Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: TvSZ0ZhTAmnv6Qrxp/C0+cwsG54LyL+VBoUsch+4LDo=
Subject key identifier: C5:03:73:D7:5B:3C:82:5E:28:96:14:FF:66:14:D5:3D:63:45:C5:EC
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 019D28F34659D81E6F1C68394D2E00EAB502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 07:02:04 +0000
Manifest this update: Thu 26 Mar 2026 07:02:04 +0000
Manifest next update: Fri 27 Mar 2026 07:02:04 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: wSiq62LlAEMcDzpgKxrrXnljqo6ZTCvz41Rhb3t17Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:46:59:d8:1e:6f:1c:68:39:4d:2e:00:ea:b5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Mar 26 07:02:04 2026 GMT
Not After : Mar 27 07:02:04 2026 GMT
Subject: CN=c50373d75b3c825e289614ff6614d53d6345c5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:11:4d:53:22:cc:b2:4a:ce:5c:0e:29:c6:
c4:82:2c:13:83:4b:91:63:0f:29:96:ea:c6:e6:a3:
eb:9c:7e:53:d3:19:a4:85:c0:8d:49:03:61:13:0a:
40:73:8f:e4:c7:5d:8b:ef:e3:5c:af:64:3f:c0:2e:
5d:a1:68:e8:5e:3b:27:7e:0e:e7:84:fe:21:b0:e4:
43:a4:ef:48:22:38:f4:62:dd:f3:5d:86:59:b6:67:
7a:bc:ee:57:3a:9d:84:23:06:ea:e2:c9:7c:4b:28:
69:b1:7d:d3:6c:f1:4a:16:2e:5d:e5:b2:96:49:be:
57:bc:24:2e:1a:b5:ac:21:90:59:10:17:8c:a3:2b:
af:2b:cd:35:8b:34:ba:43:f1:bc:06:ff:d1:54:af:
67:7b:f8:37:80:87:4d:57:06:a8:aa:0f:31:90:5d:
b5:bc:f1:f8:a7:dc:23:10:09:8c:d7:6d:1b:2a:92:
2a:5d:85:21:75:1f:40:93:1d:66:0e:ce:c9:c9:e4:
16:31:eb:01:53:08:a7:88:2e:63:5c:35:fd:33:74:
7d:38:58:31:ca:0f:03:71:88:c0:df:c9:4f:bc:7b:
57:29:e1:88:19:9b:0c:a2:5c:31:6f:af:84:40:67:
45:c4:d3:15:bf:3e:3e:82:de:75:b1:ae:28:4c:48:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:03:73:D7:5B:3C:82:5E:28:96:14:FF:66:14:D5:3D:63:45:C5:EC
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0b:50:07:3d:24:4b:7d:ab:4a:74:cf:d9:df:92:bb:3b:ce:
b9:85:22:7b:d8:52:91:80:15:04:c3:a9:a8:6a:c3:84:ee:aa:
09:49:68:56:7e:d0:ed:dc:32:e9:8a:88:ea:5e:cf:f9:7f:87:
91:19:56:31:10:1e:59:70:76:f1:ea:71:3b:6a:18:52:72:23:
83:7f:15:db:49:6e:df:46:8d:07:cf:00:cc:b8:8a:69:25:4f:
0a:90:d1:97:44:19:fc:15:d5:a3:a5:c2:79:9c:74:be:9e:e2:
4b:ae:6c:10:7b:9e:f4:7f:4f:d0:4e:60:00:31:32:ad:ac:54:
eb:97:58:06:1c:bb:e9:95:01:b4:ce:72:50:43:48:ca:af:2b:
e5:ef:72:28:97:26:c9:11:df:9c:11:07:86:82:44:21:7c:ed:
38:f6:51:19:f5:a4:d3:31:73:5a:81:e0:5f:2e:6d:9a:b3:b5:
a5:3a:da:fe:a0:1e:7f:9e:c6:66:62:10:4f:2e:2c:f1:31:60:
36:f5:ad:59:82:7a:e2:f9:18:87:90:79:cb:13:be:27:8c:f9:
e8:d9:7a:a8:7b:77:20:51:ee:ee:25:f7:76:44:6a:21:be:39:
ab:f9:fe:1a:b5:70:3c:00:38:46:4c:8c:93:06:ef:3e:56:07:
b2:ea:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:50 2026 by rpki-client