Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
File: oU6-xYG-93sycD2LRtMnjBkaKz0.mft (raw, json)
Hash identifier: yI7zHjL+PUQzWZYG+vXYEj9w7EPzzg4eH4+7KlEDgYQ=
Subject key identifier: 34:3B:BF:4A:A1:A6:AD:7D:36:39:06:2E:A3:DF:02:9F:82:0B:9F:03
Authority key identifier: A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
Certificate issuer: /CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Certificate serial: 019D2816B7508D0621D0C21E01A318B05EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 03:01:10 +0000
Manifest this update: Thu 26 Mar 2026 03:01:10 +0000
Manifest next update: Fri 27 Mar 2026 03:01:10 +0000
Files and hashes: 1: oU6-xYG-93sycD2LRtMnjBkaKz0.crl (hash: m9mjxf8V4Rg6lgyCNRkC8mAOkufvUmGWpvXpqBHw0l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:b7:50:8d:06:21:d0:c2:1e:01:a3:18:b0:5e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14ebec581bef77b32703d8b46d3278c191a2b3d
Validity
Not Before: Mar 26 03:01:10 2026 GMT
Not After : Mar 27 03:01:10 2026 GMT
Subject: CN=343bbf4aa1a6ad7d3639062ea3df029f820b9f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:aa:45:03:9f:85:cd:67:b7:bb:83:38:2f:
fa:44:95:ce:62:5e:9b:98:8e:d5:39:47:62:ce:bf:
55:23:c2:59:bf:dd:44:b8:c0:bd:10:66:59:89:b7:
42:cb:f0:0a:78:a5:7e:44:e8:9a:f1:96:b9:d2:6f:
9a:b7:75:bf:b1:20:30:19:a8:34:ef:5c:a9:af:07:
1f:2a:a2:91:49:82:86:da:1d:4b:15:57:8d:37:96:
ed:8d:a8:fa:ef:2d:c8:31:9e:17:4d:6f:94:73:78:
cd:a2:08:5e:d8:af:c6:fa:1e:6f:80:ce:7b:0c:2c:
cc:8d:67:6d:be:9b:f8:3a:74:5d:2e:92:ab:9c:7f:
bc:12:5e:b9:cc:22:21:e4:10:df:29:1f:1e:29:da:
06:61:48:d0:f1:17:5f:38:97:da:d1:4e:75:78:f3:
8b:d0:ed:99:b0:dc:9c:dc:b0:f1:31:87:52:51:fd:
25:ff:31:90:06:7b:70:3d:d5:0a:0f:c9:ce:65:86:
1b:b5:f8:4e:95:df:29:5b:7b:49:85:2b:4e:be:bd:
73:62:19:83:9d:3c:2f:e0:58:05:79:c1:a8:76:8b:
33:2c:49:5c:71:60:03:f8:3b:56:40:47:71:e9:8a:
5b:bb:1b:0b:46:b4:87:0c:2f:36:82:dd:73:47:01:
4c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3B:BF:4A:A1:A6:AD:7D:36:39:06:2E:A3:DF:02:9F:82:0B:9F:03
X509v3 Authority Key Identifier:
keyid:A1:4E:BE:C5:81:BE:F7:7B:32:70:3D:8B:46:D3:27:8C:19:1A:2B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oU6-xYG-93sycD2LRtMnjBkaKz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/20119f-2d27-4c1b-badc-41e4cdcfbd5a/1/oU6-xYG-93sycD2LRtMnjBkaKz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:72:07:82:d5:15:f4:d9:12:e8:89:ac:4c:a8:c2:77:10:a1:
4d:89:d3:7f:04:6d:69:22:e8:e3:f8:9d:2e:70:15:cc:7e:74:
f3:40:b7:b8:e9:12:d7:35:f3:0f:fa:c9:94:e2:a0:b7:6a:1b:
69:08:ab:02:b6:5b:35:d1:d6:00:c0:07:87:ae:df:77:8f:d1:
5a:6b:8c:b1:49:e0:0b:ed:1a:71:b8:f4:36:80:a9:cf:7c:ff:
8e:66:44:80:91:a0:9a:77:38:7d:ed:b7:74:4f:b2:e3:6b:77:
1c:7c:8f:39:23:fa:7f:3d:09:a9:b2:74:f8:f5:2a:b2:bd:0f:
aa:a0:a3:cb:6a:bd:21:eb:a3:3a:00:c2:d7:29:33:e2:77:63:
ff:99:af:e9:26:b9:c9:b1:85:b0:f1:53:a8:c7:2a:94:e5:ef:
4a:79:72:06:5c:14:c0:bc:c7:97:04:ea:64:c0:93:1b:7d:d7:
83:31:86:ed:cb:ad:f9:61:e3:55:c3:bf:91:20:34:9a:a9:a8:
99:bc:44:70:7e:fd:e8:cf:af:f0:e1:bb:ae:ba:d1:52:42:bc:
4c:5d:aa:ef:ce:a7:ad:c4:79:78:54:79:8d:5d:97:60:00:92:
5a:93:e6:54:df:31:21:cf:f5:72:95:fa:2b:aa:a2:0f:02:73:
2d:5e:a5:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFrdQjQYh0MIeAaMYsF7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNGViZWM1ODFiZWY3N2IzMjcwM2Q4YjQ2ZDMyNzhjMTkx
YTJiM2QwHhcNMjYwMzI2MDMwMTEwWhcNMjYwMzI3MDMwMTEwWjAzMTEwLwYDVQQD
EygzNDNiYmY0YWExYTZhZDdkMzYzOTA2MmVhM2RmMDI5ZjgyMGI5ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fKqRQOfhc1nt7uDOC/6RJXOYl6b
mI7VOUdizr9VI8JZv91EuMC9EGZZibdCy/AKeKV+ROia8Za50m+at3W/sSAwGag0
71yprwcfKqKRSYKG2h1LFVeNN5btjaj67y3IMZ4XTW+Uc3jNoghe2K/G+h5vgM57
DCzMjWdtvpv4OnRdLpKrnH+8El65zCIh5BDfKR8eKdoGYUjQ8RdfOJfa0U51ePOL
0O2ZsNyc3LDxMYdSUf0l/zGQBntwPdUKD8nOZYYbtfhOld8pW3tJhStOvr1zYhmD
nTwv4FgFecGodoszLElccWAD+DtWQEdx6YpbuxsLRrSHDC82gt1zRwFMXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQ7v0qhpq19NjkGLqPfAp+CC58DMB8GA1UdIwQY
MBaAFKFOvsWBvvd7MnA9i0bTJ4wZGis9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMt
NDFlNGNkY2ZiZDVhLzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMDExOWYtMmQyNy00YzFiLWJhZGMtNDFlNGNkY2ZiZDVh
LzEvb1U2LXhZRy05M3N5Y0QyTFJ0TW5qQmthS3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3IHgtUV
9NkS6ImsTKjCdxChTYnTfwRtaSLo4/idLnAVzH5080C3uOkS1zXzD/rJlOKgt2ob
aQirArZbNdHWAMAHh67fd4/RWmuMsUngC+0acbj0NoCpz3z/jmZEgJGgmnc4fe23
dE+y42t3HHyPOSP6fz0JqbJ0+PUqsr0PqqCjy2q9IeujOgDC1ykz4ndj/5mv6Sa5
ybGFsPFTqMcqlOXvSnlyBlwUwLzHlwTqZMCTG33XgzGG7cut+WHjVcO/kSA0mqmo
mbxEcH796M+v8OG7rrrRUkK8TF2q786nrcR5eFR5jV2XYACSWpPmVN8xIc/1cpX6
K6qiDwJzLV6lAQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:05 2026 by rpki-client