Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File: oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier: DJXj4Y22dYUkkK0FLafME5ycodEszyxqqi910KxM90w=
Subject key identifier: C0:31:8A:3B:25:11:17:37:EA:85:51:90:6D:B5:8D:4B:BF:5D:C4:42
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer: /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial: 019D28F2320876F245B002DF4F8576AA3FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:00:54 +0000
Manifest this update: Thu 26 Mar 2026 07:00:54 +0000
Manifest next update: Fri 27 Mar 2026 07:00:54 +0000
Files and hashes: 1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: pvrhPc36YI6gXjLgv8L3zbvSZMJRwQRn04Auj/qYPr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:32:08:76:f2:45:b0:02:df:4f:85:76:aa:3f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Validity
Not Before: Mar 26 07:00:54 2026 GMT
Not After : Mar 27 07:00:54 2026 GMT
Subject: CN=c0318a3b25111737ea8551906db58d4bbf5dc442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:03:63:7b:29:22:98:b0:08:19:20:ca:34:
1f:a9:57:ac:df:06:88:a1:73:f3:7c:eb:0b:1d:43:
30:7e:db:6b:f0:27:82:c6:3f:f6:67:72:7b:c0:e9:
2c:82:e2:0a:5b:ad:74:31:be:e9:ef:06:3f:bf:57:
53:8a:74:21:5f:61:d9:37:63:ef:a9:dd:f0:1f:33:
b7:5e:79:3b:32:0b:ec:e8:a9:8e:34:b6:57:6b:db:
ce:e4:d1:bb:5b:f0:8c:58:7b:5c:c3:eb:eb:83:18:
36:87:2a:1c:8f:12:c4:e5:97:0a:38:5c:17:1c:f8:
82:f4:66:c4:8d:83:63:a1:82:14:33:17:65:cb:bd:
80:f7:a4:35:7a:b0:e4:45:24:91:49:55:ec:35:f9:
ed:13:6e:ad:a4:d7:2e:69:8e:22:21:7b:b3:0c:43:
89:40:88:63:09:c5:6f:e6:ff:1d:18:17:97:95:e7:
4a:92:80:fa:b9:d0:e4:94:3f:fa:5c:6d:da:10:da:
b1:d4:c9:7e:40:36:d2:9d:50:d3:6e:f6:0b:f6:d7:
9e:fe:97:9a:cb:f9:4f:74:d9:df:5e:a9:0c:63:c9:
b2:d4:70:a3:1a:fb:16:97:dd:5d:5b:fe:ef:cb:8d:
6e:fe:4b:41:6a:9d:d9:80:27:38:e4:fc:38:47:24:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:31:8A:3B:25:11:17:37:EA:85:51:90:6D:B5:8D:4B:BF:5D:C4:42
X509v3 Authority Key Identifier:
keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fb:8c:f5:5d:e1:fa:94:43:71:a0:dd:c2:db:31:e6:94:31:
3f:cd:54:76:20:6f:04:61:48:40:b1:21:b3:4a:56:97:98:c5:
fb:cf:66:4d:a6:89:d2:bc:fc:23:46:90:a3:e7:60:e2:4e:03:
57:f6:e6:ef:80:6e:42:bf:fa:c0:69:8f:01:e5:fc:f3:64:c0:
03:c1:74:d0:4d:e1:3b:7b:e0:58:fc:24:f6:ef:11:80:7e:ff:
bf:d3:6a:a7:c6:9c:6d:b7:47:84:5f:a6:2a:ac:f6:4c:25:87:
1e:e3:a6:dc:84:c7:f9:86:2d:e4:14:20:8b:d7:3c:f6:e6:52:
09:67:ee:e5:28:9b:58:ca:2b:b5:8d:9c:29:d3:89:15:05:28:
ce:b1:7a:dd:b7:a4:90:94:b0:e7:78:9d:44:38:46:31:5a:84:
bf:e6:c7:91:ca:6e:9c:98:ef:24:c8:aa:47:40:35:83:94:4b:
83:2a:e2:c1:89:8e:0b:32:ee:9e:62:c4:35:b0:a6:23:bf:15:
04:24:60:cc:e8:f2:a1:c9:b6:a7:7d:8a:a5:ed:48:df:83:e1:
e0:30:bc:98:4c:7c:c4:14:6c:91:17:48:1f:aa:7e:c1:3f:94:
8c:9c:e9:31:b2:c2:25:98:9f:1f:89:c0:e7:ac:15:44:96:c6:
43:a1:ab:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8jIIdvJFsALfT4V2qj+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDYyY2E5Y2NlOGM4ZmZkMWY5ZDdkZTdjN2U5MDVjNmU4
OTNjZmMwHhcNMjYwMzI2MDcwMDU0WhcNMjYwMzI3MDcwMDU0WjAzMTEwLwYDVQQD
EyhjMDMxOGEzYjI1MTExNzM3ZWE4NTUxOTA2ZGI1OGQ0YmJmNWRjNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWADY3spIpiwCBkgyjQfqVes3waI
oXPzfOsLHUMwfttr8CeCxj/2Z3J7wOksguIKW610Mb7p7wY/v1dTinQhX2HZN2Pv
qd3wHzO3Xnk7Mgvs6KmONLZXa9vO5NG7W/CMWHtcw+vrgxg2hyocjxLE5ZcKOFwX
HPiC9GbEjYNjoYIUMxdly72A96Q1erDkRSSRSVXsNfntE26tpNcuaY4iIXuzDEOJ
QIhjCcVv5v8dGBeXledKkoD6udDklD/6XG3aENqx1Ml+QDbSnVDTbvYL9tee/pea
y/lPdNnfXqkMY8my1HCjGvsWl91dW/7vy41u/ktBap3ZgCc45Pw4RySFFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAxijslERc36oVRkG21jUu/XcRCMB8GA1UdIwQY
MBaAFKFGLKnM6Mj/0fnX3nx+kFxuiTz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4Mjgt
MjcyY2M5MmNjNjBiLzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83OTcxZWQtNTg0Mi00ZTViLWI4MjgtMjcyY2M5MmNjNjBi
LzEvb1VZc3Fjem95UF9SLWRmZWZINlFYRzZKUFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvuM9V3h
+pRDcaDdwtsx5pQxP81UdiBvBGFIQLEhs0pWl5jF+89mTaaJ0rz8I0aQo+dg4k4D
V/bm74BuQr/6wGmPAeX882TAA8F00E3hO3vgWPwk9u8RgH7/v9Nqp8acbbdHhF+m
Kqz2TCWHHuOm3ITH+YYt5BQgi9c89uZSCWfu5SibWMortY2cKdOJFQUozrF63bek
kJSw53idRDhGMVqEv+bHkcpunJjvJMiqR0A1g5RLgyriwYmOCzLunmLENbCmI78V
BCRgzOjyocm2p32Kpe1I34Ph4DC8mEx8xBRskRdIH6p+wT+UjJzpMbLCJZifH4nA
56wVRJbGQ6Gr9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:44 2026 by rpki-client