2:1A:79:81:E5:27:12:E1:3D
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 019D2A3BF6A48D0E8390CD3F2CF0ABFF9438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 13:01:05 +0000
Manifest this update: Thu 26 Mar 2026 13:01:05 +0000
Manifest next update: Fri 27 Mar 2026 13:01:05 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: uD3H2EVhmUAENKIzsBPj9pa6Z7bvCvZndcXk2Lqz5+s=)
2: qlUMTY8f9xMZJf_wYNKsX0Jnm9o.roa (hash: 6TBYCzPo1M2XR2SlsB1vR5t4Ago4gsLphNAfezL8f1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:f6:a4:8d:0e:83:90:cd:3f:2c:f0:ab:ff:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Mar 26 13:01:05 2026 GMT
Not After : Mar 27 13:01:05 2026 GMT
Subject: CN=1925e7a1cf3303e2f3fdebd21a7981e52712e13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:10:aa:4a:73:42:f3:4d:73:6a:09:7c:53:
24:c4:38:71:c7:fa:f1:74:0a:97:7b:28:da:dc:1e:
42:e9:b0:10:fe:4f:7d:87:19:79:0f:04:0f:8d:4a:
fc:b3:43:a8:73:dd:5a:d9:29:74:b9:a5:db:06:47:
7a:75:69:e0:13:48:63:57:08:9d:a0:ae:f2:75:ba:
1c:cb:22:7e:a0:16:f9:fb:33:fb:49:d9:12:b5:0e:
5b:4f:2f:a3:49:0c:6b:a2:dc:fb:1a:89:11:2f:55:
ff:b7:17:bc:bd:89:95:ce:c4:55:d5:de:27:1e:0d:
31:8c:30:ba:17:f7:e2:85:bf:3d:6d:c9:5e:49:f2:
50:2f:5c:30:93:59:e3:94:db:a9:b9:d0:73:54:01:
c8:fe:f1:7c:41:aa:ed:47:3a:6b:49:fc:0c:d9:ca:
8d:cd:61:b1:ab:25:d9:99:f3:1f:87:75:b0:dc:7b:
b8:3d:8f:f9:d1:bf:23:56:5f:0a:f3:38:04:b3:7a:
08:0f:01:91:7c:3c:8d:df:40:b5:da:3a:3d:1a:d2:
3c:92:52:84:ae:45:37:9a:67:96:f7:35:e9:e9:29:
60:f2:a4:72:b3:d4:be:8d:a0:26:47:93:1f:1b:be:
df:f1:9c:9f:96:6c:0f:a8:22:9c:de:c0:65:c5:98:
cd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:E7:A1:CF:33:03:E2:F3:FD:EB:D2:1A:79:81:E5:27:12:E1:3D
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:94:bc:ba:88:d6:d1:66:2c:9e:67:73:77:78:a3:c1:59:59:
8a:b9:05:1c:88:b0:22:b7:0f:16:48:97:cb:19:74:8e:94:ae:
f7:13:04:ba:13:14:11:81:4a:43:a2:10:37:01:e1:0b:95:77:
df:31:29:f7:4f:1d:43:73:ad:c3:23:c2:b7:2b:50:cc:40:49:
bb:62:7d:98:f5:9d:61:6d:cf:41:aa:a9:34:61:54:87:09:92:
cb:5a:93:87:c3:e5:2f:43:2b:7f:46:69:20:38:3f:a5:54:cd:
24:f6:81:29:c6:95:a3:8a:6e:9b:c5:94:74:75:cc:e3:b2:bf:
b1:16:3e:bf:47:b8:19:e4:33:e7:ec:f9:e4:0b:6a:29:49:1d:
9f:f0:52:f6:88:4d:f2:ba:16:85:43:23:36:31:8d:93:99:e0:
22:82:d4:50:71:b7:68:56:7c:a0:da:72:8b:a2:1b:43:1f:3b:
60:6f:43:41:55:c6:65:16:75:d6:4f:51:c1:16:cd:58:47:cf:
83:78:9f:a0:fc:2e:e6:4b:01:aa:b3:ce:34:76:4e:0c:0c:96:
04:27:5c:80:87:df:fa:98:25:d5:7d:73:be:29:e3:63:ce:69:
a2:4c:82:14:5a:56:2e:c3:34:63:25:e1:fe:e3:e6:c9:2f:fd:
3a:f6:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:32 2026 by rpki-client