Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: b3yu+OG6+rlwXJclfyum7bcFsZgvBqhpC4aNxVx1qy4=
Subject key identifier: F6:9C:3B:D2:86:22:C9:B5:CB:BD:0F:07:AA:EB:A2:F1:95:17:74:72
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 019D27045A3F1B270ABFFD4590E62C30116D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 1200
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: KN9yTT3RJu3puG8SL3DVXHWgmYFPDVTkHadnqalfc3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5a:3f:1b:27:0a:bf:fd:45:90:e6:2c:30:11:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=f69c3bd28622c9b5cbbd0f07aaeba2f195177472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:3a:e4:68:57:74:c8:67:d1:54:01:f9:86:
a3:ef:a5:0d:81:db:21:c3:29:3e:69:5f:c1:61:7b:
a0:a1:5e:ef:57:4a:e4:ff:c5:53:bc:10:33:97:61:
84:be:46:cd:6c:62:66:44:0a:cf:f4:d9:8c:4f:40:
16:2e:50:f0:84:9c:8a:33:3a:18:66:24:19:77:93:
f7:58:db:34:cf:04:9d:87:ff:5c:e1:7e:a0:ac:77:
1f:2d:a6:01:2a:3c:ff:0d:c5:44:9e:71:9e:0c:60:
69:b1:77:59:bf:80:1c:f0:91:3e:0d:50:cc:61:40:
a3:78:d5:8b:b3:6d:3c:cb:02:8c:e1:ac:b2:8a:b7:
f7:c8:ea:b1:16:36:d1:bd:7f:89:f9:43:62:37:06:
03:85:b3:6b:29:06:f3:46:b2:45:35:1e:3c:72:7d:
56:3b:a2:5a:37:de:8b:7a:61:c4:98:e1:79:5c:b2:
07:69:2d:7d:20:05:cd:4d:6a:fd:2e:a9:f4:e6:da:
2b:0c:8b:2d:55:54:28:ef:1d:73:74:cc:51:85:89:
7e:a1:c6:56:08:04:37:d1:6c:e7:e4:fd:0c:a6:d2:
01:91:ae:02:9e:78:63:0c:83:5b:3b:e4:b7:dd:73:
86:d2:c5:df:74:64:9e:66:75:da:6c:08:79:d5:c1:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:3B:D2:86:22:C9:B5:CB:BD:0F:07:AA:EB:A2:F1:95:17:74:72
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5c:74:b7:8a:6d:18:82:46:8e:fc:57:e0:60:c3:6f:41:bc:
dd:d6:b4:ed:d4:86:ea:09:ea:e7:ff:19:75:e0:58:c0:39:6a:
c8:6b:3b:f7:40:02:bb:03:cb:f1:77:69:ce:55:6b:a9:24:51:
70:66:ab:00:ed:83:e5:a8:b7:25:0b:52:79:2e:88:46:7e:ff:
f9:93:8b:21:07:96:de:fa:42:5e:94:2b:5d:83:cc:2f:52:41:
86:03:82:64:8d:06:fd:a0:96:ee:37:dd:f6:a1:df:72:7e:d1:
b6:c2:b8:74:22:7c:25:29:35:27:e3:48:ca:64:26:cf:ac:c5:
b2:40:a2:3c:f2:57:69:0d:e7:69:a6:62:09:4a:55:d3:59:18:
fe:a2:eb:35:9b:e8:a4:50:bf:3b:f2:0e:48:4c:51:03:61:fa:
c6:63:25:86:49:1a:0f:a4:8e:48:32:0f:ce:6b:b3:ce:da:ff:
35:ad:7c:3c:41:5e:0a:d6:ae:8b:6d:1d:d8:78:96:71:7b:b7:
73:16:c5:6b:49:0d:cc:8a:ec:bc:35:c9:a6:59:23:fb:4c:1c:
4a:4f:d8:83:dc:ca:99:6b:c0:9c:b6:44:64:4f:64:a2:28:ea:
9f:c2:74:cd:2d:0d:89:82:91:41:23:bb:bc:19:e5:b8:bb:52:
88:fe:ce:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBFo/GycKv/1FkOYsMBFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTI3ZDY0YTRjZTk1ZTA4MzExYWZhZmY0M2U2NmQwNzNm
YjIxZDEwHhcNMjYwMzI1MjIwMTI5WhcNMjYwMzI2MjIwMTI5WjAzMTEwLwYDVQQD
EyhmNjljM2JkMjg2MjJjOWI1Y2JiZDBmMDdhYWViYTJmMTk1MTc3NDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreI65GhXdMhn0VQB+Yaj76UNgdsh
wyk+aV/BYXugoV7vV0rk/8VTvBAzl2GEvkbNbGJmRArP9NmMT0AWLlDwhJyKMzoY
ZiQZd5P3WNs0zwSdh/9c4X6grHcfLaYBKjz/DcVEnnGeDGBpsXdZv4Ac8JE+DVDM
YUCjeNWLs208ywKM4ayyirf3yOqxFjbRvX+J+UNiNwYDhbNrKQbzRrJFNR48cn1W
O6JaN96LemHEmOF5XLIHaS19IAXNTWr9Lqn05torDIstVVQo7x1zdMxRhYl+ocZW
CAQ30Wzn5P0MptIBka4CnnhjDINbO+S33XOG0sXfdGSeZnXabAh51cHuXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPacO9KGIsm1y70PB6rrovGVF3RyMB8GA1UdIwQY
MBaAFPzifWSkzpXggxGvr/Q+ZtBz+yHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09KOVpLVE9sZUNERWEtdjlENW0wSFA3SWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zN2RjZTYtZmZlNS00NzZiLTgwOGEt
MDAxNGJjODU1YmY0LzEvX09KOVpLVE9sZUNERWEtdjlENW0wSFA3SWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8zN2RjZTYtZmZlNS00NzZiLTgwOGEtMDAxNGJjODU1YmY0
LzEvX09KOVpLVE9sZUNERWEtdjlENW0wSFA3SWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlx0t4pt
GIJGjvxX4GDDb0G83da07dSG6gnq5/8ZdeBYwDlqyGs790ACuwPL8XdpzlVrqSRR
cGarAO2D5ai3JQtSeS6IRn7/+ZOLIQeW3vpCXpQrXYPML1JBhgOCZI0G/aCW7jfd
9qHfcn7RtsK4dCJ8JSk1J+NIymQmz6zFskCiPPJXaQ3naaZiCUpV01kY/qLrNZvo
pFC/O/IOSExRA2H6xmMlhkkaD6SOSDIPzmuzztr/Na18PEFeCtaui20d2HiWcXu3
cxbFa0kNzIrsvDXJplkj+0wcSk/Yg9zKmWvAnLZEZE9koijqn8J0zS0NiYKRQSO7
vBnluLtSiP7O9Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:24 2026 by rpki-client