Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: pzo2RtNVc74pUdBXm8C396BIEANZI6Ed+RXt32nIzg0=
Subject key identifier: 8B:00:DF:6B:BB:D5:A2:85:7D:09:28:DF:44:45:52:8B:A2:0F:AE:28
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 019D2583C82550A9C341AD1FD8BA2E34CA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 0EFE
Signing time: Wed 25 Mar 2026 15:01:26 +0000
Manifest this update: Wed 25 Mar 2026 15:01:26 +0000
Manifest next update: Thu 26 Mar 2026 15:01:26 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: L8NPXc7ecviqwSboL0TVb+S1AHOu/ZGxQA3hgltcNTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:c8:25:50:a9:c3:41:ad:1f:d8:ba:2e:34:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Mar 25 15:01:26 2026 GMT
Not After : Mar 26 15:01:26 2026 GMT
Subject: CN=8b00df6bbbd5a2857d0928df4445528ba20fae28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:2d:d4:a7:be:b5:9b:d2:d9:b2:c9:85:cb:
52:b4:70:a9:d9:34:43:9e:ef:e1:f4:58:bd:27:b0:
95:1a:4e:cf:bb:91:df:3b:86:dd:99:2e:3a:72:2c:
73:6b:c9:cd:b2:ef:97:c9:c1:83:34:cb:52:99:57:
6b:88:dd:8e:f5:71:a6:8b:cc:ed:46:07:7e:ce:39:
2f:26:0a:e7:4c:7a:28:6c:a8:62:a0:9e:d7:29:84:
d2:f4:eb:72:87:10:a1:5e:07:b5:dd:cc:41:2e:60:
f7:4e:c5:db:8e:68:14:3c:25:fd:b9:01:98:6c:fd:
d0:b0:2f:a8:53:dd:60:27:3b:c6:2c:51:a6:24:a4:
9a:5e:53:22:c6:72:54:6e:0c:a8:62:e9:0a:65:d4:
e2:f7:37:a2:b1:ae:66:d2:d6:a7:dc:76:29:08:af:
2f:e4:71:be:87:d1:ca:9b:b0:b2:99:a2:47:91:09:
43:e1:24:58:22:7a:b3:22:55:5b:00:2d:65:45:04:
d7:54:38:27:67:87:fa:67:39:74:41:08:3a:15:3d:
9b:9f:37:a5:b7:6f:4d:1b:42:ff:5b:f6:2f:da:b5:
d9:6d:7f:e2:46:06:ef:3a:fe:b8:4b:56:cb:97:93:
29:c4:5e:16:1a:b4:67:74:b2:de:bc:f5:39:83:b1:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:DF:6B:BB:D5:A2:85:7D:09:28:DF:44:45:52:8B:A2:0F:AE:28
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9e:17:97:35:3f:a2:40:02:e7:88:6b:59:04:34:f6:94:68:
d3:18:77:2f:da:74:1e:e1:47:b7:b4:ae:16:4b:fe:52:f7:ee:
f8:42:cd:da:0f:d4:54:bb:13:db:a7:58:59:d4:cf:57:8f:1c:
84:ed:00:89:c2:0e:bf:81:c0:35:4c:d8:18:ad:81:1e:d2:2c:
64:36:65:32:07:e8:40:4e:8e:3a:69:32:ce:95:0f:8f:ee:ce:
27:7d:2e:03:99:9c:6a:14:71:eb:00:93:f5:3c:b1:84:04:77:
2c:54:57:39:18:9c:f2:8b:50:73:aa:04:60:1e:7e:0e:da:ec:
1a:e7:6b:03:4f:32:33:fd:a4:cc:1a:36:87:bd:3c:25:4e:97:
48:a9:76:cb:93:d8:22:2a:3f:a0:97:4b:51:0a:d9:9d:9e:8b:
70:f0:17:76:2a:39:3f:c5:48:0d:f1:ff:a8:c7:4d:fa:be:c4:
ca:ce:09:90:df:02:f8:2e:86:9c:f3:79:d4:7c:da:2f:95:13:
00:1d:7d:6d:65:4f:a3:05:64:01:ca:02:69:fc:8e:c8:a1:6a:
2d:ca:ce:48:8f:8c:b3:b9:af:be:91:5f:5e:fe:9f:21:5a:31:
80:7e:18:1b:a4:0e:e1:81:62:1c:cc:8b:71:88:4b:74:95:8a:
04:52:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:38 2026 by rpki-client