Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: YUdWdXm0Yry196mzsmG9UJezsi0zwX1ALuac5TDpGMQ=
Subject key identifier: A5:87:C7:22:B5:E8:CB:38:E4:BA:DD:18:5E:D5:EC:11:05:F4:C9:63
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 019D28F2D411BACC92575A4BE99E130BC4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 1401
Signing time: Thu 26 Mar 2026 07:01:35 +0000
Manifest this update: Thu 26 Mar 2026 07:01:35 +0000
Manifest next update: Fri 27 Mar 2026 07:01:35 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: /jO6uVXIOFNytrBLonjeEn2SikOIUdBuBsMYmol5MQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d4:11:ba:cc:92:57:5a:4b:e9:9e:13:0b:c4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Mar 26 07:01:35 2026 GMT
Not After : Mar 27 07:01:35 2026 GMT
Subject: CN=a587c722b5e8cb38e4badd185ed5ec1105f4c963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:71:cd:4a:78:eb:18:13:88:a7:e8:6c:9c:12:
df:0b:fb:17:fb:0c:0c:66:6d:c3:ac:5e:ba:57:af:
e7:5f:7e:3d:38:85:b6:f1:85:8b:fc:26:9d:4e:2d:
53:c1:82:f1:64:b8:a6:99:64:23:65:9d:8b:72:3c:
76:13:47:65:44:a7:7d:97:ee:d6:5c:f1:d2:9a:18:
45:ff:53:fd:ca:ff:35:af:12:09:ee:89:f0:9b:93:
d8:a7:38:d6:44:0a:2a:cf:be:49:7d:20:d8:68:76:
b4:d8:fd:ec:a0:a7:05:eb:ef:6c:de:2d:26:dd:89:
28:56:22:42:0b:5e:51:a2:0d:84:fa:88:53:f1:aa:
76:0a:05:6a:12:de:a1:31:27:29:0f:da:a5:d4:f0:
36:cd:eb:a4:76:09:f4:02:21:27:0d:d7:0b:e7:3f:
df:4c:5e:b1:b1:44:84:f6:fc:68:8c:a9:db:31:20:
cb:a5:0b:a2:32:a4:0d:f4:bd:e1:0b:1a:c5:d2:ac:
c5:4f:41:2c:3b:2f:a4:f7:94:60:b1:54:ba:fe:b4:
16:e1:3f:e3:bb:ec:6f:b9:ad:9a:e4:88:d4:ae:fd:
0b:47:0a:b8:1d:0f:3b:5c:0a:ca:c7:b0:bc:6b:d3:
0e:41:de:5d:49:cf:41:f3:ac:0b:0c:c1:5d:fe:31:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:87:C7:22:B5:E8:CB:38:E4:BA:DD:18:5E:D5:EC:11:05:F4:C9:63
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:1b:85:80:ac:61:43:04:37:c6:5b:05:31:73:cb:d0:a5:f5:
61:3c:af:ba:32:1a:c4:a2:9f:e0:75:72:76:11:fb:88:2f:8c:
70:03:9b:c6:e3:d1:ad:92:88:3b:0e:12:a1:7f:f5:61:63:f8:
7a:6d:4d:2a:f3:ee:22:ca:85:7c:51:23:51:b6:0b:52:54:20:
4d:77:ad:50:24:eb:2f:89:14:26:b1:9a:e8:f5:8b:13:18:ca:
af:99:ca:4c:37:28:81:57:74:9e:fd:eb:d8:65:a7:73:2d:5b:
dd:ae:a1:c4:82:2a:f2:c8:7b:4f:f3:6c:21:0c:57:2d:a6:f3:
d0:b2:1b:e8:db:42:f4:80:f4:f7:11:b0:63:38:a5:4d:0d:57:
78:eb:97:f7:1f:44:97:4f:0e:bc:a0:64:cf:f7:01:d6:c0:86:
ea:75:df:b8:fb:83:d2:76:32:e0:80:18:47:41:f5:a1:c6:54:
8c:8c:3a:3e:2a:46:14:cb:b9:d4:9d:00:80:6d:7d:f2:6e:ba:
a1:0b:71:83:09:d6:3c:a4:b5:68:16:9a:d8:a5:36:91:74:88:
a8:ce:6c:25:1e:97:3b:c8:41:36:79:06:90:71:d7:79:e8:86:
54:c0:92:8d:c8:73:96:9f:6a:5e:c7:4c:80:2d:47:24:ff:18:
fe:34:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:21 2026 by rpki-client