Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier: RHwUtNHswAdJrK62PHPPVDAviNoFlZtSfV2niXni2N4=
Subject key identifier: 01:23:F4:2F:73:96:29:93:21:A4:44:73:DF:84:F5:37:7D:16:EC:B4
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial: 019D333EFCDF154EFA71E956C685344EB77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number: 1889
Signing time: Sat 28 Mar 2026 07:00:59 +0000
Manifest this update: Sat 28 Mar 2026 07:00:59 +0000
Manifest next update: Sun 29 Mar 2026 07:00:59 +0000
Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: NfKfjvTIE+38/ui3/VwfeBoBh9HGsJ33lwl5Csk+lyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:fc:df:15:4e:fa:71:e9:56:c6:85:34:4e:b7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Validity
Not Before: Mar 28 07:00:59 2026 GMT
Not After : Mar 29 07:00:59 2026 GMT
Subject: CN=0123f42f7396299321a44473df84f5377d16ecb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:dc:f9:cf:f4:72:59:d8:27:a6:22:d8:de:
8d:91:03:34:eb:59:5c:fe:05:97:da:96:bd:9d:9b:
a2:6b:7b:ce:8b:d0:37:a1:39:d8:7f:c3:6e:48:87:
ef:4a:e0:80:db:22:a2:b9:90:59:19:e9:68:7b:db:
2b:46:3d:28:27:99:a8:d1:d7:2c:32:c1:38:d8:f7:
44:5b:05:ac:82:4d:be:87:ac:00:14:04:dd:53:b4:
69:a3:bb:bb:31:61:6c:61:ae:06:aa:5f:8f:88:23:
28:48:ac:39:fc:17:41:50:f8:04:86:0d:08:94:b9:
d9:d2:e1:a5:64:9c:f8:64:f5:71:d1:fe:97:09:eb:
5b:aa:2a:b3:e9:fe:82:4d:48:01:f9:af:4c:ef:85:
59:c4:3c:3d:b7:5d:a8:b2:7d:02:52:19:4b:79:4e:
d1:c2:47:64:f1:76:c0:a8:c7:27:e9:e2:6c:32:8c:
3f:52:a3:86:0a:76:37:7d:2e:4c:93:17:70:3d:14:
5e:da:d5:2e:e6:0e:b8:e5:6a:47:ea:39:ab:ce:4d:
3a:09:95:5b:41:9a:40:35:44:bb:ef:7f:82:04:fa:
f3:38:55:e0:a0:c2:61:42:0e:ae:03:f9:60:0b:28:
32:ca:8c:cd:ac:ca:66:07:c9:c1:80:74:08:96:e0:
f2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:23:F4:2F:73:96:29:93:21:A4:44:73:DF:84:F5:37:7D:16:EC:B4
X509v3 Authority Key Identifier:
keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:53:d3:c1:da:25:d5:ee:53:64:81:07:6f:a3:c0:79:9a:17:
92:fd:4c:ec:9d:43:9f:b3:34:0f:67:9c:ee:55:42:f2:ef:94:
f1:b7:44:40:f5:89:57:cd:fb:40:38:15:de:4b:2b:6f:64:6c:
a0:35:82:4a:6c:27:9f:0b:05:1b:65:d9:cf:5c:e2:9b:2c:c5:
07:78:36:08:4a:ce:2f:61:6a:cf:bd:79:8d:de:81:20:2d:c2:
5d:c1:fa:58:b8:af:5c:df:89:24:79:9f:f1:5c:54:b5:6f:8b:
ac:27:8d:f8:04:36:01:33:06:d6:a0:f2:a3:c4:0f:b0:c4:2f:
35:d7:d8:62:81:56:e3:35:a8:0e:ee:ab:db:cb:fc:a9:03:e1:
5d:de:91:bd:97:74:e0:56:41:d6:d4:ca:7b:15:39:8e:0c:d8:
cc:1e:46:e1:05:f1:64:4b:2c:79:52:a8:65:e3:aa:6e:f3:4c:
b6:9f:e9:72:0b:48:0b:56:87:28:fe:ee:d5:7d:67:87:95:88:
e3:85:21:e6:8c:9f:21:8a:53:fd:a9:dc:e6:a7:95:1e:80:ff:
f4:d2:bb:38:51:48:c0:0d:e4:23:72:3e:d7:63:10:2d:64:5f:
e5:7e:12:62:d8:bc:7c:b0:e8:84:99:76:58:af:d5:b7:41:e0:
0a:0b:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:08:06 2026 by rpki-client