Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json)
Hash identifier: ZAsKmhwlNEcMobjtIbdt0354GxsuxlRN3/7/vEDMzMo=
Subject key identifier: 58:67:8F:4F:4D:BD:98:65:3E:1B:19:74:DE:6D:80:D1:E9:CC:EC:D4
Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Certificate serial: 019D2703AFC24842632472DCA97358CF767C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
Manifest number: 10F4
Signing time: Wed 25 Mar 2026 22:00:46 +0000
Manifest this update: Wed 25 Mar 2026 22:00:46 +0000
Manifest next update: Thu 26 Mar 2026 22:00:46 +0000
Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: HvWRRHrY3e6rxJIsbUj9bXmHeu5fS9w2oXc9QnP0ZWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:af:c2:48:42:63:24:72:dc:a9:73:58:cf:76:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Validity
Not Before: Mar 25 22:00:46 2026 GMT
Not After : Mar 26 22:00:46 2026 GMT
Subject: CN=58678f4f4dbd98653e1b1974de6d80d1e9ccecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8e:98:96:69:06:80:9b:e5:29:4c:a4:e9:a0:
cc:16:97:11:1b:62:a9:03:eb:5d:18:0d:38:4c:f6:
3f:34:1e:ab:ea:0e:d8:25:0d:09:0c:63:aa:c1:e9:
72:3f:96:0e:7a:28:14:e6:e5:78:ee:da:63:fc:1e:
37:20:90:44:00:26:35:42:3c:b9:22:6e:44:a5:50:
e6:2c:8e:14:6e:91:7e:73:a4:3e:ce:09:a6:ea:1a:
4b:45:65:3d:4a:7d:18:e7:37:d6:f7:12:d5:90:72:
70:7d:64:f9:ad:82:42:2d:39:6e:01:60:bc:72:81:
a5:04:8c:f1:38:2f:ca:31:01:0a:67:58:47:ed:1f:
6b:da:2b:0a:38:82:d3:05:1a:f4:16:84:70:40:92:
fc:0c:e3:8d:6c:3b:62:df:5b:45:26:9d:ad:3d:09:
b2:6d:ac:6e:0f:f1:1a:58:8c:00:aa:c2:fc:3d:99:
82:82:ac:0c:b6:f5:80:e4:91:98:1d:e3:84:e0:7d:
c5:74:8e:7f:cb:da:c3:a3:17:34:22:22:45:49:24:
ab:40:36:85:56:5e:15:ee:82:a8:df:7c:81:2f:81:
fc:5d:52:56:ed:86:de:54:ad:19:91:09:d1:8a:11:
1e:e5:e0:16:b3:46:b5:80:36:7b:46:53:84:b8:0b:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:67:8F:4F:4D:BD:98:65:3E:1B:19:74:DE:6D:80:D1:E9:CC:EC:D4
X509v3 Authority Key Identifier:
keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d9:23:0e:bf:63:03:35:c7:fe:19:6e:e3:7b:fb:29:01:67:
42:75:3e:32:4c:73:a7:c0:75:89:bd:18:80:17:ec:39:9a:03:
c0:6b:bf:c2:9a:cd:5d:09:69:aa:aa:10:0d:58:ed:da:1c:9d:
b9:3b:b7:39:1d:39:f6:92:f2:c3:b3:83:e8:96:af:71:1f:e5:
4e:13:68:f4:82:40:c9:86:8e:9d:ef:e8:d9:ed:fe:13:5a:37:
5f:98:65:ea:ae:dd:62:25:7b:61:39:c3:c6:22:bf:17:12:1d:
9a:ea:94:cc:1f:0d:f9:59:bc:c0:7a:37:b0:a8:bd:08:1b:81:
e4:0c:28:d4:7b:62:20:3b:7a:e6:60:8a:1a:02:ec:2a:31:30:
f6:6e:aa:03:65:2b:3c:9c:84:34:e5:4b:e7:7a:66:13:0e:ab:
ad:5f:b7:f6:41:e1:89:97:2a:a9:fa:8e:55:82:fe:b9:bf:7c:
80:e5:d6:59:08:06:32:ed:20:39:29:f5:48:9e:43:28:19:ba:
3f:58:3a:f9:d7:80:c1:71:ac:92:e2:8b:bc:be:cc:c8:7e:99:
6d:e6:0f:8c:61:e9:da:1a:a8:7f:42:51:2f:da:a4:7c:c0:8c:
74:fa:b4:66:25:10:19:d3:62:eb:cc:cb:af:2d:f5:da:0d:57:
5a:d4:96:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:43 2026 by rpki-client