Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/oB9A-8vTc1D6zq6XhosVLj7BveU.mft
File: oB9A-8vTc1D6zq6XhosVLj7BveU.mft (raw, json)
Hash identifier: qGtYZwLMzJ6GoHY/YMzT1JWmdWnZqsC2toI0jTcZbTw=
Subject key identifier: B0:26:B8:C8:96:B3:1A:80:76:93:1F:F9:62:2B:04:73:6A:89:52:D1
Authority key identifier: A0:1F:40:FB:CB:D3:73:50:FA:CE:AE:97:86:8B:15:2E:3E:C1:BD:E5
Certificate issuer: /CN=a01f40fbcbd37350faceae97868b152e3ec1bde5
Certificate serial: 019D37C013D4EA019D556E1BB8C30FB13CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oB9A-8vTc1D6zq6XhosVLj7BveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/oB9A-8vTc1D6zq6XhosVLj7BveU.mft
Manifest number: 50
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: oB9A-8vTc1D6zq6XhosVLj7BveU.crl (hash: uJMGXn6slTrRqXjs0hSXaRGFQNctrAk3jg4ERf5k1g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/oB9A-8vTc1D6zq6XhosVLj7BveU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/oB9A-8vTc1D6zq6XhosVLj7BveU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oB9A-8vTc1D6zq6XhosVLj7BveU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:13:d4:ea:01:9d:55:6e:1b:b8:c3:0f:b1:3c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01f40fbcbd37350faceae97868b152e3ec1bde5
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=b026b8c896b31a8076931ff9622b04736a8952d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:c7:f7:11:9a:9e:18:47:85:12:6b:41:4e:
08:d3:9e:13:da:24:2a:af:af:e1:16:d9:8b:f8:1b:
04:28:7b:02:9e:53:1b:77:64:b8:b3:1c:11:82:b2:
0c:77:29:b4:c1:24:42:11:d1:e6:e9:e8:39:33:45:
2a:30:21:d3:02:cb:3b:ad:21:a7:7f:29:b7:93:b9:
04:62:c0:4e:fd:fd:3f:f4:02:e1:da:06:90:ba:f1:
6d:0f:ad:8d:1d:3c:12:30:14:60:c0:5d:19:77:1e:
0e:7c:d8:f4:6f:3e:4e:03:e8:74:2f:09:24:62:c8:
e2:2b:8a:d1:b7:13:fa:7c:40:68:5a:81:b6:5b:22:
aa:e4:ea:e5:87:c5:cc:06:3d:7e:ad:7d:62:9c:05:
12:f5:43:81:6a:01:83:fd:29:db:c1:b1:97:78:84:
91:3d:16:75:90:87:2e:ae:28:c3:12:b4:50:8d:39:
e5:bb:d6:c2:be:1e:15:c7:ea:1c:64:73:9f:ca:23:
4f:db:b6:4a:81:0c:72:78:25:b2:88:8c:9c:82:69:
75:13:4e:aa:a9:c0:9b:7b:94:cb:fe:9e:0c:5e:af:
9d:9d:b6:0a:64:cf:08:65:ec:8e:86:43:07:70:4a:
ef:f4:2a:4c:3b:db:14:43:b1:f9:cc:ec:90:cd:95:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:B8:C8:96:B3:1A:80:76:93:1F:F9:62:2B:04:73:6A:89:52:D1
X509v3 Authority Key Identifier:
keyid:A0:1F:40:FB:CB:D3:73:50:FA:CE:AE:97:86:8B:15:2E:3E:C1:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB9A-8vTc1D6zq6XhosVLj7BveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/oB9A-8vTc1D6zq6XhosVLj7BveU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a806d7-4479-4e1e-a8f4-a127c652dfe6/1/oB9A-8vTc1D6zq6XhosVLj7BveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1b:c5:d0:27:ae:3f:f5:f4:30:0c:8a:5a:eb:c4:e7:5c:e2:
c6:52:e4:85:a3:f9:e6:39:df:93:37:d3:a2:39:5e:bd:7b:d0:
cc:92:c4:bf:b2:9a:c9:44:cb:63:fe:62:b7:1d:7a:38:71:32:
e8:2d:64:bf:74:ee:9b:41:bd:b0:2b:2d:3f:86:88:9b:15:97:
dc:16:55:2a:f2:36:e4:26:4a:8d:3d:2a:fe:44:e3:4d:bc:12:
36:2c:b0:8c:d5:61:f8:9c:09:d7:bd:f9:f7:3f:f4:f9:41:45:
76:28:e9:6e:16:d0:c6:58:d2:09:7a:b9:1d:59:55:40:ab:2f:
5f:3a:f7:2e:43:e2:2c:4d:32:4e:f7:ae:d9:8b:fe:0a:0b:f4:
bf:0d:3b:f9:16:c8:ec:0a:63:1a:3f:ed:12:02:b3:ad:91:8f:
1c:98:b7:2d:d4:16:c2:b0:f4:21:6c:89:a2:b3:0e:fd:60:1d:
93:93:8a:2f:fa:ad:96:d1:79:1e:d1:13:82:8d:a0:aa:b6:77:
43:ec:62:88:80:ea:ed:36:6a:8d:1b:da:2b:6c:91:b0:60:52:
fd:c1:15:f8:39:06:ab:4d:89:d0:0c:28:96:51:bc:85:91:a0:
c4:75:13:f2:10:e6:c3:d2:17:c2:af:98:7e:3d:e8:71:99:27:
0a:46:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:45 2026 by rpki-client