Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
File: oqodRGKTg8rfx1F9733ikpWuObQ.mft (raw, json)
Hash identifier: 4HezUIwopnPsn0/yw39KCgI/H4n95aHDGXizu/UyJaY=
Subject key identifier: 78:7D:04:B9:7C:2F:FC:C4:9B:18:78:28:F7:66:2A:E7:EA:FD:28:12
Authority key identifier: A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
Certificate issuer: /CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Certificate serial: 019D3909D175A40C088B6CCBC6500B38A618
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
Manifest number: 1005
Signing time: Sun 29 Mar 2026 10:00:37 +0000
Manifest this update: Sun 29 Mar 2026 10:00:37 +0000
Manifest next update: Mon 30 Mar 2026 10:00:37 +0000
Files and hashes: 1: oqodRGKTg8rfx1F9733ikpWuObQ.crl (hash: 5hoDsP5yLzdNRkLB0rUskmQMbleHFeKSxyQKTUgfbqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d1:75:a4:0c:08:8b:6c:cb:c6:50:0b:38:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Validity
Not Before: Mar 29 10:00:37 2026 GMT
Not After : Mar 30 10:00:37 2026 GMT
Subject: CN=787d04b97c2ffcc49b187828f7662ae7eafd2812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:fb:f0:ed:32:c8:6a:f6:5b:89:41:2a:73:
7a:dc:77:34:b4:6f:e2:ab:81:82:29:92:38:9a:63:
7d:fe:5e:1d:36:f1:f3:09:7c:56:eb:bb:aa:90:9d:
60:ac:69:46:1f:aa:37:cc:d5:7e:12:92:75:bf:52:
f7:f4:56:ee:ca:c5:81:6a:c3:01:2c:c5:d1:1b:52:
f7:f4:cc:38:38:74:e6:ab:e2:d4:bb:89:46:14:83:
73:68:47:b3:7b:3c:08:21:52:61:ab:6d:91:04:db:
56:9f:d1:45:48:5f:e6:bb:91:7d:85:bd:34:e2:c1:
90:30:68:fa:4b:46:0f:50:c0:4a:dc:55:a1:9a:49:
cf:b9:90:bb:79:6b:9d:08:68:bb:d7:bd:35:04:6b:
58:d4:e9:be:63:de:72:3a:e6:1a:ac:aa:25:a5:bc:
46:f2:8d:23:6f:3e:c2:f8:c1:10:f8:f8:6c:f4:8b:
51:93:2a:7f:87:45:0a:88:0c:9d:e9:1c:a0:93:37:
31:2e:d9:ad:65:0f:8d:90:43:5a:22:bd:b3:e2:11:
61:2c:45:9c:02:9e:77:f5:43:03:ee:a5:97:78:88:
41:aa:97:1c:fd:7f:b4:1b:85:46:ba:cc:1a:07:53:
4f:a4:21:cd:42:3c:03:a2:77:35:7e:98:a0:85:1c:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7D:04:B9:7C:2F:FC:C4:9B:18:78:28:F7:66:2A:E7:EA:FD:28:12
X509v3 Authority Key Identifier:
keyid:A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c2:d3:3c:43:81:31:03:e8:09:78:10:31:c4:3d:8f:7e:5e:
eb:16:21:58:f4:22:9d:c9:4c:50:1b:8c:b8:5e:27:d9:2d:52:
41:db:d9:1e:4d:72:18:da:0a:fa:7c:bf:8d:f5:1e:4d:44:da:
3f:4e:04:4a:63:31:56:c0:d0:bf:bb:e8:52:1b:35:9c:11:20:
39:f6:99:29:62:f1:0d:f4:91:db:a4:f7:06:a4:5a:4e:83:db:
93:fe:0f:2b:d5:f5:cf:f4:72:83:29:11:87:06:a6:68:90:f4:
8b:d2:49:47:9f:dc:34:3c:95:7d:c5:f8:f2:bc:b3:69:03:c3:
36:fa:17:1c:8f:86:06:4d:01:a6:c4:a8:1f:31:b7:63:4e:e2:
12:2a:24:c9:98:b5:f2:d5:87:56:4c:c1:9d:b8:3c:f1:ea:35:
2a:b2:fc:ef:6f:01:15:3d:9d:0a:56:db:86:91:6b:4e:f8:5d:
af:d2:bf:0a:f1:4c:69:13:2d:4b:17:8c:28:c5:28:6c:09:fa:
2b:6c:5f:4c:94:64:2a:61:8f:66:8a:c1:2e:8d:2c:37:06:05:
3b:2f:48:18:f3:24:1c:66:05:83:18:84:d3:8f:d3:30:c0:40:
09:b1:f5:f2:48:d8:09:0c:d1:ab:9a:65:f9:88:5f:7d:5d:32:
34:85:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:50 2026 by rpki-client