Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: K1vUajxMIyswq0IIwGl1+gVAh97JHIyNxNEZmFUfnZU=
Subject key identifier: FA:A6:1E:26:A6:38:3B:E1:FE:4C:81:26:04:D7:56:CF:A3:4D:67:E7
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 019D2703AB4F4A993BCAFE757FB63CE6DEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 1373
Signing time: Wed 25 Mar 2026 22:00:44 +0000
Manifest this update: Wed 25 Mar 2026 22:00:44 +0000
Manifest next update: Thu 26 Mar 2026 22:00:44 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: S2E/OtZ4+4gtrLNWaJdFgvU4N8JuXjTJDLOL6x+7OII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ab:4f:4a:99:3b:ca:fe:75:7f:b6:3c:e6:de:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Mar 25 22:00:44 2026 GMT
Not After : Mar 26 22:00:44 2026 GMT
Subject: CN=faa61e26a6383be1fe4c812604d756cfa34d67e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:d6:fb:08:dc:9f:1b:e4:f5:62:95:ed:2f:
e7:09:26:9f:95:b6:34:fd:c1:74:56:4c:0a:83:05:
d3:24:bb:7b:80:2c:3a:5c:a1:65:3a:4b:1d:b4:a8:
18:29:54:6a:8e:f6:37:07:25:bc:d8:81:87:b9:83:
28:97:ea:fc:9b:4b:00:b8:90:80:10:ac:8d:64:ef:
1d:86:c6:68:ec:29:6b:eb:db:07:f7:51:86:0d:b1:
ae:7f:64:e6:6a:6a:46:61:4d:67:4b:00:30:cd:15:
e1:40:50:61:51:ea:40:e7:14:b9:6f:dd:a5:6d:6a:
d7:a6:63:b9:e8:95:44:93:77:64:9a:83:31:cc:67:
ad:b3:46:2b:01:c3:09:27:a8:a5:06:95:f9:9d:6e:
41:e9:0b:08:b8:fe:3c:2c:ad:f9:79:e6:1e:4b:12:
ae:8b:6e:3f:99:7e:34:d8:15:1c:5a:71:b0:0d:12:
02:3b:9b:44:bb:43:d4:a8:ae:eb:03:c2:05:01:65:
75:63:c0:51:78:ff:69:90:8f:9e:ab:c7:9b:54:10:
c1:44:1c:de:eb:3f:3c:3d:11:f6:11:57:39:21:e6:
04:53:4f:7f:ca:a6:3b:45:f4:e6:9b:74:80:ac:e0:
58:ec:a2:e9:67:28:b1:32:ee:e2:5b:23:00:4c:e3:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:1E:26:A6:38:3B:E1:FE:4C:81:26:04:D7:56:CF:A3:4D:67:E7
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:18:be:29:89:54:84:5d:66:97:48:12:5c:90:b3:20:4a:d2:
31:cb:8a:f2:42:f2:dc:a8:b0:df:ba:c2:14:74:55:ae:53:b8:
1a:d7:d2:4a:d3:8a:f7:81:1c:b4:27:0a:40:08:32:34:bb:26:
98:d1:60:67:8a:c9:03:83:1d:a3:2e:52:11:b1:a3:57:db:c9:
74:e3:8e:14:a6:8c:8a:a0:57:d5:8a:b7:e3:8b:01:a6:c6:4c:
6a:9d:ee:83:a6:e7:d5:ce:6e:28:ec:bf:e2:70:af:3d:74:f4:
68:cb:c8:6a:bc:12:bf:46:c5:96:c7:22:46:70:a6:7f:6f:14:
83:56:be:75:c2:b3:07:66:01:44:3c:af:da:04:0f:b5:e2:4e:
b6:96:f3:68:04:fd:a9:7f:d0:7b:8f:fe:52:5d:09:a7:d8:48:
37:2a:b1:de:51:98:07:ad:11:b1:86:f7:1f:0a:08:c0:1f:ce:
f7:70:53:cd:a1:61:31:42:04:50:c8:42:7b:75:d9:b2:92:e6:
ee:cb:0e:78:ce:db:14:49:e3:32:46:00:76:15:c1:aa:d4:bf:
9a:2d:47:33:80:b2:62:e4:ad:c2:05:92:ae:0d:96:6f:1c:9d:
fc:81:d4:e1:ca:b0:7e:c1:a0:8f:9e:29:ab:fa:e6:29:d3:ad:
82:e1:e3:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA6tPSpk7yv51f7Y85t77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTI5ZWE5ODg3ZjllMmZlNmE5NDVhOTdkNDgyMTZiYzE2
YTRiNDEwHhcNMjYwMzI1MjIwMDQ0WhcNMjYwMzI2MjIwMDQ0WjAzMTEwLwYDVQQD
EyhmYWE2MWUyNmE2MzgzYmUxZmU0YzgxMjYwNGQ3NTZjZmEzNGQ2N2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO7W+wjcnxvk9WKV7S/nCSaflbY0
/cF0VkwKgwXTJLt7gCw6XKFlOksdtKgYKVRqjvY3ByW82IGHuYMol+r8m0sAuJCA
EKyNZO8dhsZo7Clr69sH91GGDbGuf2TmampGYU1nSwAwzRXhQFBhUepA5xS5b92l
bWrXpmO56JVEk3dkmoMxzGets0YrAcMJJ6ilBpX5nW5B6QsIuP48LK35eeYeSxKu
i24/mX402BUcWnGwDRICO5tEu0PUqK7rA8IFAWV1Y8BReP9pkI+eq8ebVBDBRBze
6z88PRH2EVc5IeYEU09/yqY7RfTmm3SArOBY7KLpZyixMu7iWyMATONxzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqmHiamODvh/kyBJgTXVs+jTWfnMB8GA1UdIwQY
MBaAFKFSnqmIf54v5qlFqX1IIWvBaktBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZLZXFZaF9uaV9tcVVXcGZVZ2hhOEZxUzBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS84MDA3MDktM2RkMi00YzNmLThlNjkt
NWIxZWFhYzY3MDMwLzEvb1ZLZXFZaF9uaV9tcVVXcGZVZ2hhOEZxUzBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS84MDA3MDktM2RkMi00YzNmLThlNjktNWIxZWFhYzY3MDMw
LzEvb1ZLZXFZaF9uaV9tcVVXcGZVZ2hhOEZxUzBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBi+KYlU
hF1ml0gSXJCzIErSMcuK8kLy3Kiw37rCFHRVrlO4GtfSStOK94EctCcKQAgyNLsm
mNFgZ4rJA4Mdoy5SEbGjV9vJdOOOFKaMiqBX1Yq344sBpsZMap3ug6bn1c5uKOy/
4nCvPXT0aMvIarwSv0bFlsciRnCmf28Ug1a+dcKzB2YBRDyv2gQPteJOtpbzaAT9
qX/Qe4/+Ul0Jp9hINyqx3lGYB60RsYb3HwoIwB/O93BTzaFhMUIEUMhCe3XZspLm
7ssOeM7bFEnjMkYAdhXBqtS/mi1HM4CyYuStwgWSrg2Wbxyd/IHU4cqwfsGgj54p
q/rmKdOtguHj/Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:23 2026 by rpki-client