Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
File: OXsxr3cA59mVkO39nVhKG1A46tc.mft (raw, json)
Hash identifier: n6yVEPyDCs1blbqRXZ6nWewLbKny3pbXueJ+5G4RTUU=
Subject key identifier: D2:D2:2D:EC:C2:20:BB:11:DF:3F:57:56:88:30:D8:15:17:22:53:A3
Authority key identifier: 39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7
Certificate issuer: /CN=397b31af7700e7d99590edfd9d584a1b5038ead7
Certificate serial: 019D37895E6C720A4E7CDAF1F9306A1A643E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 03:00:42 +0000
Manifest this update: Sun 29 Mar 2026 03:00:42 +0000
Manifest next update: Mon 30 Mar 2026 03:00:42 +0000
Files and hashes: 1: OXsxr3cA59mVkO39nVhKG1A46tc.crl (hash: gytRO+XQaSM6R4MwIjngdJMsRE6YhEu6VePMvvn/hUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5e:6c:72:0a:4e:7c:da:f1:f9:30:6a:1a:64:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397b31af7700e7d99590edfd9d584a1b5038ead7
Validity
Not Before: Mar 29 03:00:42 2026 GMT
Not After : Mar 30 03:00:42 2026 GMT
Subject: CN=d2d22decc220bb11df3f57568830d815172253a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:59:ea:de:e4:0f:e7:8a:54:d3:ba:08:50:
12:fa:40:f1:76:8f:09:6d:a5:fb:65:8c:87:0c:f1:
09:11:c4:e4:ab:55:57:87:a4:b3:c8:28:6a:5f:af:
66:a0:d7:ec:9b:4b:3a:8b:7c:e8:bd:a6:d8:8d:52:
cd:eb:da:85:c4:a8:ba:84:42:30:cc:14:43:f8:c6:
99:98:1a:6d:ce:87:02:40:0c:06:5a:d1:c4:b1:81:
ee:e5:94:c4:1d:4e:b5:a1:f1:12:eb:bc:0f:8a:49:
93:85:5a:e9:7a:71:38:e9:cd:db:3e:c5:51:a4:f0:
7f:51:66:3a:17:05:c7:d3:94:cc:c3:40:e6:8a:2b:
68:28:17:6c:d9:4a:66:e9:bb:ad:86:ea:23:4b:f4:
81:19:5a:e7:fc:73:3e:b4:ec:4a:66:22:41:fd:82:
eb:82:bc:23:ac:75:27:e4:ad:80:c1:89:cf:cb:71:
4d:c6:51:1e:57:c3:96:b0:b9:45:c2:94:fc:a8:6c:
e6:5e:6d:8d:84:65:1e:a3:67:c9:63:c0:68:10:72:
c0:04:13:ce:9f:41:5e:20:e2:db:0e:f5:a9:53:aa:
25:99:0e:c1:d8:c0:9d:a9:a5:53:8d:4d:87:e3:29:
f7:0e:7b:98:5f:eb:9e:1d:09:39:c4:5a:2a:f2:0e:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D2:2D:EC:C2:20:BB:11:DF:3F:57:56:88:30:D8:15:17:22:53:A3
X509v3 Authority Key Identifier:
keyid:39:7B:31:AF:77:00:E7:D9:95:90:ED:FD:9D:58:4A:1B:50:38:EA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXsxr3cA59mVkO39nVhKG1A46tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/0d9d3b-d790-4ae8-a23d-b202e05ac84a/1/OXsxr3cA59mVkO39nVhKG1A46tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:53:22:69:de:57:5c:0b:93:f3:4c:bc:c1:07:69:d0:71:36:
ab:cb:68:73:d8:22:ef:58:3c:07:d3:75:03:2b:56:af:67:4e:
68:7c:c8:3c:bc:dc:0f:fb:c9:43:76:63:53:85:56:d8:f6:07:
1d:22:0f:96:0f:f2:55:40:c5:fd:ef:61:5d:96:e3:29:9e:c8:
9a:c8:22:f7:f2:42:6f:ef:5e:cf:dd:40:14:d3:08:07:3d:49:
eb:5a:a3:c5:4f:ec:55:d4:55:37:9a:28:61:6a:b6:87:ac:9f:
42:2f:af:3d:58:ec:43:7f:40:4f:8c:e5:46:be:93:75:72:b4:
7a:ae:a3:e4:5f:b8:4a:6f:22:79:0b:c8:53:73:af:7b:ac:a7:
ec:d2:86:fb:75:84:c5:aa:a6:be:d1:c9:71:d3:b0:92:ec:11:
7f:0c:1b:63:9a:64:47:7a:95:ce:63:ac:5f:c0:77:ca:a6:ec:
a8:c5:76:bf:4b:0b:83:9a:c6:3b:75:51:f7:ee:34:23:a5:ab:
65:07:8e:a4:29:3e:8c:09:45:1f:7a:36:ce:64:7c:f0:05:ac:
32:d9:85:18:61:3b:a4:60:86:9b:d7:6c:8f:f1:d2:66:de:e2:
dd:84:27:45:52:1e:59:2e:ee:cb:85:01:ae:f0:f9:3b:12:b5:
74:ef:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:25 2026 by rpki-client