Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
File: OCeQLuylKp8IFACI9VjkUuDslV8.mft (raw, json)
Hash identifier: 0gS9Eu8Ui4YUF0uM1ZcqmlQZ2FQSX8yBmsReD+nSWaY=
Subject key identifier: 52:3C:91:FD:5D:B5:85:82:D6:E8:97:80:BE:28:F6:46:63:49:ED:02
Authority key identifier: 38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
Certificate issuer: /CN=3827902eeca52a9f08140088f558e452e0ec955f
Certificate serial: 019D25834CDB6F7002A2C21817F4F3D106E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
Manifest number: 034B
Signing time: Wed 25 Mar 2026 15:00:55 +0000
Manifest this update: Wed 25 Mar 2026 15:00:55 +0000
Manifest next update: Thu 26 Mar 2026 15:00:55 +0000
Files and hashes: 1: OCeQLuylKp8IFACI9VjkUuDslV8.crl (hash: wVnzm6nQUUSyzsAT5vn1VliZmJ/dCeJriPlI5hkX/ts=)
2: avpRzc4rlLKtPjM9Nx0tTIvXDJw.roa (hash: IhFfZxmSF0cAaOFLNU/UGx/v0dCXUziLntdrEkHsx9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:4c:db:6f:70:02:a2:c2:18:17:f4:f3:d1:06:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3827902eeca52a9f08140088f558e452e0ec955f
Validity
Not Before: Mar 25 15:00:55 2026 GMT
Not After : Mar 26 15:00:55 2026 GMT
Subject: CN=523c91fd5db58582d6e89780be28f6466349ed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:10:92:ea:61:e1:0a:48:97:ef:5d:99:a7:
87:c0:e0:2e:e9:77:43:cc:65:03:ad:81:95:2b:e1:
7c:71:3b:7a:b0:1f:99:9a:18:a1:56:7a:6f:dd:98:
25:5a:84:5c:60:9a:93:fb:04:05:b0:76:75:e4:f1:
b1:ca:2b:a5:0b:36:08:c2:88:57:10:fc:e5:44:65:
c0:6f:e3:4e:03:34:a1:fc:74:93:10:c0:1d:05:65:
f0:f9:25:75:82:23:e9:c9:46:92:0f:d9:6a:1c:3a:
2b:13:e2:b0:54:9c:cb:c3:4d:be:f1:f0:88:af:ea:
07:3c:97:fa:27:07:49:38:3f:7f:e9:4c:4e:04:f2:
77:53:0f:a5:44:7f:4d:3b:b7:5b:60:a3:9b:3c:98:
d8:e1:f8:78:87:dc:d8:44:6d:7a:5b:16:52:28:90:
ee:c4:dd:1b:ff:5d:4b:41:d2:d0:62:cf:18:88:e9:
19:a1:1d:7a:a8:29:72:86:e5:5a:65:ef:5c:48:47:
b8:e7:aa:f7:94:0c:1e:5d:c4:a8:9b:f2:02:3c:51:
21:a5:ec:16:87:55:69:d3:bb:80:74:ec:7d:ff:e2:
ba:bf:3a:6a:c5:ae:41:cc:90:9a:7a:30:bf:59:d2:
c8:d4:d9:f4:60:68:55:e4:18:25:1e:9b:f6:e2:2f:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3C:91:FD:5D:B5:85:82:D6:E8:97:80:BE:28:F6:46:63:49:ED:02
X509v3 Authority Key Identifier:
keyid:38:27:90:2E:EC:A5:2A:9F:08:14:00:88:F5:58:E4:52:E0:EC:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCeQLuylKp8IFACI9VjkUuDslV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/19d13a-3ec6-4202-8d48-77db32647ca9/1/OCeQLuylKp8IFACI9VjkUuDslV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:0b:4b:55:b2:4a:2d:dd:32:4f:bc:0f:ea:f5:ce:ef:68:cc:
72:10:ba:ec:37:f8:77:61:5b:b1:42:15:48:84:ec:24:04:df:
11:d5:55:1e:69:16:9c:05:bc:fc:ec:56:0f:b8:45:b7:6d:c0:
f1:c3:82:0b:c6:fa:6f:71:66:c3:1a:ba:ac:dd:79:e1:8d:ea:
da:58:db:d0:62:89:b1:f9:85:8b:25:35:e9:43:79:b1:64:b2:
03:97:05:e2:74:f6:99:b8:28:15:b3:6f:86:06:92:96:9f:8b:
8a:0a:ff:c9:d8:10:94:a0:73:b0:36:1d:c3:af:8f:a4:1c:aa:
29:4a:7f:f4:27:72:7f:4b:9a:c2:f3:77:6c:20:11:f7:ee:a1:
0c:ac:03:5a:80:c5:f3:33:6d:1c:c8:fc:6b:cc:6d:6a:2b:ff:
c3:f8:ff:ea:28:5b:3d:cc:ea:91:20:db:e3:52:54:e5:e7:3f:
33:b3:1f:32:d1:b2:d0:34:08:f6:96:63:76:b7:0d:a7:e3:e0:
67:46:81:c7:1f:2d:73:3f:29:46:9b:80:a0:43:f2:4e:24:f5:
36:fe:c9:e5:64:45:60:ab:ed:3c:30:fb:6a:b1:ee:30:70:27:
ba:db:a8:f9:f2:ea:08:2f:95:fc:6c:76:66:44:1a:f4:40:01:
f1:6d:a2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:24 2026 by rpki-client