Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier: q2Gojep9QZwYlvw2Nvdfl/DYAMc5D+Pdn52hii1IXqc=
Subject key identifier: 69:4B:62:AD:3C:FD:6F:55:A8:15:3C:99:A0:DC:1B:2E:0F:CE:7E:8F
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial: 019D28F2E53725D7472DADDAD30017497A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number: 162C
Signing time: Thu 26 Mar 2026 07:01:40 +0000
Manifest this update: Thu 26 Mar 2026 07:01:40 +0000
Manifest next update: Fri 27 Mar 2026 07:01:40 +0000
Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: w6pvX36IQ2LPIw20MWHnRbr28HkRWHhJXEJWDMDZYXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:e5:37:25:d7:47:2d:ad:da:d3:00:17:49:7a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Validity
Not Before: Mar 26 07:01:40 2026 GMT
Not After : Mar 27 07:01:40 2026 GMT
Subject: CN=694b62ad3cfd6f55a8153c99a0dc1b2e0fce7e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:e6:76:a5:d1:3d:3f:86:ce:1b:a3:51:31:
4e:11:1e:5f:df:63:d3:1e:46:5c:22:c8:9d:54:d6:
49:c4:3a:09:e3:27:f2:6c:b8:f8:f2:c3:41:79:fd:
8a:cd:51:cf:8e:62:b8:60:b0:09:8c:aa:8b:84:44:
a5:79:d1:08:b4:71:10:a2:43:9b:f9:1d:69:6f:7f:
d8:16:93:2f:23:bf:27:ee:5c:d3:a8:d4:0f:27:fc:
01:04:dc:17:79:b0:f7:66:82:8e:0c:a0:65:19:66:
8e:92:bf:5f:1f:ff:3d:43:d3:06:0e:9c:96:fe:4e:
cb:a8:e8:b5:9e:06:b1:d3:99:0d:3c:2f:f4:5f:ae:
21:6a:c8:1a:44:d1:69:f4:2f:4a:d4:cc:e1:a9:5f:
ad:45:c5:3e:12:6b:e4:bc:29:e3:d7:1e:2c:42:d8:
69:0f:29:15:12:84:60:6a:24:dd:18:8d:23:b2:6b:
50:4c:10:e6:99:02:2d:04:d8:3e:19:3c:d9:cf:35:
ae:fc:05:2f:49:16:d1:96:c9:7d:9b:34:1e:98:ab:
ff:6c:b3:41:e5:25:61:99:c5:ad:51:ae:52:07:63:
b9:70:14:a9:50:34:be:24:61:0a:84:1a:20:e8:93:
32:d9:e4:68:1c:08:24:a8:b1:59:88:c2:55:e4:76:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4B:62:AD:3C:FD:6F:55:A8:15:3C:99:A0:DC:1B:2E:0F:CE:7E:8F
X509v3 Authority Key Identifier:
keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:16:19:96:f2:89:8f:57:a6:c0:9e:02:89:3b:c6:25:0e:88:
1a:3d:d7:25:1a:6e:ab:bd:b2:b5:78:98:5d:95:c3:26:d9:6e:
f6:9e:3a:6a:86:a4:0a:8c:31:fd:a5:cd:56:cf:4b:d4:ed:9d:
c1:75:40:c1:c7:ef:78:70:7a:35:56:28:83:9e:04:af:78:bd:
c0:ef:e5:3c:84:83:d0:ec:20:1c:5c:de:a8:ce:a6:5b:50:e3:
60:84:a4:c4:d8:37:1d:f2:92:c5:32:b1:b3:bd:9a:58:b1:9b:
db:92:ea:44:fc:91:19:68:c7:7a:16:34:dd:fa:4a:3b:91:10:
df:2d:0b:a3:2d:21:2d:cf:7c:73:e6:d6:01:ab:e3:d1:b2:ab:
50:23:0d:14:7e:40:f0:db:ea:cc:ac:9c:bd:03:85:56:4e:cc:
10:13:59:40:b8:3e:a3:95:2b:25:5b:31:0b:33:07:47:ba:65:
70:d1:45:3f:dc:a8:cf:b4:85:74:be:8a:75:e4:e9:35:e8:ae:
48:0e:06:26:e7:e4:74:ac:95:9c:a2:78:12:d4:fb:10:25:29:
fd:4d:1a:cd:a1:b2:0e:5a:8b:1c:1c:06:de:a7:2a:26:f0:b6:
b0:13:1f:b7:44:ed:68:ea:81:04:35:0d:dd:00:9d:24:e1:4c:
22:22:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:58 2026 by rpki-client