Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: c92iGX2mi/VWCFrtr4+rxWKp+nFw/pQ1zMUXHjnCpVs=
Subject key identifier: ED:C3:14:6D:B5:A8:93:5A:33:FA:64:AE:6A:73:87:AB:5B:6D:76:2D
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 019D3789B3C0A59E5D5457AF599CC2BB9453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 114D
Signing time: Sun 29 Mar 2026 03:01:04 +0000
Manifest this update: Sun 29 Mar 2026 03:01:04 +0000
Manifest next update: Mon 30 Mar 2026 03:01:04 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: HJ/TjJ+g/aOAzgnGEFuXySbBxHo20NryMqlAsioLvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b3:c0:a5:9e:5d:54:57:af:59:9c:c2:bb:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Mar 29 03:01:04 2026 GMT
Not After : Mar 30 03:01:04 2026 GMT
Subject: CN=edc3146db5a8935a33fa64ae6a7387ab5b6d762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:27:07:9e:33:03:d3:d2:ce:03:bb:e3:24:
f5:2f:a1:8c:68:d1:0c:87:1b:fd:75:d7:d7:c3:b1:
f1:ae:06:5e:79:d4:32:5d:9d:32:6f:f9:f8:95:7c:
06:b7:4f:90:47:9a:b1:20:71:5f:b1:af:45:38:f4:
28:36:9c:14:58:2e:14:19:df:b3:3e:a2:8e:1d:38:
2b:36:f8:8b:1a:9f:c9:3a:7b:bc:0b:53:cc:6a:9b:
5f:cd:de:1c:73:84:d6:05:fb:e1:39:81:e3:3c:f1:
02:8b:7b:8e:48:fa:cf:69:3e:8d:cd:5d:a9:b1:d6:
42:01:09:1a:5f:fc:d3:ab:9d:a7:d2:a7:8a:2b:8d:
cd:b6:54:29:a7:5a:d7:f0:5c:32:98:1f:59:97:ae:
45:c8:ea:ab:e3:6e:22:7f:53:12:2f:0a:59:1f:16:
68:4e:af:1d:04:69:a3:fd:fd:76:15:6b:9c:62:89:
9a:88:df:0c:83:36:43:39:84:1e:2b:c2:89:00:f5:
d8:89:60:01:9f:96:9a:83:0c:ab:54:99:09:8f:67:
54:8b:db:e3:52:04:dd:f7:b2:03:38:d9:fc:b5:ed:
34:cc:67:99:1d:27:00:f3:3b:39:44:5d:b4:80:ea:
4f:0c:96:39:d7:f0:9b:29:44:61:94:85:28:3a:e3:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C3:14:6D:B5:A8:93:5A:33:FA:64:AE:6A:73:87:AB:5B:6D:76:2D
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:90:d2:0d:18:92:cd:fc:13:83:80:7d:0a:57:f6:5a:be:f5:
02:04:5d:02:50:b4:e2:38:a4:53:9e:91:3d:97:8e:55:fd:6d:
c6:d2:d3:de:8f:fd:77:95:e5:31:86:79:67:cc:47:88:4e:2d:
3a:f9:e5:d6:73:55:b5:27:2e:56:d4:a3:dc:6e:28:2e:9b:d9:
e1:b7:d5:59:8c:fc:d2:0a:7a:a7:a3:0d:bf:02:4e:7e:f5:0c:
c1:83:73:31:66:06:36:9a:5a:8c:f8:56:2a:4f:36:9d:bc:8c:
67:8e:ee:1c:09:57:a8:6b:3c:07:d2:47:c8:b9:19:a7:f4:c2:
1f:f4:e7:ac:77:8a:9e:20:ad:71:47:18:87:fb:8d:3e:b1:da:
98:cc:d5:05:54:10:01:86:a5:43:39:1e:cd:87:fe:49:4b:5e:
25:ad:48:ee:51:00:2b:07:b7:c8:4b:b4:00:4e:fc:92:48:71:
d6:2c:f1:ec:1d:f4:74:40:93:e0:b0:81:da:45:b0:d4:1a:cf:
51:4f:92:c6:e7:25:11:21:4c:b4:9e:2a:62:49:f0:a9:bb:df:
e9:51:8f:ff:33:75:19:6d:06:38:17:f9:fa:12:76:41:46:41:
1c:10:93:45:fb:bf:29:e2:6f:25:09:df:e1:ca:be:8d:7c:5f:
f6:11:31:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03ibPApZ5dVFevWZzCu5RTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0
MzFiNjkwHhcNMjYwMzI5MDMwMTA0WhcNMjYwMzMwMDMwMTA0WjAzMTEwLwYDVQQD
EyhlZGMzMTQ2ZGI1YTg5MzVhMzNmYTY0YWU2YTczODdhYjViNmQ3NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZsnB54zA9PSzgO74yT1L6GMaNEM
hxv9ddfXw7HxrgZeedQyXZ0yb/n4lXwGt0+QR5qxIHFfsa9FOPQoNpwUWC4UGd+z
PqKOHTgrNviLGp/JOnu8C1PMaptfzd4cc4TWBfvhOYHjPPECi3uOSPrPaT6NzV2p
sdZCAQkaX/zTq52n0qeKK43NtlQpp1rX8FwymB9Zl65FyOqr424if1MSLwpZHxZo
Tq8dBGmj/f12FWucYomaiN8MgzZDOYQeK8KJAPXYiWABn5aagwyrVJkJj2dUi9vj
UgTd97IDONn8te00zGeZHScA8zs5RF20gOpPDJY51/CbKURhlIUoOuO8HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3DFG21qJNaM/pkrmpzh6tbbXYtMB8GA1UdIwQY
MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt
ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz
LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZDSDRiS
zfwTg4B9Clf2Wr71AgRdAlC04jikU56RPZeOVf1txtLT3o/9d5XlMYZ5Z8xHiE4t
Ovnl1nNVtScuVtSj3G4oLpvZ4bfVWYz80gp6p6MNvwJOfvUMwYNzMWYGNppajPhW
Kk82nbyMZ47uHAlXqGs8B9JHyLkZp/TCH/TnrHeKniCtcUcYh/uNPrHamMzVBVQQ
AYalQzkezYf+SUteJa1I7lEAKwe3yEu0AE78kkhx1izx7B30dECT4LCB2kWw1BrP
UU+SxuclESFMtJ4qYknwqbvf6VGP/zN1GW0GOBf5+hJ2QUZBHBCTRfu/KeJvJQnf
4cq+jXxf9hExyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:40:28 2026 by rpki-client