Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
File: O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft (raw, json)
Hash identifier: W17vgBnC0//nc/EbYaCRv4XTw2qx5hhhM6xgavgaKbw=
Subject key identifier: 83:FE:19:3E:03:F3:A5:80:FF:BB:56:43:F2:EB:84:FC:65:70:2D:76
Authority key identifier: 3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
Certificate issuer: /CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Certificate serial: 019D28F33A2523145B7EF360B2C932317C8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
Manifest number: 10EF
Signing time: Thu 26 Mar 2026 07:02:01 +0000
Manifest this update: Thu 26 Mar 2026 07:02:01 +0000
Manifest next update: Fri 27 Mar 2026 07:02:01 +0000
Files and hashes: 1: O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl (hash: HFw9ijugG2AYeaEVD2KIorTmlmG/zuNy2mwutooVToM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3a:25:23:14:5b:7e:f3:60:b2:c9:32:31:7c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba2e27fe75426efc8b52b268e8293a8994e68fd
Validity
Not Before: Mar 26 07:02:01 2026 GMT
Not After : Mar 27 07:02:01 2026 GMT
Subject: CN=83fe193e03f3a580ffbb5643f2eb84fc65702d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d0:88:95:9d:d4:d0:09:3f:be:e3:26:67:06:
aa:c6:be:85:11:f3:4a:5f:d7:07:ce:4e:c3:33:04:
96:e9:06:98:ba:66:91:e4:97:9c:6e:18:e4:6b:db:
5d:91:2e:34:0c:79:f0:ac:0d:37:c0:c6:2f:b9:1f:
8c:9a:fe:f9:0d:1e:d6:15:1f:6f:17:6c:97:a6:b9:
8b:a1:5e:85:2e:3f:f1:c6:88:4c:d2:3b:d1:87:ae:
f0:ab:2e:91:40:d9:7c:7f:e5:0d:31:c0:d0:3b:15:
5f:27:1f:a6:0f:d3:cd:e6:c9:5c:3d:bf:ef:90:d6:
93:47:33:c4:28:d7:06:83:9c:da:3f:57:cb:9c:94:
b6:20:94:ba:88:5d:f5:19:cd:71:19:9d:0c:a1:f6:
6f:7c:3f:1e:53:1a:9d:7e:62:7e:21:30:e9:49:ef:
d9:8a:7d:3c:bf:7d:f4:ec:06:04:9b:a8:ad:4a:52:
55:d5:9a:5b:ea:36:0d:6c:37:0b:95:6d:de:ab:5b:
5c:99:0f:89:6a:3a:12:52:b2:76:00:6e:20:67:d7:
b7:b0:0a:7c:45:15:b0:55:d1:4d:36:cb:74:da:06:
cb:15:f1:66:50:e5:91:92:69:f8:cf:30:d8:da:e2:
dc:6b:84:d0:c0:da:7e:44:c8:87:1e:11:67:24:e8:
f0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FE:19:3E:03:F3:A5:80:FF:BB:56:43:F2:EB:84:FC:65:70:2D:76
X509v3 Authority Key Identifier:
keyid:3B:A2:E2:7F:E7:54:26:EF:C8:B5:2B:26:8E:82:93:A8:99:4E:68:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6Lif-dUJu_ItSsmjoKTqJlOaP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ec6b88-5e6b-4cfe-bc95-33ac6dbcfb97/1/O6Lif-dUJu_ItSsmjoKTqJlOaP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:03:25:e4:92:51:bd:b9:2f:c3:b9:c2:c0:37:f7:5c:a0:91:
fb:38:a6:04:66:25:8d:3d:b5:30:80:01:bb:86:9c:85:04:a6:
09:ac:60:05:be:30:7c:e0:13:bc:d9:78:8d:32:ed:e7:9a:9d:
2e:60:bb:17:cd:f3:45:7c:21:03:2f:e2:64:85:a0:33:9d:c4:
1a:9e:33:cf:43:19:e8:1b:2c:bf:86:0d:4e:1f:40:45:af:b2:
a5:56:87:04:44:1e:86:8c:a5:48:9e:14:76:ce:38:cf:d0:b5:
5b:cc:9b:c0:7a:79:59:6f:3d:dd:55:0f:47:d0:b5:6c:c1:7a:
bd:a3:9d:fe:1e:1f:69:7c:a7:f0:6c:16:be:00:0d:b9:62:f6:
23:ba:bc:30:91:b9:9a:89:2d:25:50:5c:88:f9:0e:4d:88:be:
a9:ec:b5:81:4c:21:e5:39:23:65:58:06:ba:db:8a:da:d0:d1:
b0:95:c3:a5:2c:d1:65:13:44:8a:9d:54:71:52:1c:e4:78:a5:
a3:38:15:f0:d3:34:a3:ef:7a:ce:e1:d1:0f:5c:df:5c:a3:3a:
20:a6:22:40:71:ff:03:b1:b9:01:3e:e1:af:ec:4f:11:bf:b1:
04:f8:7d:80:c3:38:24:ab:7f:42:35:a2:43:17:c8:6b:9c:b3:
b2:e4:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:54 2026 by rpki-client