Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json)
Hash identifier: LQxTY702g2CVzTC3Lz0Z2KjwSSOCG688MrK46bqqjMo=
Subject key identifier: 31:00:90:DD:0E:34:8A:30:64:92:E3:77:12:98:6D:C7:7D:0C:03:14
Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Certificate serial: 019D2AA9223560F44F6318DF175F6B859DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 15:00:20 +0000
Manifest this update: Thu 26 Mar 2026 15:00:20 +0000
Manifest next update: Fri 27 Mar 2026 15:00:20 +0000
Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: umB/FAdQ/dHytPHChDwbTlDMWuVqAaPczRsT5r3h/yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:22:35:60:f4:4f:63:18:df:17:5f:6b:85:9d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Validity
Not Before: Mar 26 15:00:20 2026 GMT
Not After : Mar 27 15:00:20 2026 GMT
Subject: CN=310090dd0e348a306492e37712986dc77d0c0314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:69:18:8c:dc:81:80:cb:90:3c:87:f8:62:5e:
2c:08:52:ae:63:1a:62:61:b5:61:f2:c3:0d:70:fe:
57:ca:15:d9:b7:2e:30:ec:cf:4a:83:be:5c:be:59:
e5:31:f9:66:3d:fa:95:44:6a:56:eb:13:09:ad:ac:
d4:36:bc:53:70:60:40:85:1f:fc:5c:a5:f2:47:7d:
b4:8a:d9:33:8f:02:50:9a:7e:04:b0:ad:d1:3d:94:
27:68:37:2b:d3:f3:90:41:09:b4:09:c9:c5:96:84:
02:93:ba:e4:17:0a:d1:93:b7:c0:9f:9e:6f:1e:52:
08:50:7a:b9:b6:de:58:21:3c:1b:5f:5e:dc:f4:07:
a2:5c:46:56:a1:cd:bc:42:e9:5f:25:0e:18:a7:e7:
13:b1:cd:80:aa:b9:13:2f:07:df:33:b6:ac:22:1d:
82:48:0e:18:68:51:37:4a:27:ae:62:df:df:a2:d3:
65:9e:45:b6:7e:19:12:09:64:f8:0e:25:bf:00:70:
06:cf:c4:15:0a:26:84:ee:74:59:73:b6:19:75:80:
a5:4f:0b:31:5e:b9:5d:fd:54:f9:86:9c:98:25:c2:
66:86:69:8e:92:5d:0a:09:2c:6f:1a:6a:e4:87:ef:
18:3c:57:eb:96:eb:df:a5:d3:64:ad:02:be:08:aa:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:90:DD:0E:34:8A:30:64:92:E3:77:12:98:6D:C7:7D:0C:03:14
X509v3 Authority Key Identifier:
keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:66:2c:d3:f3:8c:68:92:e8:f3:ad:04:da:93:44:15:66:ea:
e6:98:14:80:98:90:dc:b7:31:43:11:89:60:b1:cf:13:79:ac:
6d:74:24:2d:97:3b:0c:0a:80:42:48:2c:07:ed:3e:21:da:34:
3a:db:47:67:f7:05:72:41:de:b9:dd:62:2c:ad:e6:cb:78:70:
18:a9:d3:88:cb:19:8e:4e:7e:1b:e6:61:ad:d6:89:58:9c:8f:
e0:2f:04:58:67:c3:56:66:7a:a5:52:92:8b:2b:7c:f8:88:b9:
28:c9:6e:06:84:d9:e2:99:79:af:95:97:0e:9a:cb:50:26:74:
cd:80:64:a0:cf:85:66:fc:fb:0b:10:9b:0a:1d:bb:3a:50:a2:
7b:aa:46:f9:d1:9a:83:42:d0:47:c6:3d:40:13:b7:11:32:dc:
0a:39:b4:56:29:13:8a:e6:f5:39:c8:39:06:6b:68:a5:1a:b2:
ba:d5:4d:6b:e7:6c:51:fe:36:81:b5:89:15:f9:1d:6e:2b:85:
62:d0:02:dd:13:fd:0c:3e:22:1f:46:08:dd:54:94:59:9f:3c:
9b:2f:74:19:f3:a6:c0:eb:b2:3f:de:52:a6:87:be:e8:05:65:
6c:d8:4a:5d:2d:c3:24:5e:5c:27:68:ec:3d:77:43:af:7f:29:
5b:5a:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:03:25 2026 by rpki-client