Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json)
Hash identifier: 2+z0mMM6sfOkpSLp+kzxupPfmc6JNhuE9FTNJTyCMgQ=
Subject key identifier: 0B:E5:95:F9:CD:19:E5:61:F9:11:B2:50:C1:6A:26:D6:CA:A2:0A:A1
Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01
Certificate serial: 019D27A8B7C2B0B8474FCE2A46142FC31FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
Manifest number: 0DAA
Signing time: Thu 26 Mar 2026 01:01:01 +0000
Manifest this update: Thu 26 Mar 2026 01:01:01 +0000
Manifest next update: Fri 27 Mar 2026 01:01:01 +0000
Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: rt3CFmHjeHTVHBHUnIPpTQZHjE8lQ9P0rbGsZVNl0dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b7:c2:b0:b8:47:4f:ce:2a:46:14:2f:c3:1f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01
Validity
Not Before: Mar 26 01:01:01 2026 GMT
Not After : Mar 27 01:01:01 2026 GMT
Subject: CN=0be595f9cd19e561f911b250c16a26d6caa20aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:5b:19:b9:bf:5e:57:0c:3b:7a:ed:dd:dd:
61:f2:78:80:42:13:52:ca:04:74:3d:54:05:2a:e9:
f4:dd:00:b2:93:d5:f6:97:1d:93:26:87:62:77:ab:
aa:b1:93:f7:50:e4:72:6d:db:91:bc:17:ba:87:c0:
c0:f4:64:3d:c0:7d:e8:b5:2e:97:2d:e9:39:5d:7a:
b0:5e:6c:68:ff:f9:48:d2:6b:f0:e8:3e:10:28:ab:
37:c5:62:cd:d6:78:3e:a3:82:5e:a0:1c:52:ea:77:
77:32:d7:79:f0:5c:62:89:36:7c:c2:4f:21:23:6f:
61:5c:d9:be:cf:09:c9:e1:41:a3:a7:08:3b:85:fa:
2f:52:1f:ec:80:11:c0:89:d1:af:be:e7:c0:8d:cb:
d0:a3:19:1c:9d:bd:f7:51:0e:2d:30:ba:d6:00:71:
21:51:fe:8f:27:13:58:54:0a:a8:9a:01:85:fa:75:
64:18:35:da:11:c4:14:0d:37:9f:da:ef:90:af:09:
ae:0a:04:05:ed:30:09:e4:7d:24:aa:3b:9e:d8:47:
c6:e7:fa:24:2b:e6:74:57:0d:a5:04:d2:58:a1:37:
e1:cc:0f:19:54:85:5a:e7:e9:f6:0e:1f:cf:82:43:
9c:4c:cc:21:c2:89:f5:e4:de:a2:2c:da:65:55:3f:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E5:95:F9:CD:19:E5:61:F9:11:B2:50:C1:6A:26:D6:CA:A2:0A:A1
X509v3 Authority Key Identifier:
keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e2:e8:dd:fd:6d:3f:47:82:b3:4c:5d:c7:34:d4:c9:2c:0c:
7a:c5:80:26:26:59:1b:a5:0e:e5:51:de:a8:b6:c8:a3:1c:cb:
52:6c:12:6c:e4:b5:85:cc:f6:c0:7a:26:71:65:87:74:31:11:
49:b5:68:9c:5c:4b:3b:e3:bb:90:51:18:bc:fd:c1:02:d4:dc:
27:fd:58:8f:1a:04:a9:f9:2c:89:52:0a:68:3f:86:83:99:fd:
19:b3:86:55:19:ba:eb:14:87:9a:0e:92:d1:f3:f0:f6:f9:26:
8a:ad:e7:64:37:5c:7e:da:d7:e1:b1:8c:1f:8c:eb:8d:d3:f8:
3f:84:39:7e:34:39:62:1c:0c:54:de:7d:1d:36:f1:82:65:79:
38:5a:7f:2f:e6:41:b7:74:d3:8a:1d:3f:02:7e:ac:3f:3d:79:
08:55:c1:09:7b:26:46:47:7f:f3:c7:f4:04:91:b1:6b:77:29:
82:74:62:7b:da:35:46:6f:8c:3b:37:14:53:eb:84:b5:7a:ed:
b0:62:23:74:be:dd:fe:de:a0:23:ff:10:cc:e8:a2:45:99:cb:
6c:fa:32:2a:1f:19:12:43:df:ec:d7:d1:80:d7:50:99:1a:f0:
a2:9d:38:1f:ba:0f:2c:b6:d2:72:a5:84:a0:d9:3e:fe:43:0a:
1b:4e:70:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:41 2026 by rpki-client