Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier: MpfyBXbjW2mmm/TQbbUgW+XU2zf0Ah8ebuhWv0TR0Lo=
Subject key identifier: AE:A8:36:39:BE:FA:7B:1E:3F:B0:BE:43:41:AB:40:AE:7D:CA:EB:C5
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial: 019D29297035E644FE288EFCC09DF9241AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number: 0596
Signing time: Thu 26 Mar 2026 08:01:14 +0000
Manifest this update: Thu 26 Mar 2026 08:01:14 +0000
Manifest next update: Fri 27 Mar 2026 08:01:14 +0000
Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: zuvAjhzwgGrs7SKyj2Xh2CVGjWYJbk1zRCRBYAyzYBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:70:35:e6:44:fe:28:8e:fc:c0:9d:f9:24:1a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
Validity
Not Before: Mar 26 08:01:14 2026 GMT
Not After : Mar 27 08:01:14 2026 GMT
Subject: CN=aea83639befa7b1e3fb0be4341ab40ae7dcaebc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:c4:4e:7b:cf:54:95:da:13:b6:8f:5f:af:
2d:9f:b1:98:fa:bb:ff:97:fb:94:d4:1e:f0:fa:5b:
c9:1b:bc:66:96:8c:3e:4b:b9:22:e0:da:1d:dc:12:
b5:4e:6c:92:e4:e2:db:a4:44:f2:2b:bd:b3:59:cf:
e0:70:58:1b:ad:39:b0:7e:0f:c0:65:51:71:6a:88:
d2:8f:ad:46:2a:d4:62:12:48:93:d7:ed:f8:07:81:
6c:81:cc:64:d0:cc:0f:64:2e:51:a8:17:fe:27:67:
6e:87:16:ea:55:47:b1:82:e9:63:0e:84:10:f5:0a:
13:72:1c:17:c3:08:cc:12:c6:82:3d:01:fe:1d:e5:
3b:64:b2:1e:0e:4b:6d:ea:ed:f6:ae:a2:b1:f7:98:
8c:47:41:db:6a:1f:9d:7b:8b:64:4f:cd:45:1f:fd:
3c:ac:3f:2f:db:42:54:8d:cb:1c:a3:ba:7f:bc:6e:
12:62:49:60:6b:f0:b8:25:a9:b5:dc:a2:be:d7:fd:
3b:79:bf:76:1c:6b:74:0d:1d:ff:ba:a2:40:e9:2f:
10:da:ca:7a:a4:df:e4:f9:5c:b6:32:39:ba:78:fc:
33:8f:b8:7c:5f:1f:94:af:a8:4e:ea:08:e7:f1:dd:
e0:7f:ab:ba:3f:2f:be:63:b8:37:73:11:ba:f5:b4:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A8:36:39:BE:FA:7B:1E:3F:B0:BE:43:41:AB:40:AE:7D:CA:EB:C5
X509v3 Authority Key Identifier:
keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a8:d2:cf:02:36:45:94:ec:98:7d:ef:c1:f4:6e:d1:68:88:
dd:0d:87:64:30:b5:6a:f5:24:48:f7:67:68:78:64:c6:e7:d3:
cd:5f:50:f7:47:8d:50:88:00:70:ef:df:67:90:35:b5:df:be:
70:4e:d1:78:65:4f:d3:43:41:de:2d:9f:21:0e:15:56:09:60:
2c:f7:28:ea:35:52:51:0e:26:74:29:92:31:a8:4d:94:db:95:
c9:e9:c0:51:b8:95:91:1b:df:dc:5f:b4:b9:c7:6a:c3:f0:e2:
5a:c6:94:d1:a3:ad:69:37:1d:7d:3d:4d:00:1c:b8:8e:44:fb:
61:08:8c:c7:87:69:ce:0c:e1:26:89:3f:bf:26:7c:66:ae:7c:
43:d4:da:34:ae:cf:77:f6:b3:e1:59:12:2e:49:ad:2a:5f:29:
aa:92:8a:17:cb:72:7b:70:7a:73:7d:da:4e:e1:07:02:cc:63:
af:63:59:a7:55:23:a5:6e:6b:50:9a:df:3c:94:ea:a9:1e:ea:
ca:fc:e5:ee:c7:95:c1:6c:42:e3:fb:da:cb:b9:6b:17:f3:62:
c2:2f:79:cc:2d:fe:b1:46:a8:66:e6:8c:2b:4a:4e:e0:14:e5:
80:f4:fd:e8:53:53:59:1e:52:8f:30:0e:b0:b9:55:5e:ba:37:
8c:cb:d5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:51 2026 by rpki-client