Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier: Ii9PN6j2q9Mms1D0a/qT5MgY0QNEiAPh2K5t9wQheU8=
Subject key identifier: 19:DE:93:0E:4F:4A:1A:D0:59:E3:92:82:55:12:46:5C:03:50:43:80
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial: 019D27DF85657422103ABB3DEA0E4BA0A808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number: 1202
Signing time: Thu 26 Mar 2026 02:00:53 +0000
Manifest this update: Thu 26 Mar 2026 02:00:53 +0000
Manifest next update: Fri 27 Mar 2026 02:00:53 +0000
Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: Lc/es4GEn3oFyWmB64unguHFiWbYuXPqJWpwj7nCuIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:85:65:74:22:10:3a:bb:3d:ea:0e:4b:a0:a8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Validity
Not Before: Mar 26 02:00:53 2026 GMT
Not After : Mar 27 02:00:53 2026 GMT
Subject: CN=19de930e4f4a1ad059e392825512465c03504380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:d6:bd:93:36:ac:71:12:6b:d5:78:93:fc:
f7:b0:17:67:ee:c2:92:3e:06:3d:04:c2:0f:e8:e8:
4a:0b:bb:7a:d8:62:2d:d6:76:94:67:50:c6:f6:36:
75:50:93:f8:24:96:2a:26:2a:81:33:8b:ab:2d:33:
34:2e:95:75:b1:bd:44:6e:06:d1:9d:7e:a1:d0:3f:
64:ba:ab:bf:2f:13:5a:e7:f9:0a:35:a9:c8:8e:f5:
12:3f:a2:b3:16:88:18:b0:46:d9:46:b0:c1:0b:96:
62:06:00:ba:f9:ee:9a:f9:d3:5a:05:1c:26:e5:53:
91:ed:e5:a1:9d:21:a3:e1:f9:af:3e:aa:8b:4e:bf:
99:6a:af:eb:7d:a2:0c:2c:eb:99:23:32:73:43:e0:
8e:0d:b3:51:25:da:fb:12:d8:08:ec:f9:5b:81:2c:
a9:9e:5f:ed:c4:c9:f1:e7:61:42:ea:76:99:bd:e5:
1c:4e:09:a1:db:46:f4:ed:cc:14:ed:ec:c0:94:ed:
b7:d7:a7:8d:e9:8c:ef:7c:db:df:40:da:b7:02:b4:
75:da:e0:83:3e:ce:d8:6f:85:97:5a:9f:cf:35:c3:
47:9b:76:14:b6:84:15:57:44:0e:fe:68:90:e5:d6:
3f:7e:44:ed:d6:ee:20:5f:2f:4a:10:d3:c9:54:94:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DE:93:0E:4F:4A:1A:D0:59:E3:92:82:55:12:46:5C:03:50:43:80
X509v3 Authority Key Identifier:
keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:42:1f:50:31:b5:d4:6d:aa:81:26:0b:0d:b1:33:04:c7:8e:
44:9a:fc:f7:8b:2d:f8:ec:a1:d6:b9:8a:79:d3:fb:5c:3f:6f:
f1:a2:f0:57:e1:92:6e:70:c5:37:c0:40:81:4f:91:1f:4e:05:
36:36:1a:f0:b4:ec:45:42:9a:25:49:5a:d5:75:0f:3d:65:c0:
71:e4:ed:4c:4d:36:4b:b2:e4:6e:e0:d1:ee:16:0e:31:1e:5b:
3d:f5:24:64:1c:2b:b6:42:74:84:1d:f5:44:aa:44:c3:9b:40:
bc:a7:33:9a:4e:eb:f2:c8:e6:19:db:02:40:c1:ff:bc:ef:62:
8e:72:f8:0c:c7:f6:bb:13:d1:d4:b6:f8:5f:36:16:6e:03:84:
20:f6:1b:f2:32:18:63:08:40:49:50:2d:2b:8f:d0:b7:5b:48:
39:ac:af:d1:57:c9:16:0b:e3:db:0d:04:f3:ad:3d:ce:ea:a8:
e8:56:29:00:d7:4d:24:da:4f:8b:5f:f6:24:e4:e1:db:7d:95:
77:db:23:63:2c:13:b8:18:58:e3:7f:f7:03:fe:18:11:f7:12:
e4:13:c6:ee:c2:0e:80:8a:27:de:0d:77:3f:6c:17:3c:47:c7:
6f:14:60:99:ff:24:17:a1:8c:7e:c7:b2:71:89:9b:62:37:56:
26:d7:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:13 2026 by rpki-client