Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json)
Hash identifier: d4AubjLzqFh6qgQmlcnhtMyiE4Ewn8dOzpp15Vo9lBg=
Subject key identifier: E2:E8:A1:83:7E:90:39:D7:6D:69:5E:2C:71:19:95:10:DD:4D:88:A0
Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01
Certificate serial: 019D371B2AC0813B61DE66432629D131C3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
Manifest number: 0DB2
Signing time: Sun 29 Mar 2026 01:00:20 +0000
Manifest this update: Sun 29 Mar 2026 01:00:20 +0000
Manifest next update: Mon 30 Mar 2026 01:00:20 +0000
Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: /qR67UsHLVyakaiJ+wu7KDGqrgMRxbh826gxedT+n0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:2a:c0:81:3b:61:de:66:43:26:29:d1:31:c3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01
Validity
Not Before: Mar 29 01:00:20 2026 GMT
Not After : Mar 30 01:00:20 2026 GMT
Subject: CN=e2e8a1837e9039d76d695e2c71199510dd4d88a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:74:49:0c:14:19:20:d2:88:83:8f:b6:14:52:
f5:c4:d7:98:80:cd:36:e0:b3:5b:30:1a:d8:3a:9a:
a3:4e:28:38:e0:15:78:60:de:83:a5:0a:75:56:b8:
ec:a5:fd:57:9e:d5:ee:dd:70:4f:0a:30:37:8a:51:
93:49:4e:59:39:bf:ea:8b:c9:6b:88:c8:99:2b:45:
2b:d4:76:86:f9:d7:8b:73:22:f8:d6:ac:7e:c0:21:
e7:25:9e:58:8a:08:d2:49:39:bc:99:d6:31:10:d6:
9a:c9:3f:a0:ed:a7:6f:bc:a6:15:ec:23:73:19:82:
1f:70:b3:68:0e:6e:2e:b5:e2:ec:e1:8b:fa:ee:a4:
13:06:0f:dd:ac:a2:45:84:a0:6c:fc:a6:31:82:11:
09:e2:c5:d7:d0:5b:62:d5:02:f3:bb:0c:a7:40:01:
fb:f7:31:7c:03:e1:97:c6:4a:13:c2:fd:6d:a6:3b:
38:f0:2d:47:42:75:5e:e6:f6:99:0c:09:57:7d:db:
01:dc:64:fc:ab:f9:14:67:74:d7:ae:b8:a4:24:81:
dc:19:81:15:6e:11:7a:17:74:41:24:d7:3e:f5:cb:
cc:06:74:b8:ed:95:86:74:59:c4:3e:ca:e1:a9:be:
33:64:ae:6b:23:c0:2e:39:41:9a:a0:00:a6:11:82:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E8:A1:83:7E:90:39:D7:6D:69:5E:2C:71:19:95:10:DD:4D:88:A0
X509v3 Authority Key Identifier:
keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:23:f1:2e:a6:39:4a:bd:ec:6a:b0:01:f6:91:8e:bf:1c:d9:
a8:90:a7:b4:68:48:72:de:9b:e3:e7:37:33:7f:c6:12:18:e6:
c2:03:3f:1e:cb:f4:b5:20:76:ec:17:c0:9c:e1:10:83:c6:e1:
50:27:da:58:84:c5:e7:a5:68:f4:9b:62:d3:f5:b4:2b:07:eb:
0c:d4:b6:4b:a7:8f:8d:14:b5:eb:41:50:ed:dc:ef:8d:43:91:
72:40:47:ec:a8:65:60:d9:4e:3b:fd:c1:32:54:d7:86:a7:19:
c9:81:9d:c1:eb:b6:d2:7e:c1:a7:3b:55:b8:b7:c8:5e:0a:e8:
ed:b5:00:22:eb:36:47:d0:49:d9:dd:ab:6c:3b:b5:9f:ac:91:
4e:7e:a0:5b:ea:d2:52:46:db:15:c7:d5:07:ff:36:9b:d3:04:
ab:82:2e:d6:8c:36:f9:65:b0:cc:4e:2e:1f:ab:1e:46:66:5c:
43:3e:96:43:d3:01:a4:c3:4a:1d:cb:8c:5f:b0:99:42:1f:a2:
a7:0d:43:6b:93:44:92:dc:bc:38:0e:16:0d:3f:9a:1c:1b:5a:
98:58:e5:ae:d7:bc:ba:7c:72:3c:ca:fd:6d:e7:3e:d4:fd:c3:
1c:3c:23:1d:69:f9:13:ff:89:f5:b7:2c:9f:b8:5a:82:56:ba:
c4:82:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:38 2026 by rpki-client