Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
File: oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft (raw, json)
Hash identifier: AvdbyvZFmJO3npOwl87/2ByDhn/YO0DX8Jg1BwHTNIA=
Subject key identifier: EF:75:02:D4:43:6E:4E:4C:82:64:92:CE:72:20:F5:36:D7:29:BA:F7
Authority key identifier: A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
Certificate issuer: /CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Certificate serial: 019D37C00808304B27AFF0A4953ACFDA94A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:00:24 +0000
Manifest this update: Sun 29 Mar 2026 04:00:24 +0000
Manifest next update: Mon 30 Mar 2026 04:00:24 +0000
Files and hashes: 1: oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl (hash: j7zjMUETEVXHQEomdTLSJkFByPpCl+dV+22vLBy0pY4=)
2: qlUMTY8f9xMZJf_wYNKsX0Jnm9o.roa (hash: 6TBYCzPo1M2XR2SlsB1vR5t4Ago4gsLphNAfezL8f1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:08:08:30:4b:27:af:f0:a4:95:3a:cf:da:94:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01746cf6bbdc8bd5666f306811bdffd216b1aa6
Validity
Not Before: Mar 29 04:00:24 2026 GMT
Not After : Mar 30 04:00:24 2026 GMT
Subject: CN=ef7502d4436e4e4c826492ce7220f536d729baf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:c2:76:32:94:05:e9:77:e8:58:0f:1b:6c:
70:6b:5a:ba:c2:92:85:31:d1:ec:97:64:6d:8a:b3:
c1:56:56:c7:1c:7f:17:d8:6f:79:c0:48:6a:b4:50:
7f:02:4a:6a:06:85:a7:48:2c:00:99:3e:05:9f:c9:
dd:be:99:5a:ad:18:bd:95:7a:00:f7:c0:e0:68:8a:
6c:b0:2a:68:46:6a:4f:3e:58:16:b7:4f:50:26:ae:
b9:30:f8:f8:34:55:1b:7a:4b:1f:4d:c3:3a:3d:d9:
d6:b3:ef:f9:04:71:66:01:ce:c1:71:38:48:a1:7b:
34:c0:db:8f:42:90:13:af:ab:93:7c:b4:ad:cd:91:
50:d5:76:5a:b2:21:9b:21:bc:cb:a7:eb:2f:f7:37:
c3:bb:4d:23:5e:90:5b:4a:33:1f:68:e7:8d:1d:80:
a1:7d:61:2f:73:13:04:89:bd:58:af:e8:1c:ae:9f:
e8:6a:fe:ae:17:c7:c2:33:d1:19:a5:a2:fb:55:b4:
59:dc:53:57:0c:00:80:3c:c1:5a:15:98:c7:c3:0b:
0c:8b:2d:5b:e2:04:0a:4c:98:5e:69:1d:6c:db:8f:
47:a4:ef:d4:d1:be:92:d4:d7:49:1b:11:aa:32:9d:
52:9b:6e:da:83:40:10:25:ab:bb:ed:43:3f:4c:e9:
b0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:75:02:D4:43:6E:4E:4C:82:64:92:CE:72:20:F5:36:D7:29:BA:F7
X509v3 Authority Key Identifier:
keyid:A0:17:46:CF:6B:BD:C8:BD:56:66:F3:06:81:1B:DF:FD:21:6B:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBdGz2u9yL1WZvMGgRvf_SFrGqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a764ce-12ae-41b5-81b6-02aba5d1b3a4/1/oBdGz2u9yL1WZvMGgRvf_SFrGqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:61:bf:43:86:37:ec:d5:fd:96:87:57:56:0e:e1:e2:2c:3d:
80:37:e4:bf:08:8d:d0:21:08:15:d7:85:15:2f:96:e7:99:a3:
45:83:bf:12:7d:70:e1:65:75:da:9d:23:b3:67:0a:7b:b5:7e:
37:b0:36:17:a3:a5:cc:c7:71:ea:7f:e6:73:58:7a:d4:3f:f6:
a9:9e:29:ab:3e:87:45:a2:6f:60:a8:49:69:50:84:86:71:ae:
6c:82:b7:f1:20:cf:af:62:d0:9a:96:18:e3:59:a0:c0:0c:e1:
27:2b:f3:1a:b4:20:27:07:50:d2:40:d4:15:70:8e:69:bb:a8:
a1:b9:4b:ef:6a:79:ea:8a:3d:c8:1c:7b:99:6c:9e:a9:ff:69:
c8:c2:8f:30:6d:0e:7a:f1:c0:92:73:ff:ec:05:20:8e:5a:02:
5d:5a:d2:47:10:89:f4:1d:1f:4e:ee:fd:c0:3e:1f:32:1e:3b:
29:19:ad:3b:77:bd:04:f9:61:ce:46:25:30:12:71:6c:e3:da:
3f:e9:14:27:57:a7:73:ab:6c:fd:c7:3d:7c:00:79:02:28:bf:
ab:c2:51:fd:5e:e4:ae:91:82:cb:f0:aa:b3:e6:5e:de:68:99:
7e:aa:8d:ec:2d:9d:4f:85:3b:91:1a:ac:b2:3a:1c:7d:4c:5c:
e0:ed:57:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:09 2026 by rpki-client