Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
File: oyHD8vYVgRDoDpLioyIdaVwnp9g.mft (raw, json)
Hash identifier: xhm4i8B3AKF6cAG6sQaVVWm2MoJJXYrqmx0GbgGL8u4=
Subject key identifier: D6:4C:13:81:E7:AB:7B:52:3B:57:73:53:AB:C9:60:71:18:67:89:0B
Authority key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
Certificate issuer: /CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Certificate serial: 019D386694BD76D4C8ACE2988FD98B7C01CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
Manifest number: 1133
Signing time: Sun 29 Mar 2026 07:02:19 +0000
Manifest this update: Sun 29 Mar 2026 07:02:19 +0000
Manifest next update: Mon 30 Mar 2026 07:02:19 +0000
Files and hashes: 1: oyHD8vYVgRDoDpLioyIdaVwnp9g.crl (hash: JVzn0z2wk/pxDXvq3gP7kbCWv/PELhW6BzOFJDdcAGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:94:bd:76:d4:c8:ac:e2:98:8f:d9:8b:7c:01:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Validity
Not Before: Mar 29 07:02:19 2026 GMT
Not After : Mar 30 07:02:19 2026 GMT
Subject: CN=d64c1381e7ab7b523b577353abc960711867890b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:d7:7c:5a:9f:1f:ff:9b:b5:1c:33:b5:d2:
2c:e5:6c:27:31:69:23:14:5d:45:54:e2:f1:c5:2e:
07:bd:99:24:b4:c6:fe:a5:3f:50:d4:b0:b0:29:55:
b6:64:bd:19:15:ec:36:f6:e1:1a:2d:db:4e:f1:d2:
1d:6c:67:a7:ee:03:d7:c1:23:48:cc:ee:0e:fc:d4:
11:75:d5:36:9e:03:ba:4f:f1:30:d0:55:5e:a9:eb:
35:73:c6:13:65:d7:bb:2b:ec:99:25:aa:a1:76:7c:
8f:6f:63:5a:98:8d:12:5c:ef:41:60:4f:0a:74:90:
ce:ed:33:db:48:55:95:ce:59:29:a3:24:1e:02:18:
2b:92:f5:a3:13:d0:d3:0d:91:f6:06:1c:58:48:01:
f6:47:ad:73:80:91:a2:16:6b:c9:b3:bb:4f:a8:ad:
3e:0e:62:2f:92:15:66:58:ad:ba:4c:ee:93:57:97:
f8:1b:07:37:7e:d1:21:dc:cb:10:2c:5d:bb:c7:ca:
52:da:b2:15:06:7f:be:fe:05:99:2e:e5:d9:60:85:
c3:7a:02:e6:44:c0:20:f7:ce:2d:53:a8:90:d1:ee:
b1:74:45:d1:ec:6a:c6:4f:38:b3:c6:74:a7:b2:13:
6c:e3:39:f6:dc:36:09:5e:56:fc:9d:3f:ad:71:e4:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4C:13:81:E7:AB:7B:52:3B:57:73:53:AB:C9:60:71:18:67:89:0B
X509v3 Authority Key Identifier:
keyid:A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:67:71:4c:6f:c7:2c:ad:3e:6d:c6:0a:4c:06:a4:6a:89:c7:
ed:a3:ac:0b:72:ac:ef:e6:7d:c0:8b:7e:44:e1:2d:a0:b1:df:
01:1c:e2:5c:06:db:87:4e:58:5f:ea:a1:fa:a5:5f:18:48:c4:
56:e8:43:13:ba:8f:70:b6:7b:2f:5f:ac:bd:77:4c:af:1b:f1:
93:2e:c6:83:38:81:a1:d8:62:85:2e:64:48:7f:f2:f0:bd:07:
9f:5b:5e:17:ff:41:e4:cc:77:41:26:99:76:26:42:bc:20:2c:
3e:b7:f4:61:5f:ca:14:49:e6:5f:98:8e:0f:44:1f:9e:63:c2:
6a:ff:4b:47:90:12:8c:9d:9e:8d:fc:4c:36:c9:c3:c3:84:1c:
ef:bd:0b:ed:a8:20:d4:80:68:4e:07:40:ec:a6:60:41:d3:35:
bf:6c:dc:68:f9:25:58:45:d7:36:b4:6f:98:6f:0c:36:c9:e9:
d3:4f:bc:b4:18:0c:19:92:fc:b2:bf:75:de:d6:31:37:26:e9:
e7:f5:4b:3a:58:bb:ff:cd:eb:65:cf:dc:52:19:96:9c:4d:ea:
00:95:d9:70:b2:b2:01:0e:1f:f4:6a:45:f0:2c:a1:d7:12:ee:
6f:83:84:f3:cf:35:ec:ad:ad:65:a7:6e:39:91:7e:ed:7f:8d:
06:18:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:31 2026 by rpki-client