Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
File: O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft (raw, json)
Hash identifier: 8kw32LAKNASe96yexsLjQxZAUlIjdmu4AOvhidDP8no=
Subject key identifier: D2:01:A7:95:73:4A:DE:46:AD:9E:38:55:34:0C:84:21:B6:30:C4:68
Authority key identifier: 3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
Certificate issuer: /CN=3b55e7feb907137299f5792c36395efba9b34b62
Certificate serial: 019D371B3A7BAA71140ABA1FA1C61E396FF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
Manifest number: 1135
Signing time: Sun 29 Mar 2026 01:00:24 +0000
Manifest this update: Sun 29 Mar 2026 01:00:24 +0000
Manifest next update: Mon 30 Mar 2026 01:00:24 +0000
Files and hashes: 1: O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl (hash: q14UcOLBgca1yuHh8TTLWYUpsmEAR4L1aqlEHeE//70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:3a:7b:aa:71:14:0a:ba:1f:a1:c6:1e:39:6f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b55e7feb907137299f5792c36395efba9b34b62
Validity
Not Before: Mar 29 01:00:24 2026 GMT
Not After : Mar 30 01:00:24 2026 GMT
Subject: CN=d201a795734ade46ad9e3855340c8421b630c468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:cc:83:6d:0f:8f:32:d0:8d:d4:17:7e:98:
ae:96:23:65:be:80:82:72:26:6b:4f:f3:d0:cd:01:
d4:b7:8e:67:8b:a2:81:d9:4f:de:90:15:9f:65:d2:
21:d8:93:3f:c5:d7:ca:bf:94:89:13:b0:9c:14:30:
36:a0:e3:56:c9:0c:c5:2b:96:65:2f:96:1e:02:80:
d4:91:1f:d5:a8:a5:2c:0b:75:40:f1:c4:33:ed:14:
7b:5a:13:25:20:b7:29:6a:15:05:0b:87:a3:d9:33:
36:de:56:2c:18:f5:26:d2:84:0b:78:58:5f:1f:2d:
95:fd:13:52:59:ab:d7:04:a3:fc:06:6e:d4:f1:13:
bc:26:55:0b:9c:8b:48:0f:6c:96:15:23:5b:af:a9:
3b:6b:3f:95:59:7b:9b:90:4c:4b:f0:9b:42:19:ef:
e2:2c:31:75:96:35:90:85:ab:d0:9f:8d:55:7d:f2:
bb:f3:aa:cb:54:47:91:1d:34:bd:90:78:46:05:83:
ee:82:de:22:a3:d6:3a:aa:81:fd:2c:f6:37:7a:70:
d0:0a:36:1c:0e:ab:52:2d:c3:89:3d:b4:82:0a:5b:
3a:42:e1:02:2f:c3:03:bc:80:9a:9b:b3:43:f9:46:
77:e3:04:8b:f6:ef:2e:61:a1:83:73:b2:a4:66:5d:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:01:A7:95:73:4A:DE:46:AD:9E:38:55:34:0C:84:21:B6:30:C4:68
X509v3 Authority Key Identifier:
keyid:3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:51:03:84:91:27:fc:c5:95:ae:6c:92:c6:fc:98:43:a8:c5:
eb:9d:c8:be:1c:ae:20:d1:ac:98:62:92:6d:a0:69:50:86:2d:
4e:44:5c:ba:63:72:ac:7b:c7:d6:f9:80:fe:51:b6:dd:d6:0d:
41:69:40:65:8c:be:83:32:ba:8f:53:34:b9:c0:7c:97:f0:c7:
03:14:d5:cb:b2:c9:a4:6b:66:e8:8c:12:dd:20:bf:87:8b:e6:
25:05:e5:f7:8c:12:f6:36:30:9e:db:e4:a2:72:1d:13:21:fe:
53:72:4b:81:b9:7a:86:a8:ba:6d:61:ad:e8:4e:cf:91:6a:f3:
52:d1:30:71:e3:ca:51:1e:3f:85:ab:a8:6f:da:f5:3c:94:04:
8d:94:68:c4:16:64:99:22:9d:4f:eb:93:15:1d:6e:df:72:5d:
a1:36:b5:3f:05:d9:86:4c:da:cf:76:a9:7f:ef:bf:88:97:0e:
4b:49:ce:55:67:ba:72:09:5b:47:97:1c:7f:78:b1:5d:1d:b7:
ee:1b:39:c6:4a:c5:aa:67:a2:55:4b:85:39:d6:7c:5d:40:45:
27:54:22:5f:5f:40:2e:e3:62:c6:e6:a2:36:8e:21:54:18:f7:
50:13:22:29:82:dc:72:43:98:aa:4c:32:a3:37:be:79:a2:f1:
50:05:0c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:24 2026 by rpki-client