Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft (raw, json)
Hash identifier: t22ho2OwJ6K+rN9U6lBeejCWv5V8Bm4yOLl3mN0Gkeo=
Subject key identifier: D3:D6:DC:E5:F4:B6:DB:C2:03:AB:D1:69:AB:9F:59:CE:16:48:B6:3C
Authority key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Certificate issuer: /CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Certificate serial: 019D389BDF2316C92D804D32E3AA8EBBD9E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
Manifest number: 11F5
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl (hash: 03lYgnjCF5KFWhf3h7XXc8EQnHVVbWBg/ZOrCdsqQsg=)
2: ZkxTmxBiQkgSo4ZJv_M7YhFQ0hQ.roa (hash: 2n/6N4Jbcs9rQ/9iwExbuGW4el4Ljo8UJZzO/3/a1NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:df:23:16:c9:2d:80:4d:32:e3:aa:8e:bb:d9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=d3d6dce5f4b6dbc203abd169ab9f59ce1648b63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:79:c1:83:4e:bb:bc:ce:98:ef:7d:b7:9f:65:
35:c7:15:6d:88:72:bf:92:29:c1:dd:04:23:89:93:
42:13:b5:01:d5:31:b3:dd:a2:9b:7a:6a:76:4e:1b:
38:95:ca:9b:70:40:be:8d:93:41:8f:0d:42:a7:5f:
59:55:f1:af:2d:31:ca:ca:49:2f:a6:b9:f8:6b:78:
01:da:9d:be:72:dd:42:d9:83:cf:22:e8:d9:3d:2f:
da:fa:6f:99:c6:c4:9a:6b:9d:03:aa:f5:ff:8a:97:
49:0a:1b:84:91:76:1b:90:71:ee:c3:28:b4:39:40:
f4:de:b6:89:90:da:8e:93:97:34:ef:58:38:66:a3:
d8:5c:8c:6e:4f:79:f6:0a:94:35:1e:44:69:73:41:
da:ed:f6:ac:e7:87:cd:fd:8b:0f:0e:8a:db:1e:cc:
2f:af:77:08:4e:aa:e9:40:56:55:1e:57:76:37:3d:
c2:31:38:34:2c:cf:02:de:a6:68:5a:0a:61:db:eb:
35:6a:88:1a:f6:d3:5e:38:dc:6c:25:9c:e2:a9:18:
62:b1:33:77:6d:1f:d8:75:e6:70:7c:0e:74:9e:cd:
58:aa:9e:93:90:ae:7b:9e:64:c8:06:e2:87:40:22:
b9:13:d4:ca:34:90:59:d4:f8:fa:c1:6d:6e:b1:6d:
d2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D6:DC:E5:F4:B6:DB:C2:03:AB:D1:69:AB:9F:59:CE:16:48:B6:3C
X509v3 Authority Key Identifier:
keyid:38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:92:4d:c2:c9:f1:a2:79:ac:5a:48:af:1e:44:14:cd:4c:95:
ac:23:98:20:c7:9f:b8:3d:df:33:57:82:fa:26:3d:d0:f5:a3:
90:c5:22:3c:26:3a:51:1a:78:53:ef:42:a2:8a:b9:e6:71:82:
c1:f1:f8:e2:05:ce:c7:52:d3:5d:d3:99:6e:67:47:1a:39:ed:
e3:07:42:4b:bd:90:bc:ca:63:b4:87:00:d8:80:2b:9a:c5:31:
d3:d9:b2:2a:c8:91:26:27:98:4e:6a:3c:c9:20:57:e0:db:b5:
93:91:da:23:9f:3e:67:8f:d6:31:1c:52:e7:c4:7e:e3:d8:fb:
fe:8e:89:f8:93:3f:d7:4c:64:12:82:78:57:49:3f:71:99:ca:
6c:e0:7f:39:08:50:e6:49:1e:fd:65:96:ee:4d:ee:57:9f:d8:
22:60:2c:44:a2:dc:73:69:d6:a2:21:38:06:63:d7:6e:3c:43:
2d:09:82:38:c3:9f:53:8e:ef:95:a3:58:ac:20:8a:56:6e:e6:
ab:16:53:3c:98:f0:20:2f:fc:af:97:69:f3:63:98:a9:7a:6d:
57:6d:79:df:99:cf:db:d4:9d:40:36:37:1b:3c:71:78:02:88:
4a:d1:83:b7:cd:e5:e8:b0:fe:e6:12:ec:90:e1:4d:2b:b2:3b:
9c:b8:73:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:47:01 2026 by rpki-client