Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: erFTfK/PCJ3j1glER5EYk9hXCaLMLAKm4qvsBaA21sk=
Subject key identifier: 5C:6F:20:DA:B4:6D:98:2C:96:D5:1A:F7:16:D1:7A:55:4E:44:D2:3B
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 019D28F2609511312B7625B83B750D804CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 0C46
Signing time: Thu 26 Mar 2026 07:01:06 +0000
Manifest this update: Thu 26 Mar 2026 07:01:06 +0000
Manifest next update: Fri 27 Mar 2026 07:01:06 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: MacMsNOEvwb1qWq/atDntEhwd2EabUElvIi9KgQN3yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:60:95:11:31:2b:76:25:b8:3b:75:0d:80:4c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Mar 26 07:01:06 2026 GMT
Not After : Mar 27 07:01:06 2026 GMT
Subject: CN=5c6f20dab46d982c96d51af716d17a554e44d23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:81:a0:8d:02:85:67:b5:54:3a:72:ad:07:55:
ed:bd:5e:d7:3a:7c:25:28:bb:f9:02:c0:48:37:17:
c6:9c:f4:e9:1b:d3:eb:4c:68:af:b4:62:5c:39:59:
17:eb:00:19:c2:62:c3:cd:a4:ba:39:d0:d7:59:8a:
51:82:f5:07:86:b1:9e:6e:2e:28:85:c6:87:19:91:
80:e8:7e:69:a8:1e:ea:ed:c5:4e:a0:1d:e4:ea:84:
2d:a6:05:7c:74:cf:33:38:42:43:56:a1:92:ab:87:
4c:5c:30:42:82:61:78:24:8a:01:a7:9e:01:23:f3:
10:b3:ba:89:f7:d2:8c:9e:f0:84:66:36:0c:b1:07:
71:6a:93:1a:1b:5a:ca:57:b8:6e:95:a7:b8:d4:a5:
9d:29:cb:52:79:a7:22:cc:a4:cc:9b:11:6b:2a:97:
03:4d:bc:54:59:a8:06:e2:22:96:c8:db:dc:ec:5f:
0e:9d:78:9e:43:08:87:41:b2:09:d4:ca:47:59:bb:
f2:a9:aa:c3:eb:d4:c3:ff:89:25:36:74:29:f7:fb:
32:14:51:21:d7:34:c1:dd:5b:96:4a:59:c3:0a:a9:
47:e1:f2:98:ba:95:78:9a:30:eb:f2:25:59:1b:11:
b9:65:12:86:14:b5:8e:84:d7:91:da:97:fd:a7:57:
54:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6F:20:DA:B4:6D:98:2C:96:D5:1A:F7:16:D1:7A:55:4E:44:D2:3B
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d6:51:0a:82:b0:73:8d:86:90:6c:ee:42:0f:01:c4:8a:36:
ee:0e:7c:ea:20:9b:14:7a:7a:a2:b7:26:32:78:4a:d9:12:e3:
33:29:ba:80:e7:60:fd:71:57:fb:c9:42:91:a4:9f:a4:28:1f:
d6:59:d0:12:bb:18:b0:cd:b9:2a:93:ac:63:7e:fe:ef:61:1b:
74:3b:49:d2:52:e0:40:b5:34:c8:a4:4e:5b:81:75:3e:ca:fa:
6d:0a:d2:bf:a0:40:00:70:6f:56:0b:15:fd:08:d2:8d:de:07:
9b:9b:e8:cc:f4:cb:a9:b7:84:33:a5:68:03:b8:8d:1e:02:db:
95:a0:1e:d7:73:f7:fb:37:28:8a:de:60:d9:ed:98:8f:3f:8c:
2e:56:8d:01:09:55:ee:b2:37:80:dc:ff:19:95:8b:c8:aa:cc:
f8:10:6e:bc:47:c4:68:03:97:c4:99:63:f7:be:68:a2:04:84:
62:46:aa:b4:96:d4:71:60:82:42:25:38:19:cf:16:72:0b:6d:
96:06:5f:23:e0:4d:0e:0e:5a:e4:3a:09:65:60:90:18:2f:39:
d6:1f:e4:3c:3e:a5:ef:d1:60:3b:23:a4:d2:6c:a3:d2:6d:ea:
b7:4c:08:a8:71:04:37:aa:7f:9a:f4:99:19:94:7b:1d:32:28:
fa:cc:3b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:27:54 2026 by rpki-client