Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
File: _oN5mWfs0ExTYUie5M-gmM5DaHE.mft (raw, json)
Hash identifier: ketHbjeEZUDTCIJ+ucdn4ljCOMT5lNXCOByp/qafosw=
Subject key identifier: 1C:48:97:EF:54:B2:34:C8:46:DA:CD:DE:BF:F3:F0:6A:CE:FB:BF:B1
Authority key identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
Certificate issuer: /CN=fe83799967ecd04c5361489ee4cfa098ce436871
Certificate serial: 019D28F1F5E93A4DCA377C0448703DDAF049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:00:38 +0000
Manifest this update: Thu 26 Mar 2026 07:00:38 +0000
Manifest next update: Fri 27 Mar 2026 07:00:38 +0000
Files and hashes: 1: _oN5mWfs0ExTYUie5M-gmM5DaHE.crl (hash: 52G4vA2aBcz/XL28QbpdrDMzBXNXDheYyqTNxjN2dwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f1:f5:e9:3a:4d:ca:37:7c:04:48:70:3d:da:f0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe83799967ecd04c5361489ee4cfa098ce436871
Validity
Not Before: Mar 26 07:00:38 2026 GMT
Not After : Mar 27 07:00:38 2026 GMT
Subject: CN=1c4897ef54b234c846dacddebff3f06acefbbfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:4a:8a:a6:d1:1b:8c:3a:48:b1:f8:59:c1:
3c:16:b1:e9:e1:a8:a6:75:81:8d:e4:dd:af:92:8d:
cd:69:a5:dd:02:17:9d:c9:c4:11:6e:08:b2:10:63:
9f:b6:40:cd:f7:b0:19:59:de:aa:f8:1d:35:93:57:
86:af:30:fb:5c:6a:f2:dc:09:7c:4a:78:8a:a8:b8:
94:79:f2:c6:b1:79:4f:1b:06:9a:a6:58:e8:b7:7c:
5e:2d:2f:ef:d2:a2:9a:a7:d8:f4:22:90:e1:f7:0f:
ed:c3:4e:c0:ba:1b:08:0c:68:37:d9:a9:f1:11:3e:
fe:f0:d0:38:79:58:ab:31:46:ee:42:b6:8c:bf:13:
03:f0:f8:69:1e:3c:ab:76:17:db:29:83:b8:b0:20:
94:8f:ce:19:60:c9:55:72:34:7c:fa:c3:49:48:10:
40:5f:09:22:c8:f8:d1:f7:6e:21:5b:d0:c4:9b:0d:
37:47:87:57:8d:72:a5:eb:61:3c:8f:67:94:8f:97:
b1:3a:48:6d:a9:f3:50:5f:7b:51:df:42:78:de:8f:
7d:f8:0a:5a:4e:55:27:89:c6:57:ce:92:59:5d:19:
6b:79:03:f3:31:7f:e5:23:e7:82:8a:93:4e:23:cd:
04:85:79:cc:7d:b3:b5:a3:c6:a9:91:6b:11:ed:40:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:97:EF:54:B2:34:C8:46:DA:CD:DE:BF:F3:F0:6A:CE:FB:BF:B1
X509v3 Authority Key Identifier:
keyid:FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1d:47:88:1b:72:e0:59:75:1f:77:99:34:59:d1:0d:73:a3:
d0:09:68:2a:14:58:aa:cc:3c:d2:13:84:cc:88:02:23:45:36:
0e:df:9a:b9:c3:f1:3b:99:34:c4:04:56:26:7f:ae:72:9e:45:
51:89:03:b1:74:e6:45:2b:57:16:b1:21:41:b4:80:4c:33:20:
90:ce:1a:17:53:79:34:81:c0:9b:00:b2:9b:03:71:5e:01:e2:
56:71:b3:90:9e:69:8c:cd:4e:f9:3d:52:52:7c:2c:e6:21:7e:
9b:0e:9f:75:0a:72:9d:b0:d2:78:39:26:e5:44:57:2e:24:5c:
f6:cb:cb:dd:6f:43:39:8e:a5:72:f2:59:c1:d3:59:95:3e:92:
44:34:38:bd:13:d1:32:47:b9:ae:1d:b9:e6:81:62:d8:4c:e2:
04:67:07:78:1d:3b:0d:6f:32:f4:06:74:e4:ca:17:e6:5d:37:
8b:15:71:27:5c:1c:72:80:de:99:13:b7:48:1f:09:e6:24:ef:
30:ae:57:7f:64:48:90:c5:83:38:0f:07:80:7b:f5:16:4f:66:
f3:ec:a1:1d:0b:33:3b:e6:85:36:4f:9e:e6:91:7e:a8:79:ba:
ee:ae:de:ed:73:3a:81:36:96:1e:75:1f:c1:37:77:ff:8e:7d:
01:e9:fd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:48 2026 by rpki-client