Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: HhYdm0NdOFdkh8PYkeEg3zF03W4fM0pV+fucGEddDAM=
Subject key identifier: D2:87:EB:F8:08:A6:BF:85:59:87:04:80:88:C8:42:BD:7A:EF:2F:8B
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 019D389C65EB48CFC73142B60154EAF35F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 0A9B
Signing time: Sun 29 Mar 2026 08:01:06 +0000
Manifest this update: Sun 29 Mar 2026 08:01:06 +0000
Manifest next update: Mon 30 Mar 2026 08:01:06 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: 8sRHePMsFGOVl4M6Y/GQIK95rDtIgraVTqbcws+gGSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:65:eb:48:cf:c7:31:42:b6:01:54:ea:f3:5f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Mar 29 08:01:06 2026 GMT
Not After : Mar 30 08:01:06 2026 GMT
Subject: CN=d287ebf808a6bf855987048088c842bd7aef2f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:92:a9:3c:60:4f:52:4f:5c:9a:98:ca:4e:
38:4f:df:de:6d:ea:c9:84:78:9b:44:67:5c:38:72:
8f:d5:a9:cf:63:46:54:5f:19:66:ac:8b:e5:90:a7:
1a:24:3d:b7:2a:cc:10:35:f3:9d:a7:b3:72:09:7b:
4c:67:94:c0:84:9f:af:fb:93:f0:b3:7a:25:0d:84:
d2:03:0e:0b:50:d3:a2:d0:cf:6a:be:91:66:94:b7:
12:b5:43:fc:84:97:f7:27:24:ad:0b:e5:c7:0f:cf:
67:52:ca:fd:6d:c9:98:5b:c7:26:12:ec:e1:03:74:
04:63:e0:a2:cb:5e:65:7c:71:5d:ba:33:a4:40:e6:
2d:00:da:ff:0b:d9:5c:f0:37:05:f2:c3:f1:27:9d:
c7:d7:35:19:d2:3c:a4:9e:31:47:6c:8c:b2:14:32:
a2:68:07:e9:09:08:d9:a2:45:94:dd:1e:6d:36:b9:
d3:3b:62:91:d1:34:1a:1b:cc:ad:4e:af:74:69:bc:
c3:c4:03:11:50:49:64:c7:89:63:66:36:cc:83:b8:
70:74:dd:ff:ed:a9:39:10:3b:a9:3d:91:f9:71:0a:
63:e7:81:52:89:86:ef:ff:65:93:d3:b5:b5:f5:45:
54:e4:94:9f:7f:a5:81:5a:13:20:e2:c3:99:37:24:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:87:EB:F8:08:A6:BF:85:59:87:04:80:88:C8:42:BD:7A:EF:2F:8B
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:df:8b:c4:53:98:cb:20:0b:12:06:57:13:88:88:43:17:2d:
ac:cd:b0:68:09:c6:14:65:b4:df:29:2c:c9:7d:98:ca:48:ae:
a8:d6:15:8e:d7:47:72:74:2f:a4:9e:e5:d4:8c:9b:19:f1:e3:
db:f2:c3:98:0e:03:3f:86:18:8c:1b:0d:72:9d:36:96:09:23:
65:db:7b:a8:73:1b:5f:9f:e0:2a:ab:76:5d:55:88:63:ec:52:
9a:ca:37:c3:83:d7:fa:d1:9a:02:26:fd:4d:ce:e0:a9:7a:02:
a0:4c:bb:76:17:85:45:08:90:01:7a:b4:e1:2f:d9:d4:73:06:
a1:d4:ef:61:9c:de:71:41:eb:c2:5b:1c:2a:c9:20:63:3b:a0:
21:a6:a1:07:6c:39:68:9d:76:40:69:e1:8d:f8:72:aa:a0:bd:
7b:fb:82:79:3b:8d:73:c3:a3:fb:5d:80:3b:42:26:c0:34:53:
22:f4:d0:bb:b7:04:2f:a9:56:99:4c:b2:7b:9c:aa:b9:08:fd:
9e:15:5f:dc:55:ef:da:42:a1:64:88:71:8f:9e:e7:b6:56:d2:
88:ba:ed:fd:af:8a:2a:f6:dd:13:6e:9f:54:64:ba:a3:60:43:
7e:22:21:89:0e:30:b7:7b:82:22:05:57:f5:b2:de:83:a6:0b:
cd:66:4e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nGXrSM/HMUK2AVTq819qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNTI1Njg1Yzk2ZTMyNmYyMGFlMzcyOWMwMzBmNDRmZDE0
OTliMDUwHhcNMjYwMzI5MDgwMTA2WhcNMjYwMzMwMDgwMTA2WjAzMTEwLwYDVQQD
EyhkMjg3ZWJmODA4YTZiZjg1NTk4NzA0ODA4OGM4NDJiZDdhZWYyZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdaSqTxgT1JPXJqYyk44T9/eberJ
hHibRGdcOHKP1anPY0ZUXxlmrIvlkKcaJD23KswQNfOdp7NyCXtMZ5TAhJ+v+5Pw
s3olDYTSAw4LUNOi0M9qvpFmlLcStUP8hJf3JyStC+XHD89nUsr9bcmYW8cmEuzh
A3QEY+Ciy15lfHFdujOkQOYtANr/C9lc8DcF8sPxJ53H1zUZ0jyknjFHbIyyFDKi
aAfpCQjZokWU3R5tNrnTO2KR0TQaG8ytTq90abzDxAMRUElkx4ljZjbMg7hwdN3/
7ak5EDupPZH5cQpj54FSiYbv/2WT07W19UVU5JSff6WBWhMg4sOZNyQXOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKH6/gIpr+FWYcEgIjIQr167y+LMB8GA1UdIwQY
MBaAFKFSVoXJbjJvIK43KcAw9E/RSZsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAt
NDQzNzFiMWNjNzJmLzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lMmNjOGItODYwNi00ZjI1LTkyZDAtNDQzNzFiMWNjNzJm
LzEvb1ZKV2hjbHVNbThncmpjcHdERDBUOUZKbXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgd+LxFOY
yyALEgZXE4iIQxctrM2waAnGFGW03yksyX2YykiuqNYVjtdHcnQvpJ7l1IybGfHj
2/LDmA4DP4YYjBsNcp02lgkjZdt7qHMbX5/gKqt2XVWIY+xSmso3w4PX+tGaAib9
Tc7gqXoCoEy7dheFRQiQAXq04S/Z1HMGodTvYZzecUHrwlscKskgYzugIaahB2w5
aJ12QGnhjfhyqqC9e/uCeTuNc8Oj+12AO0ImwDRTIvTQu7cEL6lWmUyye5yquQj9
nhVf3FXv2kKhZIhxj57ntlbSiLrt/a+KKvbdE26fVGS6o2BDfiIhiQ4wt3uCIgVX
9bLeg6YLzWZOVg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:54 2026 by rpki-client