Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: Q7CAt7xi+bXizKe6ibFxwIvMWEWT9BxtxarIMcN27/M=
Subject key identifier: F5:04:4D:0B:9F:7D:30:CA:E1:74:0A:19:32:49:31:5F:02:03:B5:AE
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 019D329A9A6341617EE7396833E39BDD7D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 118B
Signing time: Sat 28 Mar 2026 04:01:25 +0000
Manifest this update: Sat 28 Mar 2026 04:01:25 +0000
Manifest next update: Sun 29 Mar 2026 04:01:25 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: gCa8rHh/MVM38/Qu3fNtLUVOaVL+R4TOfUjFaEWZPgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:9a:63:41:61:7e:e7:39:68:33:e3:9b:dd:7d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Mar 28 04:01:25 2026 GMT
Not After : Mar 29 04:01:25 2026 GMT
Subject: CN=f5044d0b9f7d30cae1740a193249315f0203b5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:ec:b2:0b:db:0a:19:3d:8b:a5:11:65:b8:
72:0f:e5:00:45:a8:37:83:55:0e:07:58:08:ae:db:
a5:bc:f7:2e:bc:b2:8a:9f:b4:b6:b9:ef:7f:09:02:
79:d3:48:05:37:74:a1:22:4e:da:d8:f7:c4:04:b7:
d3:fc:85:21:9b:9a:ef:6f:12:13:4b:46:36:8a:2c:
1b:54:17:23:3a:8d:93:10:d8:5b:b8:74:05:99:a4:
16:54:f9:43:0a:a8:93:40:fd:d2:1e:06:23:b0:6a:
62:ff:32:2e:2d:6c:3a:f9:41:58:d3:34:97:9f:8c:
f7:6f:69:64:96:3c:e7:b2:be:a4:29:4d:6e:fc:81:
ad:bd:0d:d0:08:31:c9:f1:b5:77:1c:83:1c:0f:7c:
61:85:ef:59:ed:08:53:65:b5:94:83:4a:1d:c2:a5:
23:b3:08:8d:59:85:72:da:2b:51:47:2e:1c:39:21:
be:db:de:9d:c0:4f:9f:33:90:7b:2f:83:f2:c8:df:
4c:1f:80:e8:9f:f9:73:cd:ec:3c:ee:14:82:2d:c4:
5e:f8:9b:ad:98:73:bc:e4:9b:30:e3:7d:a5:2f:67:
37:00:57:e1:10:e2:e7:b2:d6:1e:72:ab:a1:5a:bd:
c8:38:16:2e:af:f3:33:98:d6:fe:cc:8f:ce:74:5e:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:04:4D:0B:9F:7D:30:CA:E1:74:0A:19:32:49:31:5F:02:03:B5:AE
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f0:80:a5:ac:a6:d8:2c:d4:b5:be:c4:d5:92:91:d7:53:f9:
fc:42:28:54:86:45:47:3c:69:89:85:17:ec:7b:0d:26:c4:ef:
48:0d:f4:db:3d:60:25:3c:b4:eb:c8:5e:95:44:f9:ee:62:cc:
03:e1:16:ec:de:cd:61:87:2c:47:df:8a:17:13:4a:17:6e:fe:
93:bd:b5:7a:3e:c5:a3:24:3e:44:09:70:73:bd:37:bc:19:4f:
e3:9e:06:2d:1c:1f:61:a9:30:4e:fe:bf:15:c6:4c:8d:de:1d:
d0:31:3f:58:50:db:8b:e5:26:a6:e3:50:fa:d0:2e:ec:78:c4:
f9:60:89:f3:a4:dd:4b:e1:b7:a9:b0:3f:35:c8:55:73:a1:38:
fc:9e:c1:55:b7:43:ec:f3:6b:13:81:4b:10:26:19:da:1e:da:
8b:8d:1a:54:dc:79:42:e3:98:9c:8d:08:71:5c:62:fb:71:97:
3a:d3:0e:38:c5:e7:8d:9c:97:1c:f6:f5:92:6a:67:27:a3:6d:
a6:1a:80:1c:c4:b2:12:16:b7:ef:ac:39:14:87:8b:02:71:6c:
9b:e6:94:3d:19:7d:43:86:f0:a6:73:56:30:06:b9:0b:d9:1b:
45:77:f3:27:00:45:9c:77:e5:31:ad:a9:42:7d:31:91:c3:c9:
7b:93:df:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:02 2026 by rpki-client