Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/oPmMXcc-P6i_3MABQ_A5VVLv78A.mft
File: oPmMXcc-P6i_3MABQ_A5VVLv78A.mft (raw, json)
Hash identifier: OfIJufROeGlJDbVAyiIv649HRQ8ga6g3o38XMj4QWxU=
Subject key identifier: 2D:D8:87:C3:20:F0:54:3F:0A:FA:EB:6F:03:F4:9C:9C:27:6E:00:CD
Authority key identifier: A0:F9:8C:5D:C7:3E:3F:A8:BF:DC:C0:01:43:F0:39:55:52:EF:EF:C0
Certificate issuer: /CN=a0f98c5dc73e3fa8bfdcc00143f0395552efefc0
Certificate serial: 019D32638CB8FEAA2A2816A8D6CDCB22EA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPmMXcc-P6i_3MABQ_A5VVLv78A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/oPmMXcc-P6i_3MABQ_A5VVLv78A.mft
Manifest number: C7
Signing time: Sat 28 Mar 2026 03:01:17 +0000
Manifest this update: Sat 28 Mar 2026 03:01:17 +0000
Manifest next update: Sun 29 Mar 2026 03:01:17 +0000
Files and hashes: 1: oPmMXcc-P6i_3MABQ_A5VVLv78A.crl (hash: X+VKiHZV/W035VHGAKNqZZgkECRELADEMzrMb8OGTiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/oPmMXcc-P6i_3MABQ_A5VVLv78A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/oPmMXcc-P6i_3MABQ_A5VVLv78A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oPmMXcc-P6i_3MABQ_A5VVLv78A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:8c:b8:fe:aa:2a:28:16:a8:d6:cd:cb:22:ea:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f98c5dc73e3fa8bfdcc00143f0395552efefc0
Validity
Not Before: Mar 28 03:01:17 2026 GMT
Not After : Mar 29 03:01:17 2026 GMT
Subject: CN=2dd887c320f0543f0afaeb6f03f49c9c276e00cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:d9:86:da:9d:80:6b:0e:7c:ce:5e:bd:a0:
12:c9:23:4a:f2:37:0d:dc:c4:da:2f:77:af:f2:e7:
76:50:57:f7:12:57:86:86:19:63:c9:ef:ac:d1:75:
20:63:9c:8f:0b:c6:bc:27:91:96:4c:5e:29:e2:a0:
2a:a2:e3:c4:f1:46:aa:53:e7:ce:9a:96:20:ca:5f:
ac:04:3a:61:eb:10:86:6f:e5:73:33:0a:78:e4:95:
b5:0e:db:a9:b1:33:79:f4:8a:85:05:ac:16:23:2b:
63:e9:dd:34:7b:57:d8:13:23:75:70:20:e7:5b:23:
0f:e4:54:53:dc:fe:fb:7f:3c:c9:a9:4d:78:b3:8a:
f6:08:46:05:e5:aa:1c:e7:7d:db:11:5f:94:38:06:
3d:8d:4c:28:57:a6:72:bf:98:7e:13:77:08:61:25:
04:40:82:e9:f8:7a:a4:73:17:11:b1:ab:c4:4e:ab:
cd:a6:98:06:44:61:48:8e:28:b2:fd:11:31:3f:da:
8f:92:e3:31:be:c1:1b:37:54:88:8c:25:90:51:c3:
84:38:06:6f:26:ac:ac:48:ff:1c:2a:61:7c:b1:24:
f3:a8:07:a0:31:97:70:af:89:4b:45:d4:18:71:08:
5f:79:c3:b6:c8:19:2a:3a:c5:b0:18:2a:11:a8:68:
8c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D8:87:C3:20:F0:54:3F:0A:FA:EB:6F:03:F4:9C:9C:27:6E:00:CD
X509v3 Authority Key Identifier:
keyid:A0:F9:8C:5D:C7:3E:3F:A8:BF:DC:C0:01:43:F0:39:55:52:EF:EF:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPmMXcc-P6i_3MABQ_A5VVLv78A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/oPmMXcc-P6i_3MABQ_A5VVLv78A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/806328-9042-4c13-ade0-163d03ea6499/1/oPmMXcc-P6i_3MABQ_A5VVLv78A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d1:d8:e8:fd:5c:c9:95:29:0e:19:78:8c:c4:36:0a:08:d0:
fc:ea:53:33:6c:e0:c3:30:b0:f7:8c:4f:b8:29:d3:ba:fb:d0:
50:2e:60:23:0a:77:dc:f0:52:89:f6:58:a4:2d:d7:6e:e2:0e:
f7:71:59:e8:eb:9d:27:7d:4b:34:fb:c4:eb:af:2d:8a:5d:70:
72:f2:db:51:53:7e:55:60:75:1b:70:45:fe:05:3e:73:bd:3b:
eb:11:ab:86:14:bb:55:b4:1f:9d:5b:09:8c:a7:73:8d:a3:74:
63:2c:1f:9c:56:44:a4:48:47:63:0c:68:23:7b:34:91:a8:41:
91:c5:c8:ae:22:82:0f:fd:ea:b0:b5:f6:6d:95:ad:09:97:6a:
92:dc:2e:02:b8:e6:e0:1b:96:e8:38:4d:69:ef:82:8c:dd:27:
14:7f:43:83:04:c4:13:53:2e:64:1b:ca:a8:28:4e:93:09:f0:
b2:56:91:d6:e7:a2:48:d7:d3:90:f6:b5:8f:6e:08:c8:7b:a7:
02:15:71:38:fe:f2:22:dd:1f:0b:7d:8e:c0:68:33:af:e8:dc:
b5:72:9b:c8:ee:c4:aa:8c:39:8a:ab:79:3d:fa:ae:d1:2b:88:
ac:81:55:76:fa:80:6c:7e:1c:3d:9a:b5:9b:bb:50:d4:11:0c:
6f:f3:8a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:38 2026 by rpki-client