Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/x5bOarhccn-dyUh3amz9NHFBMQE.mft
File: x5bOarhccn-dyUh3amz9NHFBMQE.mft (raw, json)
Hash identifier: vg4Ji6wtkF+82rE4+k75zAEjTU1KRZxerY6mNFKw6FE=
Subject key identifier: 0C:BC:61:7A:41:56:F4:66:DC:7E:06:31:89:10:14:A1:F8:C6:94:D3
Authority key identifier: C7:96:CE:6A:B8:5C:72:7F:9D:C9:48:77:6A:6C:FD:34:71:41:31:01
Certificate issuer: /CN=c796ce6ab85c727f9dc948776a6cfd3471413101
Certificate serial: 019D3909CC1003A9B8A72009B53DFC5168A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5bOarhccn-dyUh3amz9NHFBMQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/x5bOarhccn-dyUh3amz9NHFBMQE.mft
Manifest number: 016D
Signing time: Sun 29 Mar 2026 10:00:36 +0000
Manifest this update: Sun 29 Mar 2026 10:00:36 +0000
Manifest next update: Mon 30 Mar 2026 10:00:36 +0000
Files and hashes: 1: x5bOarhccn-dyUh3amz9NHFBMQE.crl (hash: yl8uYi4+Mgh1CbAGtQ1oOPk80vj3WyZnEZ6TCA2Z1QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/x5bOarhccn-dyUh3amz9NHFBMQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/x5bOarhccn-dyUh3amz9NHFBMQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x5bOarhccn-dyUh3amz9NHFBMQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:cc:10:03:a9:b8:a7:20:09:b5:3d:fc:51:68:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c796ce6ab85c727f9dc948776a6cfd3471413101
Validity
Not Before: Mar 29 10:00:36 2026 GMT
Not After : Mar 30 10:00:36 2026 GMT
Subject: CN=0cbc617a4156f466dc7e0631891014a1f8c694d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:06:a1:d6:69:4b:9f:ea:9a:e1:5c:65:42:
37:b8:20:61:04:d4:0d:08:5d:8a:47:12:dd:d4:ff:
4e:cf:37:89:e5:ec:a3:af:2e:80:00:00:8e:62:8a:
f9:8a:1c:15:f6:83:8d:6f:f8:c4:4b:72:cf:5a:06:
69:21:71:95:19:7a:95:58:f7:0c:69:72:aa:e8:b2:
09:25:19:9d:44:09:29:5a:60:52:4a:84:9a:c3:d2:
22:c8:9f:cd:04:b9:67:fe:ca:b1:b4:8c:0c:49:d6:
ff:81:93:21:de:58:16:b0:c5:7d:4e:76:3f:ba:2a:
e4:63:71:00:8c:a8:ab:31:0c:3a:c0:d4:43:d4:47:
4e:2d:d3:db:7b:d2:ba:a3:02:f7:62:ba:f3:62:fb:
b5:5d:0c:f9:b1:bf:b2:c5:05:68:13:76:44:2e:83:
a0:90:02:81:d6:ef:55:1f:4a:6e:b9:50:57:99:99:
89:f1:3d:f0:de:56:f6:c3:f8:69:10:14:83:80:5f:
da:5a:c2:e2:89:89:8e:f7:03:e3:fb:34:d4:91:2f:
bd:5a:78:3c:1c:9a:c2:a8:5c:34:65:97:4b:a9:3e:
bb:bf:0a:f5:44:55:5b:8d:29:bb:fc:9e:01:ce:bc:
1a:84:0e:bf:0a:d6:3c:e2:3a:bf:7c:41:e8:a9:89:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BC:61:7A:41:56:F4:66:DC:7E:06:31:89:10:14:A1:F8:C6:94:D3
X509v3 Authority Key Identifier:
keyid:C7:96:CE:6A:B8:5C:72:7F:9D:C9:48:77:6A:6C:FD:34:71:41:31:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5bOarhccn-dyUh3amz9NHFBMQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/x5bOarhccn-dyUh3amz9NHFBMQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3a9210-eac9-4893-8ffc-9a6af617519e/1/x5bOarhccn-dyUh3amz9NHFBMQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:17:80:0a:49:ff:ac:5b:e2:2d:5f:ee:f6:d1:41:4c:3a:c8:
46:37:6c:eb:4c:2b:93:46:71:90:f9:a7:8c:3c:13:0f:97:6d:
7b:95:28:9b:d6:47:46:77:71:3f:22:65:8b:e3:df:0e:30:fe:
cc:c7:52:9c:b2:97:57:f0:3f:67:63:5c:65:de:3e:a0:73:52:
94:7e:26:9c:77:c1:3e:cf:0a:9c:2e:6c:7a:8f:c7:a0:81:50:
ed:89:f5:30:e6:da:23:f7:da:ac:82:4a:62:d4:d5:a2:7c:8b:
a2:c0:58:ee:96:26:67:bc:ea:00:3f:e2:53:0c:c0:db:46:72:
7e:8a:a6:06:69:9e:1a:c3:60:07:82:fc:00:9f:f8:ee:27:47:
cc:0b:18:c3:c2:23:07:a9:2d:ba:90:31:31:89:9f:83:bb:2e:
2f:bb:1c:b1:47:cb:de:13:8b:5b:cc:a9:10:39:0f:36:69:df:
f6:80:4d:59:b1:1a:34:0f:a7:89:27:02:fb:06:f8:94:ef:b7:
43:3e:57:96:1a:83:c5:ce:b1:20:e3:5c:fd:26:42:1b:18:59:
39:36:05:57:ce:14:44:1b:d7:4b:58:c9:19:4b:f0:3e:c3:d9:
56:59:7e:b0:ce:8b:57:ca:c8:2a:fc:24:89:42:39:8c:03:ed:
a4:68:67:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:49 2026 by rpki-client