Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier: 9OSEDxGMdpPKLlMwJL9Xbp3RkA50N0qjtp2NWVF02Mk=
Subject key identifier: AB:63:89:43:12:FA:9F:B3:F3:FA:70:DD:3A:BA:62:25:F2:23:D8:9F
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer: /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial: 019D389C26F9A8D9AD105B553DA12A1E3F8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number: 12BB
Signing time: Sun 29 Mar 2026 08:00:50 +0000
Manifest this update: Sun 29 Mar 2026 08:00:50 +0000
Manifest next update: Mon 30 Mar 2026 08:00:50 +0000
Files and hashes: 1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: PaTage7L1JMCx60PLUsbbxSbuIQ+OKBitPAJ2VdT1B8=)
2: QUWFgCmw4YvFuNhA76fhRZo1qdA.asa (hash: qlWMvZSHFjKwoiR9XSDKRHRr7ChwOKhh6yQ7lTCbwBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:26:f9:a8:d9:ad:10:5b:55:3d:a1:2a:1e:3f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Validity
Not Before: Mar 29 08:00:50 2026 GMT
Not After : Mar 30 08:00:50 2026 GMT
Subject: CN=ab63894312fa9fb3f3fa70dd3aba6225f223d89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:28:45:1f:97:90:46:94:3c:f0:b9:63:a9:
34:d2:0f:40:fd:bd:96:f3:14:f2:75:62:8d:b2:43:
84:d8:03:42:7d:88:ef:cb:02:ca:9c:d4:ce:4b:a0:
b5:1b:5f:13:a6:83:5e:38:ca:31:05:55:11:df:b2:
a2:62:7a:12:49:67:7d:b2:a2:2d:9d:87:f0:bc:9d:
35:28:32:70:57:37:af:e7:f0:1d:f1:46:a4:bb:d9:
71:12:7d:32:b2:35:8a:09:1c:ff:47:c4:16:f0:b6:
06:b8:af:c7:67:55:92:ea:7c:11:b7:2b:1d:14:ec:
79:c3:e5:3a:80:21:11:c7:70:08:c5:4f:0b:79:9f:
32:c8:5f:c0:69:7f:ab:e5:85:0c:17:43:12:2c:b5:
f4:3d:12:bf:3f:d6:23:8a:b4:ea:a7:ee:fe:e8:81:
a3:cf:e8:f4:0e:bb:71:70:09:43:53:e4:eb:d1:2f:
82:83:55:ef:4d:6a:92:52:54:61:fe:95:ab:f0:c4:
a7:75:45:6c:77:0e:cb:a4:e1:80:a5:57:55:2b:d7:
c8:c0:4a:c4:01:c4:86:c5:10:5a:52:45:9f:83:df:
1f:45:15:e5:e8:6b:58:84:95:cf:f3:d1:d0:64:f1:
7a:f6:ad:6a:48:06:11:7f:82:2a:ae:7a:51:7b:72:
8a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:63:89:43:12:FA:9F:B3:F3:FA:70:DD:3A:BA:62:25:F2:23:D8:9F
X509v3 Authority Key Identifier:
keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:51:44:2f:21:35:86:eb:ce:16:44:91:16:af:cd:ec:eb:6a:
1e:d4:05:54:30:47:ba:da:93:d6:a8:38:b8:53:82:34:25:77:
dc:ad:cd:ff:e4:70:51:28:26:84:84:94:dc:3e:b7:d3:f5:8a:
83:06:b0:11:48:6f:fe:9e:69:69:da:15:48:b7:c7:57:fe:50:
86:07:d3:ae:25:ae:2a:db:0d:98:72:47:6f:60:ec:8f:54:aa:
a7:c0:4c:74:76:0e:7f:4f:8b:b2:67:1f:07:1c:9e:96:51:fd:
34:3e:e9:6f:38:6b:6f:7d:09:28:0d:08:44:54:23:c6:df:fe:
30:c7:24:85:fe:13:f7:e4:4d:43:06:12:a2:24:f6:65:22:9c:
e0:64:eb:04:0f:27:72:c8:16:52:71:83:ac:c8:ea:55:0f:77:
c9:0a:fd:1e:20:84:2d:05:78:d4:6e:40:bb:25:4f:67:36:29:
8a:18:4c:a3:ee:db:de:f0:8d:e8:7b:cf:71:ac:5a:f2:58:08:
e8:65:b7:08:c2:30:2b:99:f9:21:4b:3d:88:f0:78:cb:f0:c0:
83:d9:7d:88:60:30:52:fa:f1:e8:2e:ea:1c:bd:c9:0d:6c:d7:
ee:2e:7a:b8:84:e0:fa:f6:60:48:34:a4:18:e9:ca:51:47:bb:
cf:0a:fb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:02 2026 by rpki-client