Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: eAgZUmTv2Ub+2VQRgDykzqaCXsDWJMcOx81slPDpso8=
Subject key identifier: EB:9D:F5:81:C7:96:A7:E9:39:7D:CD:5E:C3:B5:03:EF:A2:60:D4:0C
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 019D2771F0DEA6453C459EC5F6831D4ECAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0F66
Signing time: Thu 26 Mar 2026 00:01:11 +0000
Manifest this update: Thu 26 Mar 2026 00:01:11 +0000
Manifest next update: Fri 27 Mar 2026 00:01:11 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: c2UpZ3Ou4j4tOFKdJBRiRbcbmheY3ofe3B017mnC+aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f0:de:a6:45:3c:45:9e:c5:f6:83:1d:4e:ca:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Mar 26 00:01:11 2026 GMT
Not After : Mar 27 00:01:11 2026 GMT
Subject: CN=eb9df581c796a7e9397dcd5ec3b503efa260d40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:94:ed:38:c7:6a:e4:86:8f:2d:75:b1:b8:0c:
5e:32:76:c9:67:bc:0c:33:81:a7:1a:7a:00:f8:7a:
6c:49:f8:10:61:df:80:07:46:0c:d2:eb:a0:e6:e3:
e1:98:29:68:a2:2c:6b:f1:c3:e2:63:9f:a0:99:2a:
54:8d:d0:f9:2a:f3:05:1f:da:07:81:e9:50:1b:dc:
66:0e:8b:f7:bd:65:6f:72:3f:19:d2:0b:a6:da:7e:
37:9e:9a:8b:6b:34:ca:9c:bd:d1:76:ed:5d:22:44:
0f:c8:e9:57:09:c1:90:3a:b3:3a:48:60:aa:14:70:
4a:96:77:64:44:b7:72:06:ae:bb:68:7c:1c:cf:47:
42:c2:8c:cf:a5:c5:16:f1:96:59:f5:a3:a4:0d:41:
2d:ab:8e:98:5f:35:88:c1:9b:45:5a:93:46:4a:56:
54:35:33:4b:13:2a:48:ef:6c:6f:dc:b7:b2:36:01:
65:58:e9:1f:56:85:6c:d4:b0:d2:11:dc:bd:3c:95:
6d:7c:bb:cd:1c:b7:d4:f9:85:e0:fc:31:d9:a7:5a:
f5:17:3a:e9:25:a9:48:47:b8:f5:1f:bb:ae:24:ee:
b8:0d:b1:27:9d:28:02:91:54:0a:e1:61:8e:2a:9c:
53:35:db:3c:3e:11:40:69:d2:ef:a9:35:87:62:13:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9D:F5:81:C7:96:A7:E9:39:7D:CD:5E:C3:B5:03:EF:A2:60:D4:0C
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d9:a6:34:aa:9c:8c:88:b3:fb:41:a6:81:97:47:e3:4d:81:
2d:fa:3f:76:1f:ec:40:25:8c:b6:77:44:83:91:97:07:96:64:
0d:35:41:e0:62:89:3d:f7:6b:fd:b8:4d:e3:36:a2:1b:d9:27:
b8:e6:f2:b7:b0:fc:e6:0c:54:f3:f3:2c:37:ba:bc:33:0b:b3:
fe:5c:cc:d4:aa:c7:4d:21:2d:0a:21:f4:3d:d0:30:df:66:7b:
ef:c3:a4:5d:4e:12:17:e8:ab:3f:b0:a8:c1:db:89:64:c1:29:
09:fc:98:b0:7b:21:3b:8d:4a:85:9d:eb:ea:50:ec:7b:fb:35:
1a:a8:71:ee:ea:03:32:78:29:2e:d2:ee:08:4b:6f:d8:29:83:
16:ef:04:ce:a2:97:ca:08:21:fd:ff:11:b0:9f:3b:c6:9b:4b:
22:cc:24:33:ab:1d:3f:cb:be:02:b0:fb:24:fe:81:08:97:1e:
5e:12:f4:11:c3:1a:e3:82:ae:56:5e:af:bd:0f:87:0b:cb:6f:
6c:97:73:5d:d5:ed:8a:15:27:e8:8a:ef:43:bb:09:68:e4:a4:
a2:d7:9c:8e:2d:86:44:55:53:47:77:32:b6:3f:02:1c:0b:56:
07:00:7b:2b:cd:d9:95:30:e9:47:63:ac:9e:2c:db:df:c8:6c:
a9:da:91:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:42 2026 by rpki-client