Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File: Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier: IsoTTJ/rRk81b1PJJ2wMxawnwcKo4BtVMplp5BFDk70=
Subject key identifier: 08:8B:30:81:D7:35:E2:95:C2:3A:A8:50:36:E3:6B:C9:2F:4D:1C:25
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer: /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial: 019D27A875F6EF8F442CF9E0A7E3CD33D351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number: 1133
Signing time: Thu 26 Mar 2026 01:00:44 +0000
Manifest this update: Thu 26 Mar 2026 01:00:44 +0000
Manifest next update: Fri 27 Mar 2026 01:00:44 +0000
Files and hashes: 1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: VrAogmRw5NvoSOqu0W44ZrnzfCVjmoiAhQzDv5DsbzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:75:f6:ef:8f:44:2c:f9:e0:a7:e3:cd:33:d3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Validity
Not Before: Mar 26 01:00:44 2026 GMT
Not After : Mar 27 01:00:44 2026 GMT
Subject: CN=088b3081d735e295c23aa85036e36bc92f4d1c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:21:62:83:11:a3:2d:86:64:54:b8:af:79:
19:71:07:85:ba:8b:b3:e6:d2:24:5c:26:67:0c:be:
8a:1c:e4:cb:02:fc:f2:56:31:99:12:99:6e:45:27:
9f:fc:67:77:8b:da:87:99:d3:03:76:54:d5:1a:45:
1f:46:44:51:7b:d0:6d:b1:87:cb:04:f0:a7:4f:a3:
62:ca:34:0f:71:f1:21:6d:09:2d:be:de:78:87:6b:
39:e8:b5:d2:89:a4:af:eb:81:f7:9f:6f:93:ce:4d:
40:b3:47:d0:bf:0b:e0:26:7c:d0:62:dd:ac:e9:0d:
7d:de:1f:94:75:d8:4e:0b:95:85:12:f8:cc:b0:2b:
21:cc:09:03:11:df:fe:61:8a:7e:7e:6c:6e:3d:3f:
cf:1d:b7:a3:97:fb:b0:97:c7:47:18:47:26:bb:3a:
bb:2d:1a:a1:e7:c1:72:58:12:a6:2d:2a:34:51:02:
e9:74:cf:18:90:0c:47:c7:0f:ed:21:71:04:53:24:
95:b1:40:7a:6b:fc:74:2c:71:15:28:55:08:b2:b9:
1c:d4:67:62:a4:f2:f6:f3:c6:31:e7:bf:b4:e6:14:
e7:5c:d6:b5:40:d4:8d:63:29:8f:b5:53:47:d6:e1:
52:ae:45:bb:e2:ad:0b:f8:8f:05:bf:9f:a9:70:ef:
c9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8B:30:81:D7:35:E2:95:C2:3A:A8:50:36:E3:6B:C9:2F:4D:1C:25
X509v3 Authority Key Identifier:
keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b8:1e:a4:74:23:0f:48:1a:18:fb:3b:ec:c4:78:fa:e2:65:
a2:15:12:38:f5:80:25:3c:a7:c6:35:aa:75:89:f4:72:9a:78:
06:db:38:8b:1e:d8:d9:40:e1:9d:66:5f:8d:d6:d3:56:d9:0d:
13:4b:12:86:99:fb:49:47:87:bf:1a:c9:cd:07:ca:a2:3c:12:
64:9c:29:5c:4d:a2:d2:99:17:a6:25:a9:37:67:4a:2a:3e:ea:
34:41:7c:02:61:1f:37:c9:7e:0e:a0:53:24:fa:e5:e3:d6:61:
54:82:f0:b1:2d:a9:52:f1:d6:4f:d6:11:12:bf:47:0a:dc:71:
b7:99:e3:e8:dd:53:a5:bb:f2:12:18:5a:89:43:9b:fa:6b:34:
e1:5b:9b:7e:78:aa:cc:e7:0b:7f:cd:7b:e3:86:c5:6f:6c:c7:
18:8d:96:8c:ab:b3:42:74:f2:bf:c9:29:01:4d:db:e2:5a:84:
f8:6e:c8:62:26:a3:e6:f5:fa:74:7e:7c:d6:ec:ff:62:f2:a3:
b2:51:89:2b:11:dd:b1:48:0c:d8:97:7c:66:69:6d:79:61:16:
c7:63:9c:62:a9:d7:53:22:55:b6:7e:63:88:a5:3c:cd:d6:4b:
89:e4:25:e5:9a:a3:64:6c:45:4c:fa:a0:71:67:6e:0f:3f:8f:
72:e6:1d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:54 2026 by rpki-client