Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: gRdaoODY2Q1sRq65JPAFqw6434htmZ8kRT3uYB6a2EM=
Subject key identifier: EF:FD:20:ED:91:19:41:56:24:92:41:97:D3:4C:25:F2:BC:0B:AD:71
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 019D32D09A08EF29B374E38BA53DAD205C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 0A98
Signing time: Sat 28 Mar 2026 05:00:24 +0000
Manifest this update: Sat 28 Mar 2026 05:00:24 +0000
Manifest next update: Sun 29 Mar 2026 05:00:24 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: NTI2A+Bvfsn+A3iKuMbuYNRzjSKyMFPqLZeOAQnGxe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:9a:08:ef:29:b3:74:e3:8b:a5:3d:ad:20:5c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Mar 28 05:00:24 2026 GMT
Not After : Mar 29 05:00:24 2026 GMT
Subject: CN=effd20ed9119415624924197d34c25f2bc0bad71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:2d:82:73:67:dd:66:66:54:b3:f3:30:86:
55:a0:f2:d3:0e:93:ab:e5:78:45:0a:0f:91:5c:08:
a8:d6:c9:29:05:eb:e8:c7:8f:ff:1e:85:5f:fd:ff:
4d:ad:df:fb:72:c2:b9:6f:6a:1e:58:83:59:6f:7e:
e5:cb:59:5b:09:79:c2:53:a8:f8:2b:09:f8:e5:d8:
a0:c2:c7:f7:21:b4:fc:e6:a2:e2:b7:1f:29:43:d8:
0b:8d:ea:56:30:cc:c8:8d:dc:f7:7a:d7:50:70:1c:
17:26:c2:fa:56:07:5e:5e:99:05:4a:e7:30:01:ae:
a5:95:a7:4d:d9:2c:7e:2a:43:d0:43:18:1d:25:e4:
6d:63:69:9a:f0:dd:90:89:82:8e:3c:03:9a:02:69:
5b:4e:01:0b:04:cf:98:64:82:32:65:cb:4a:4a:06:
95:6c:e2:ba:f0:6a:7e:df:fc:93:13:b9:28:6e:fd:
0e:ef:bf:fe:34:df:fa:08:99:b2:f6:06:cf:77:2d:
f0:6e:db:ef:0d:0f:e5:a0:23:88:59:88:21:bd:fb:
18:90:c3:dc:54:b6:7f:b4:d8:7a:f3:6f:8d:8e:b8:
44:8f:fa:18:91:8d:9e:3c:ee:76:bf:3b:59:e6:68:
b0:54:da:99:a5:9a:c6:d4:b4:7a:1c:3d:52:c7:b7:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:20:ED:91:19:41:56:24:92:41:97:D3:4C:25:F2:BC:0B:AD:71
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5c:1e:6a:ff:26:45:23:61:ee:3c:b0:c0:af:d2:0d:34:4f:
54:1d:37:4f:03:a4:2d:7c:94:89:30:c4:81:f6:fc:60:71:f8:
0c:36:bb:e8:32:94:d2:a9:d2:66:17:83:85:1e:cc:f1:e2:5a:
49:df:25:11:39:b2:c2:c7:d3:14:97:7b:08:22:25:95:c6:3b:
8a:cd:ae:91:55:2d:1a:23:41:f1:ec:0d:8a:fd:78:dd:a5:a9:
7c:62:92:3a:36:5a:c8:2a:56:d4:fa:b6:3b:f7:f2:a9:0f:29:
06:e7:e4:87:9c:69:f4:fe:3b:02:f9:3a:8e:28:33:0f:7c:e3:
6f:63:8a:04:1e:89:91:48:31:af:3a:b1:b7:0f:ef:c4:3e:82:
a4:90:55:a5:ed:07:1f:27:41:ef:ef:86:17:c6:a1:dd:1b:05:
1f:3d:8c:2a:f9:d0:cf:67:3b:2e:17:4f:8b:c8:13:74:67:8f:
af:62:db:97:c1:cd:c3:8b:c1:cb:68:f5:b3:20:fe:5c:01:b1:
27:61:5d:16:95:ba:f2:4c:85:01:c9:4a:67:88:a0:b9:d6:3f:
68:26:36:b8:3d:93:6e:33:e1:29:c4:31:e5:90:77:14:08:63:
08:dd:69:b0:c4:d4:44:a3:1b:e4:e6:4e:72:5d:ed:24:ee:6d:
76:9c:8b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:05 2026 by rpki-client