Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: +gFtq3AuQAiIrUhQH15nWbgA0rD/mVslgiAV80aZ48E=
Subject key identifier: 85:9F:F4:E3:77:AA:49:A5:A6:4F:EC:30:CF:F8:45:1F:97:88:AE:54
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 019D28F30B6C82D41A6A49666404DA8E1479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 14A3
Signing time: Thu 26 Mar 2026 07:01:49 +0000
Manifest this update: Thu 26 Mar 2026 07:01:49 +0000
Manifest next update: Fri 27 Mar 2026 07:01:49 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: Eu4qBndOBku2iifA9KlG5sTml8j7xr63klLL5Uy8weg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:0b:6c:82:d4:1a:6a:49:66:64:04:da:8e:14:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Mar 26 07:01:49 2026 GMT
Not After : Mar 27 07:01:49 2026 GMT
Subject: CN=859ff4e377aa49a5a64fec30cff8451f9788ae54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:a2:16:99:81:5b:cf:72:9c:92:64:06:4e:
59:f1:d1:fb:a9:75:7c:9f:37:5b:e4:21:a0:af:f2:
0c:07:80:2e:f0:7b:e2:bd:de:bd:5a:94:65:77:2d:
88:ce:fb:f6:66:2f:42:d7:c1:9c:32:73:53:2b:d3:
db:cf:e4:87:c7:45:5c:8e:16:ed:b3:47:07:a0:1a:
c1:b5:fc:3f:8f:8c:36:da:06:11:d5:0d:c9:03:f5:
21:ed:dd:83:67:f4:55:5e:3c:df:66:e0:51:37:70:
cb:55:17:5b:61:f6:d3:2e:cd:78:64:1c:fc:57:e3:
f5:21:05:5e:b6:56:78:11:72:99:f2:d9:36:6c:e3:
e9:48:d5:ec:58:f4:09:84:ba:2a:a8:58:c5:a9:0c:
56:55:3a:93:f9:1f:d1:0e:be:87:16:55:cb:a0:bc:
67:9c:6d:55:33:6c:19:c0:69:1c:93:20:bc:23:8b:
2b:16:6e:ef:57:2c:75:fa:e9:60:24:98:4d:9f:d5:
ba:24:1c:0b:05:ae:89:50:46:b1:82:44:8b:67:93:
9f:49:54:05:82:3d:a3:4f:84:18:11:64:9d:79:e9:
99:64:b1:7e:01:49:28:5e:87:4a:28:57:b9:c2:7a:
16:d9:1b:f5:70:68:a6:d0:1a:0c:b6:d0:7d:9f:ee:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:F4:E3:77:AA:49:A5:A6:4F:EC:30:CF:F8:45:1F:97:88:AE:54
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:65:34:fc:9a:55:e8:a5:97:2a:8a:c1:59:33:b1:48:32:66:
29:58:96:fe:5e:53:cf:4d:5a:65:1a:80:40:ab:14:b6:71:a1:
79:8a:6c:b2:15:ff:92:6b:96:f1:83:e4:7f:4d:c9:78:b9:d0:
e4:53:3c:8b:8d:5c:b7:d3:7d:63:f6:d0:b6:77:c6:cc:00:7e:
55:3c:4b:eb:29:5b:58:5b:d1:1e:73:84:03:87:b1:2d:20:3e:
0d:9c:31:d3:e9:15:77:ab:41:8c:6f:24:ca:b4:57:a2:8c:76:
2e:ec:09:8c:db:a8:74:e4:cf:1d:f5:6d:72:3a:ba:ad:b6:16:
9a:de:11:a7:46:90:5f:12:0c:1d:1b:e0:ba:7f:97:f0:19:7e:
11:0a:41:a0:87:2f:08:85:42:54:ff:bd:83:b9:db:3d:99:63:
2c:9a:b6:ba:c2:f5:05:f6:37:aa:43:e2:ac:ee:db:13:7c:56:
d4:39:c2:41:63:f0:09:8b:ce:5d:0a:e9:76:be:35:2a:e6:50:
b1:66:8a:4d:75:72:48:37:a1:d1:bc:a9:ad:5f:3d:82:53:f9:
21:66:62:1f:84:08:77:52:03:d6:38:1a:2c:52:bf:bc:3f:aa:
69:da:0c:14:26:7d:36:aa:65:f2:6b:07:7d:18:32:12:22:7f:
a3:59:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:51 2026 by rpki-client