Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
File: OOdr5zhCITzgy8kz0aN0g1fyKD8.mft (raw, json)
Hash identifier: SxowsN8GURAOIHT55ZaSvMG3USVPtllUk1BMyMEjsDQ=
Subject key identifier: 2C:98:88:0E:D3:B9:6C:1A:83:C9:DB:1E:B2:FB:92:C0:CA:B1:FD:99
Authority key identifier: 38:E7:6B:E7:38:42:21:3C:E0:CB:C9:33:D1:A3:74:83:57:F2:28:3F
Certificate issuer: /CN=38e76be73842213ce0cbc933d1a3748357f2283f
Certificate serial: 019D26CD3B9AF65A22AB353C7DBD9D899597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
Manifest number: 02A1
Signing time: Wed 25 Mar 2026 21:01:17 +0000
Manifest this update: Wed 25 Mar 2026 21:01:17 +0000
Manifest next update: Thu 26 Mar 2026 21:01:17 +0000
Files and hashes: 1: OOdr5zhCITzgy8kz0aN0g1fyKD8.crl (hash: le6uVil8YMPDiznpCrQOqDLGIMACuZlyIBcJzr6JMtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3b:9a:f6:5a:22:ab:35:3c:7d:bd:9d:89:95:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e76be73842213ce0cbc933d1a3748357f2283f
Validity
Not Before: Mar 25 21:01:17 2026 GMT
Not After : Mar 26 21:01:17 2026 GMT
Subject: CN=2c98880ed3b96c1a83c9db1eb2fb92c0cab1fd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bf:ed:51:2d:c0:63:8a:32:28:8d:b6:e9:ba:
72:c8:e6:f0:48:52:71:a7:9d:cb:af:29:1d:cd:7b:
04:52:a7:df:e0:90:bc:92:48:77:f8:30:c3:44:4e:
60:27:2b:43:c0:4f:69:93:85:1a:92:94:cb:6d:bf:
d5:d7:60:f2:2d:d0:bb:ef:9f:be:74:cc:96:54:ad:
e2:05:0c:10:69:03:31:d4:26:63:99:f5:6b:d9:3f:
99:94:ed:2e:e1:a4:73:94:f6:06:90:90:99:2c:c0:
b3:6e:31:ce:2b:91:b8:e6:65:df:97:d7:05:f5:f6:
13:c1:79:1b:b7:7f:a7:83:0c:54:06:da:89:38:a6:
a3:73:88:47:83:76:28:a4:b6:5d:45:8e:72:be:0d:
b2:df:67:77:9a:f0:e2:a5:b9:9a:c8:d6:be:31:68:
86:fa:a4:06:e6:dd:db:9f:56:84:df:03:55:f0:7a:
6b:73:7b:4f:77:5f:59:6a:95:71:54:8d:65:54:66:
38:5b:16:eb:21:8f:ab:c2:2c:4c:b3:34:dd:c0:f7:
2b:88:9b:d9:d8:d3:85:52:e7:1c:72:55:e4:8f:15:
39:1c:23:55:8c:8e:4f:d6:b0:59:26:58:64:79:68:
f1:eb:e0:d0:d8:19:b4:fc:69:2c:4c:a1:93:5b:ab:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:98:88:0E:D3:B9:6C:1A:83:C9:DB:1E:B2:FB:92:C0:CA:B1:FD:99
X509v3 Authority Key Identifier:
keyid:38:E7:6B:E7:38:42:21:3C:E0:CB:C9:33:D1:A3:74:83:57:F2:28:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOdr5zhCITzgy8kz0aN0g1fyKD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/27c86c-a5ad-4253-81dc-15526bf7f4eb/1/OOdr5zhCITzgy8kz0aN0g1fyKD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:dd:5a:ee:22:23:31:ec:e9:39:00:14:8e:e4:4b:72:57:ef:
88:f7:ac:ed:54:76:aa:f6:1e:84:87:f7:60:c8:15:47:08:a8:
71:d0:63:f3:ea:61:fe:74:df:57:81:29:02:8f:56:4f:ff:1c:
83:af:e5:7d:5b:f9:1e:2e:b4:94:02:3c:0b:ed:7f:6c:f0:03:
a5:17:5d:94:a4:66:c3:c2:46:3d:cf:51:73:90:51:cc:76:0d:
95:a4:e8:1d:b4:26:e5:8b:38:75:5a:a4:ff:16:7a:3b:e9:77:
a6:ce:41:63:92:ab:08:43:d3:69:0f:d7:93:ed:64:82:c9:af:
ee:28:26:7f:f8:1c:a2:69:11:49:59:22:d7:66:a5:5f:31:a5:
00:39:df:53:fc:59:11:04:2f:c1:be:eb:8e:5d:b5:16:4f:24:
d1:90:1a:03:85:4a:c2:2d:f6:99:0b:dd:40:c8:b3:d3:f8:7f:
17:64:bc:a6:35:5f:89:b6:2c:55:18:ca:c3:6d:ed:f5:fe:69:
81:97:c1:4b:ba:0c:f2:dd:40:d4:4f:5a:6a:e4:01:7b:bf:bd:
3b:e9:55:6f:25:7b:c0:53:8d:c6:49:22:21:89:dd:36:64:63:
82:83:68:b5:36:85:30:bc:e3:e1:e8:c1:19:da:67:4b:54:fb:
79:46:fd:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:38 2026 by rpki-client