Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: EZwnsx1ifHHavSCxDUsiFy2sC+sbsHnt4HlYwDIflD8=
Subject key identifier: 5A:E5:B9:3A:40:09:69:06:B0:EF:96:C9:D9:EA:CC:EF:BC:D8:37:0C
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 019D273A83253B13667096E60310CD5B46E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 11EC
Signing time: Wed 25 Mar 2026 23:00:39 +0000
Manifest this update: Wed 25 Mar 2026 23:00:39 +0000
Manifest next update: Thu 26 Mar 2026 23:00:39 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: WkPUqI9S9aRWxz+K7r8a00xdI/tUTkpglFp/e4VjQVc=)
2: ZkxTmxBiQkgSo4ZJv_M7YhFQ0hQ.roa (hash: 2n/6N4Jbcs9rQ/9iwExbuGW4el4Ljo8UJZzO/3/a1NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:83:25:3b:13:66:70:96:e6:03:10:cd:5b:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Mar 25 23:00:39 2026 GMT
Not After : Mar 26 23:00:39 2026 GMT
Subject: CN=5ae5b93a40096906b0ef96c9d9eaccefbcd8370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:4e:58:b1:52:72:b9:ca:5a:33:b2:5a:51:
ad:2b:cd:c4:32:d9:2d:20:9a:05:2c:b4:f8:94:f5:
b9:b0:62:53:ab:8f:62:71:1e:53:24:da:0b:f9:97:
8f:7b:fc:fa:d8:c6:86:39:8b:52:be:3f:45:8a:cf:
9c:aa:0d:90:d5:da:20:90:ac:13:e4:05:2e:7d:63:
29:3a:47:de:cf:56:bb:0c:cb:e3:81:13:ac:13:50:
c1:a2:6f:98:0d:96:47:70:df:bc:e6:ca:87:20:a6:
21:d8:d8:d9:7d:7c:e4:3d:9b:bc:f3:ed:0b:bb:b2:
8a:80:6e:11:ad:5d:42:75:a9:a9:de:11:63:2e:54:
0c:3e:2d:95:8a:c3:d3:d4:32:f3:c9:47:cc:8d:60:
32:dc:79:a2:73:32:61:54:2e:75:a7:b9:e1:e6:bb:
04:29:d7:42:1a:ef:b9:8e:96:fb:79:35:27:d0:60:
2a:bf:a5:06:d9:9d:3f:49:9d:3c:c2:7c:12:37:b8:
be:66:82:56:74:60:ec:a5:4f:9a:ce:db:aa:73:d6:
38:74:3d:0b:c8:eb:14:cb:b1:fe:8a:6a:7d:ab:be:
ae:3a:18:f3:cf:e0:23:dc:a7:27:d7:8c:ae:6c:3f:
24:2d:d9:a0:ce:98:76:b1:5b:4f:b9:43:76:d6:36:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E5:B9:3A:40:09:69:06:B0:EF:96:C9:D9:EA:CC:EF:BC:D8:37:0C
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5d:67:e2:b4:80:ab:72:f9:b4:04:9c:2e:93:cd:9e:37:55:
20:8e:83:1d:0e:9c:44:ae:2a:b3:e2:9e:f1:b0:51:c7:13:f3:
6c:ac:f7:c1:58:cd:01:10:24:08:8b:3f:09:a4:69:bb:64:cc:
fc:19:70:5b:6d:44:8d:c7:c2:58:7f:c4:75:02:e6:5f:c8:a4:
f3:39:e1:dc:0e:62:f4:47:1e:5f:f7:9d:e3:27:df:b4:c7:be:
8d:91:4e:0c:57:13:98:e5:b6:4d:b5:f1:41:e1:9e:08:79:88:
e4:8b:28:5e:80:42:b8:a6:55:1c:df:91:ea:82:f0:be:f1:54:
22:19:5b:62:af:e4:1d:40:51:98:b8:cd:47:84:97:e8:53:32:
be:a3:34:25:fc:6e:28:52:91:8e:ff:18:ec:69:c7:3f:f7:7e:
75:f9:b3:10:46:8d:1a:48:c5:13:43:1a:e5:bb:64:e1:ab:3a:
e9:60:4e:86:8a:e9:2d:c3:81:db:89:12:a3:46:77:14:bc:1d:
54:99:18:28:24:f7:93:28:22:cb:3b:f0:d1:c0:c7:36:4c:87:
3c:fc:15:ac:e5:b7:c7:cc:f5:e2:94:54:bc:5d:f7:6e:5f:7a:
cf:30:ca:c2:61:76:5e:9b:67:29:7c:56:67:7b:0a:38:4b:fd:
db:04:ec:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:20 2026 by rpki-client