Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
File: OCrZBtcZpmqFoxPRBSlAAstlf3s.mft (raw, json)
Hash identifier: SkdSkZUhQDEROvH0qsxK08BUjOnP3VXPg5/yW2VFwN0=
Subject key identifier: AD:1D:D6:18:EE:84:3F:F7:52:45:19:75:54:7F:E8:BB:90:9A:6C:83
Authority key identifier: 38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
Certificate issuer: /CN=382ad906d719a66a85a313d105294002cb657f7b
Certificate serial: 019D25F1091CAA99A9F4F77C197E63E18EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
Manifest number: 0466
Signing time: Wed 25 Mar 2026 17:00:46 +0000
Manifest this update: Wed 25 Mar 2026 17:00:46 +0000
Manifest next update: Thu 26 Mar 2026 17:00:46 +0000
Files and hashes: 1: OCrZBtcZpmqFoxPRBSlAAstlf3s.crl (hash: keu5t4VLDNV0jEcQNg4OwW6f3buVDzn11t5z9MSOyNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:09:1c:aa:99:a9:f4:f7:7c:19:7e:63:e1:8e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382ad906d719a66a85a313d105294002cb657f7b
Validity
Not Before: Mar 25 17:00:46 2026 GMT
Not After : Mar 26 17:00:46 2026 GMT
Subject: CN=ad1dd618ee843ff752451975547fe8bb909a6c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:dd:66:ae:50:16:62:b5:60:49:1e:8c:62:
c1:7f:66:77:64:39:5d:59:f1:98:14:f2:34:bd:e0:
b9:6a:c5:f9:b0:e2:db:b9:c6:12:9a:0b:c6:3e:60:
76:b5:ad:c0:e3:0b:88:cb:2c:68:d4:c4:89:36:a3:
23:4f:84:a6:6d:df:7e:57:c1:51:79:46:3c:1e:80:
7b:36:06:6a:04:5c:4a:a3:89:37:b8:3f:f4:a1:a9:
61:1b:40:62:b6:d3:a6:47:05:ad:21:ed:57:87:f4:
dd:14:a0:1a:23:9f:b6:13:eb:14:22:d6:18:d3:b1:
ed:91:2e:31:63:4a:93:45:74:e6:19:31:11:de:4f:
a9:55:6f:30:f3:42:3e:68:44:08:c3:25:80:c6:23:
51:5b:46:0e:d7:16:5c:ec:7b:96:69:dd:0d:2c:d2:
a2:ca:f5:72:8b:55:20:59:95:b4:21:be:6e:cb:d2:
b5:c7:49:89:dc:10:a0:44:6f:8f:31:e5:f3:d8:69:
9d:37:a5:b8:e7:5f:f0:4a:d0:da:1c:b7:73:ea:f6:
d6:9a:30:c9:9e:d3:68:e6:e5:90:fe:b1:78:1d:c7:
3f:be:63:6f:17:d0:bb:6d:bb:25:08:d6:ec:9c:a1:
63:3b:fa:43:aa:14:27:09:73:38:df:02:e2:c6:b6:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1D:D6:18:EE:84:3F:F7:52:45:19:75:54:7F:E8:BB:90:9A:6C:83
X509v3 Authority Key Identifier:
keyid:38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:15:61:3c:30:c5:7d:85:99:48:5d:e2:9a:bb:60:8a:85:c2:
98:a1:bb:4a:4e:b2:03:23:f2:82:20:47:34:c0:56:69:92:bd:
29:0d:db:f1:33:dd:da:3c:44:41:f4:d2:29:95:a6:3e:d5:ee:
3b:13:40:43:c2:f0:b7:09:03:1e:ca:4f:55:d8:45:ce:5a:20:
67:22:36:13:26:cc:c7:1f:38:72:ac:53:23:64:3a:40:96:77:
89:ed:c0:d4:c6:6e:27:6d:84:fd:eb:d7:d0:14:36:9f:14:6f:
dd:6d:f5:83:06:68:be:a0:14:2f:4a:a7:aa:b2:51:d0:68:c4:
74:52:47:17:c7:26:71:03:de:3c:42:bd:06:f0:b6:3e:ad:45:
4d:57:8b:30:26:06:53:53:c1:2c:5a:98:47:ce:3f:4f:96:9f:
7d:77:b6:27:0e:c0:1c:ed:a9:ee:d1:7b:1c:f3:7e:8d:8d:6b:
73:73:14:94:47:43:7e:a5:75:28:d6:50:1c:88:7b:71:61:b2:
9a:10:ee:54:42:89:29:e7:92:4b:72:b8:a3:33:28:41:cf:65:
26:11:29:8f:c1:67:ba:8a:a8:e9:07:86:58:4f:0b:a2:0a:b3:
08:c9:83:b1:7d:f7:61:6c:9f:88:a7:26:99:de:0a:87:c1:8e:
ed:d1:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:21 2026 by rpki-client