Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: 7WtsUdt9U9slW9I9sVtr2OqflmTxo8I4tnWvUWkGL5U=
Subject key identifier: D8:9E:88:40:DE:26:EB:9F:24:3C:D1:E9:8D:44:1B:0A:D3:1B:50:E3
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 019D37F7676F1CB6E7CDD84CB413F1040DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:53 +0000
Manifest this update: Sun 29 Mar 2026 05:00:53 +0000
Manifest next update: Mon 30 Mar 2026 05:00:53 +0000
Files and hashes: 1: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: GNwBScgUnsqumYJYFKH2fZ7Xlwz6sC7lBtKDnR3gt5k=)
2: XY5E_RelyGQ_x471R3yDmTVoDTk.roa (hash: eROWL67g5W2cGW9pnAdECfpL0HCLybLp8h6TDlEvGJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:67:6f:1c:b6:e7:cd:d8:4c:b4:13:f1:04:0d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Mar 29 05:00:53 2026 GMT
Not After : Mar 30 05:00:53 2026 GMT
Subject: CN=d89e8840de26eb9f243cd1e98d441b0ad31b50e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7d:41:e0:80:34:90:25:5a:79:f1:be:6e:2d:
9d:b3:0a:e8:fb:f3:2b:94:78:0a:1d:ed:f5:1b:50:
34:bd:c9:da:54:35:6d:87:2a:a9:ef:92:b7:a8:60:
7f:09:6a:6f:28:d3:46:40:8a:91:37:1a:46:d3:a9:
8e:57:c1:c2:03:2f:53:d5:e2:39:a2:e9:75:d7:9f:
e2:bb:66:c4:49:b3:03:3b:a2:62:2b:ee:b7:c8:8e:
1b:11:dd:db:c7:9e:49:66:22:af:89:7f:72:e4:5c:
6f:70:69:78:5c:ac:35:2d:b7:8a:95:47:0c:7b:82:
7b:c3:97:07:a7:69:8d:db:8c:67:bd:37:db:13:20:
2d:f6:99:3d:62:bc:c0:c3:42:0b:73:ff:8f:f0:88:
11:6c:54:81:2e:48:ae:30:38:2b:89:d2:03:26:1e:
cd:df:57:1e:78:d7:ab:54:21:04:c3:46:2c:12:09:
2e:06:ec:92:23:fe:69:07:ad:b4:80:a8:cc:af:55:
3e:06:9b:5f:f5:83:58:d0:6c:a3:54:a4:d9:a9:0b:
f4:b4:5b:f8:52:1d:bd:23:56:a7:c9:ea:90:6d:d2:
dd:f1:2a:c1:42:71:2b:c0:da:29:a1:f4:88:a7:c0:
81:8e:40:32:14:b6:77:e1:96:59:90:d6:1b:50:2c:
fb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9E:88:40:DE:26:EB:9F:24:3C:D1:E9:8D:44:1B:0A:D3:1B:50:E3
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cc:b3:23:fe:76:66:8e:fc:ce:09:39:a9:a6:8f:3a:db:30:
17:ef:61:f8:d8:70:d3:3c:5b:cd:34:2f:03:1d:a2:99:dd:a2:
13:0c:c4:37:65:75:b2:df:28:62:ba:15:b1:ed:cf:cf:65:7f:
06:a2:8d:c8:4b:f2:26:a8:62:4c:c4:f2:bc:2b:da:db:ff:19:
6b:d8:cd:63:53:be:41:ac:7d:d2:d1:64:5f:b5:3a:21:25:c3:
a6:40:61:61:c4:3f:f3:78:65:c4:f4:71:ed:d3:dd:48:21:fb:
86:9b:6a:db:e3:5b:43:94:47:60:04:2d:5a:7f:de:0d:e0:d9:
da:c8:67:c0:15:80:9f:4d:ec:03:f3:f2:83:c4:37:50:07:d7:
a8:98:d0:4c:7a:89:e0:b9:9f:c4:ec:31:69:f8:16:52:b2:9c:
2f:0d:d6:c9:52:d2:2d:03:3c:28:5f:ff:42:8c:59:4a:f5:70:
9f:a8:12:be:a6:aa:95:57:d7:b9:b6:06:19:e1:96:8b:f9:ce:
d6:c7:79:db:4d:6b:4d:4b:db:04:bd:4f:f5:dc:03:91:78:62:
71:99:ac:f8:aa:95:f5:5e:c2:a5:9b:25:68:3f:64:dc:15:04:
8d:6d:08:14:7d:10:fb:82:c9:62:ff:1f:4b:8c:e6:7b:8c:d9:
38:82:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:12 2026 by rpki-client