Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: snR/JCnO4Ws/86JcK0V3j2qqNVkKpU6MBK8zbQgN9Fg=
Subject key identifier: B4:DA:50:43:98:66:4C:B4:1A:81:54:48:D1:5A:68:FD:72:E2:69:E6
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 019D2A048823AC04DB71193FD0EE8B86D360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 1146
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: J0Ot09Zfezy5Ov8mY9ncQ0I9wgREkPvLzoEK0JuOvdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:88:23:ac:04:db:71:19:3f:d0:ee:8b:86:d3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=b4da504398664cb41a815448d15a68fd72e269e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c9:6e:e2:5c:00:48:35:98:97:d3:a6:14:66:
f4:6b:3c:3d:13:f0:35:0f:37:b7:36:dc:1e:22:4f:
8a:61:37:99:c0:e4:3c:aa:f9:d9:c3:d1:3a:31:f5:
23:88:73:36:49:75:50:d2:15:90:82:a8:a2:7d:82:
43:62:14:a6:ce:4c:41:a2:f7:94:95:2c:4c:28:ee:
17:7e:a2:13:07:91:e5:3a:d6:1a:73:46:94:96:25:
a9:63:a7:79:62:a2:67:a6:e6:e2:05:33:ac:c8:2d:
46:b6:d6:70:42:6b:b7:2c:1d:01:18:02:cf:40:a3:
fe:6c:78:5c:c2:16:68:c7:6c:ff:09:a3:ac:6a:ae:
1c:1e:08:1f:1e:3b:0d:7f:ba:97:a5:82:3b:1a:2e:
50:1e:6b:22:9e:44:8e:34:32:93:9b:a5:fd:e3:ed:
7b:90:e3:4b:d6:c9:ee:4c:4f:a3:e2:ef:eb:30:74:
29:5b:a8:64:8a:a6:74:97:ed:25:a6:22:3f:42:c5:
bd:bb:8b:d9:5e:81:64:40:c7:ae:2c:2f:4c:fc:90:
cb:d1:23:ce:85:4c:eb:6c:eb:bf:d5:b7:c7:d6:4c:
bd:25:e3:f9:d0:9e:f9:b5:65:8b:d8:82:12:dc:0d:
83:45:76:45:8f:b8:d8:b9:83:c0:b8:c1:a5:6b:a6:
b3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:50:43:98:66:4C:B4:1A:81:54:48:D1:5A:68:FD:72:E2:69:E6
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bf:9b:7f:89:43:a5:30:3b:bf:97:42:c3:a8:26:87:c8:24:
07:7f:1a:42:12:86:36:69:9a:72:1a:c4:60:7e:7d:dd:cc:47:
32:cb:fa:95:21:71:36:bc:64:75:55:4a:84:4a:d5:08:e5:49:
16:99:12:6a:e0:65:77:2f:ba:ee:ab:35:6d:84:8e:ed:11:7b:
4a:0f:91:a1:ee:5e:c0:8f:eb:b8:75:90:43:78:13:ea:e3:0c:
f7:83:ff:1b:3f:f4:87:08:0e:6c:78:dc:70:67:d6:f8:4d:9e:
b9:52:d3:6e:2d:c0:82:01:16:d0:e5:15:f6:9d:61:a7:5a:0a:
fd:5d:a0:ea:cf:30:89:e4:02:8c:01:6e:9b:b5:1c:e0:63:5b:
f3:7e:b6:57:71:a1:62:25:7b:b6:c6:60:1b:4c:8b:71:03:79:
47:07:c9:b9:6d:78:91:48:1a:00:47:f4:7f:f5:1c:f5:c0:81:
4f:ca:a1:c5:99:9d:1f:05:3a:f7:fb:46:fe:63:8b:ca:94:f3:
73:26:93:45:13:f7:da:f0:8f:2e:35:6c:53:b8:2a:9b:58:27:
b4:dc:6f:ae:a8:51:fe:70:b0:a7:3b:a7:c2:8f:47:4e:5f:40:
91:2b:07:cf:2e:f8:6d:b9:79:6b:6c:01:a4:3e:53:76:17:a4:
f1:06:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:50:41 2026 by rpki-client