Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
File: oGqOPGol1GOfOUWtFszF6Yo6kqY.mft (raw, json)
Hash identifier: vHXZPKaA0qswzsRWHLV2eGzew8pxZRRx85tyYgQs9ys=
Subject key identifier: 0D:44:4F:81:0E:7C:4E:1D:A0:E4:C6:CC:A8:54:10:FD:87:3F:A4:67
Authority key identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6
Certificate issuer: /CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6
Certificate serial: 019D270427929F0093A8BB6218179F25B8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: oGqOPGol1GOfOUWtFszF6Yo6kqY.crl (hash: EWHgVaehkXNZGhAMEGQPBBvD/rZpzPP5/G6YIU2jZjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:27:92:9f:00:93:a8:bb:62:18:17:9f:25:b8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=0d444f810e7c4e1da0e4c6cca85410fd873fa467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:7e:42:6b:4e:21:0c:e4:1c:47:e7:03:08:
14:c5:da:f3:a7:1c:6c:d2:5b:15:9e:9d:44:10:5b:
5e:7d:bc:65:16:a0:71:74:3f:c0:1b:a6:4c:b2:40:
9a:9b:ee:04:56:90:7b:77:23:36:ef:f7:93:2d:ef:
25:1e:78:da:20:de:6b:9e:36:0e:d2:5c:f1:60:1d:
a7:2f:76:f0:3d:80:a6:be:a2:65:7e:6e:0b:8d:08:
52:66:dc:25:05:7d:d3:f4:b6:da:28:ee:18:b3:6a:
df:8a:41:58:8f:01:64:55:d0:a7:90:4c:9f:32:56:
a0:18:5e:20:63:0c:0b:c8:10:01:f9:d1:44:40:5e:
f5:f5:f8:01:37:5f:cf:24:70:66:4a:1d:45:c6:e7:
84:2a:35:ec:56:86:2e:5c:1d:4f:be:bd:7f:ee:98:
7a:bc:7b:59:59:49:65:9a:e1:d9:10:9d:a8:5a:ef:
42:29:09:7a:3f:11:31:18:09:b5:62:96:26:77:35:
c0:7b:a6:2f:0b:ff:f6:82:f3:72:50:25:bc:22:a1:
b6:ec:ea:49:a2:91:d5:35:8e:a0:c1:da:1d:9c:5b:
69:44:9d:00:82:86:67:46:35:cd:2a:8e:4a:fa:3d:
ee:82:3f:b6:c7:9a:bf:65:e9:d9:42:bd:78:15:09:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:44:4F:81:0E:7C:4E:1D:A0:E4:C6:CC:A8:54:10:FD:87:3F:A4:67
X509v3 Authority Key Identifier:
keyid:A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:05:70:a7:76:0b:16:95:39:f9:c1:06:32:1b:88:14:71:ee:
36:1f:a6:e3:7d:63:ae:69:0b:1d:b7:24:f9:a9:17:e0:57:6c:
cb:93:04:44:a8:a5:72:57:63:46:d3:f7:af:f2:03:5f:47:df:
8e:89:f6:1d:da:5b:21:6f:f1:cf:c9:fd:bf:06:79:4b:7d:f6:
cc:ef:6d:55:f7:3f:86:df:23:e2:78:2f:20:65:bb:9a:d6:40:
8c:8c:df:f0:a2:5c:c6:b3:a9:ed:e9:32:17:6e:25:ae:57:4d:
8e:11:2d:be:b6:df:d8:2d:3c:ee:28:2d:15:19:50:93:bb:5b:
50:3d:bb:de:0c:b2:31:e2:28:05:61:ef:95:64:29:63:00:8e:
98:18:37:26:a0:3f:e1:03:58:60:45:4b:d3:19:9e:f8:1c:14:
d1:8e:08:9d:a4:fc:5c:01:9a:5e:3c:3c:a0:aa:31:11:05:12:
30:74:1e:74:77:f7:a1:e1:04:01:ab:99:ea:de:ab:02:9a:3d:
18:2c:da:e1:e9:43:58:9c:f7:05:8c:ee:a8:a8:9c:81:59:69:
b8:13:b7:6f:74:30:09:4c:f4:48:01:03:1c:21:fb:ef:57:f4:
27:68:91:bd:a2:2f:fa:24:86:f4:47:a5:b4:f8:12:64:c0:ed:
10:f9:23:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:34 2026 by rpki-client