Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: +scz85EuU/2wef58B9D6waMhCh0kCgGvcZzGmfM2R5s=
Subject key identifier: B7:5E:61:5A:EB:22:2B:AE:9D:EE:6A:99:DC:F6:26:9B:3D:85:FA:E2
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 019D270451A94C1ABAACBB97ED25FF92E36E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:27 +0000
Manifest this update: Wed 25 Mar 2026 22:01:27 +0000
Manifest next update: Thu 26 Mar 2026 22:01:27 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: FqfJK6LOTkgwm6h9Y6vUl3nHpLIrb7d6YskRK+/FpW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:51:a9:4c:1a:ba:ac:bb:97:ed:25:ff:92:e3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Mar 25 22:01:27 2026 GMT
Not After : Mar 26 22:01:27 2026 GMT
Subject: CN=b75e615aeb222bae9dee6a99dcf6269b3d85fae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:f2:d5:e8:03:87:20:a2:8e:43:69:43:3b:
06:9f:23:3d:05:0b:fa:25:70:5f:0b:59:46:10:25:
d8:e3:8d:96:30:6f:38:57:aa:89:6b:e9:3a:9c:4f:
f1:ea:24:13:12:53:a6:1f:75:ce:ba:8d:ce:ae:1d:
65:19:b8:18:2d:62:78:a6:f3:83:0a:43:af:2a:b9:
c8:d6:e4:88:66:4f:77:1a:72:61:02:8b:cb:ac:ed:
1d:8c:e8:4d:fb:05:86:59:05:21:d5:9f:65:fe:89:
27:a6:cd:aa:c3:da:bc:25:0e:4f:23:cb:5a:5b:44:
47:0b:65:f4:18:32:47:6c:80:59:cb:09:33:4a:2d:
5f:ae:24:e5:0c:5a:4a:3f:c6:ff:53:c7:60:4b:4a:
be:b9:60:7d:b5:fb:28:ea:02:90:3f:20:0b:dc:3d:
a3:72:6b:6b:97:0d:d2:94:3c:e0:10:c9:3d:ab:44:
13:36:31:45:8e:7f:e1:50:5b:8e:80:61:c2:66:69:
e1:e1:fc:0a:db:36:a0:3e:ca:e0:5d:fe:2d:3d:9c:
2b:f7:f1:63:ed:f2:04:15:0c:f7:86:4a:90:96:81:
8e:15:fa:64:a5:0c:0c:64:59:09:92:1e:ef:02:d0:
96:38:2f:3d:7a:65:49:ca:3d:27:44:43:33:d9:ef:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5E:61:5A:EB:22:2B:AE:9D:EE:6A:99:DC:F6:26:9B:3D:85:FA:E2
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2d:7c:24:26:b3:94:80:00:12:71:8a:18:56:83:ed:27:30:
6e:d8:98:a9:4c:53:23:9c:aa:f6:eb:9b:6f:03:4c:60:e0:94:
ab:3f:8e:db:36:9d:f3:fe:b1:66:aa:36:e8:a7:58:ab:36:5a:
42:19:d3:5d:e4:ee:ca:e9:c5:46:53:0d:3d:bc:fb:0d:fd:1f:
07:91:14:76:5d:a8:dc:0c:f2:4b:c4:15:b0:7c:22:93:c8:64:
d2:08:83:5d:87:a6:3a:d0:54:a8:0b:90:86:b7:e1:0c:d7:3d:
fa:bd:85:38:e1:53:00:cc:9b:08:30:e9:0b:a5:fe:6b:ab:06:
27:d7:52:bd:58:34:78:40:54:ff:75:ab:aa:3b:47:90:26:a5:
94:63:c4:7a:83:ea:0b:10:08:8a:53:72:87:3a:06:83:16:9f:
9b:e6:65:77:87:09:2c:96:48:96:ed:b5:35:70:37:05:42:01:
b1:40:01:9b:d9:c6:92:35:bd:b7:c0:a7:a3:66:88:9f:d9:97:
1a:e2:3a:90:00:0a:90:ce:46:c7:02:fc:b6:f8:84:0a:ed:34:
bb:5b:db:12:19:15:ea:64:69:6a:0e:e9:d1:1a:22:12:54:ee:
59:8b:2e:30:c7:e1:68:a8:85:cf:3b:7b:3d:45:10:cb:de:57:
65:42:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:10 2026 by rpki-client