Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: CUphtVD/76JAc2/k1NKgQ3m9KAlFpy2DBB+gv+J4Fas=
Subject key identifier: 0D:E1:15:01:BB:25:40:BC:6A:9E:35:27:87:E6:CC:F9:D8:A2:0E:06
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 01A08A8CBCDEF109557E6346D62205C8E0F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 10C0
Signing time: Thu 10 Sep 2026 09:01:14 +0000
Manifest this update: Thu 10 Sep 2026 09:01:14 +0000
Manifest next update: Fri 11 Sep 2026 09:01:14 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: jyQZmDAimYqotgu8PuHk+u1W3J/CDdj7X2cX5BQueL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:bc:de:f1:09:55:7e:63:46:d6:22:05:c8:e0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Sep 10 09:01:14 2026 GMT
Not After : Sep 11 09:01:14 2026 GMT
Subject: CN=0de11501bb2540bc6a9e352787e6ccf9d8a20e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:49:80:51:01:76:67:a0:4f:61:f2:6e:91:
98:21:6e:71:80:3c:0e:ec:d3:36:84:7c:fa:32:af:
e8:1d:97:ae:64:04:1e:2d:a4:7a:79:14:19:dd:6f:
1c:b0:dc:fd:84:be:d1:7e:12:01:a2:10:64:37:82:
5b:9a:a6:85:fb:85:eb:a9:e2:34:c8:d3:61:93:8d:
8e:d5:03:08:4c:b5:41:a3:2d:c7:a7:9a:ab:5d:87:
43:56:e6:1c:b2:27:9f:d1:14:e7:c0:f1:13:86:31:
a9:be:32:91:eb:c6:b3:44:8e:e6:b6:e9:20:4d:58:
eb:5e:59:45:44:9f:15:62:7f:27:00:cf:22:24:28:
0d:c3:06:98:17:07:4e:4c:05:c0:e1:f9:7e:27:98:
00:9b:5a:c8:75:c2:99:c0:07:d1:e2:13:6c:ba:dc:
8a:97:94:a1:a6:78:25:06:95:bc:a9:6b:b8:d9:0b:
5b:1c:06:1b:2b:47:dd:41:a6:f3:48:a8:14:1b:c8:
cf:dc:be:85:3d:b0:2a:5e:71:00:5e:c3:26:a4:f1:
02:39:7c:75:08:43:a0:bc:88:25:5d:90:f1:a3:28:
57:ab:d4:aa:6b:80:6f:5c:e3:11:e7:55:2e:d4:c7:
d2:ac:64:f0:64:16:91:1c:37:ff:e5:54:1f:34:79:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:15:01:BB:25:40:BC:6A:9E:35:27:87:E6:CC:F9:D8:A2:0E:06
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f3:5a:5a:23:1d:73:92:45:b9:32:51:9a:4c:11:22:76:8a:
7a:74:32:4c:9d:17:dd:2f:51:c8:67:de:25:7c:92:55:03:0b:
63:5c:07:c8:10:37:62:c2:fe:d1:92:84:55:fa:ca:b3:78:f0:
fc:76:75:31:1f:45:a3:eb:66:15:1c:1b:8a:33:31:12:b8:20:
b9:b3:c7:c6:8b:17:8f:bc:9c:2e:33:a7:28:37:18:cf:9f:f7:
81:ae:1f:9f:57:d8:db:4e:6d:c8:4d:d9:89:b2:a8:8b:aa:e7:
46:b4:dc:bd:d0:63:3a:8e:00:d8:6a:e2:87:33:a3:81:10:55:
d0:0d:b2:62:8e:c6:a8:da:6e:96:da:e4:a7:27:a3:ab:44:72:
07:75:7d:9c:be:52:86:fb:ed:6f:dd:ef:11:d5:86:26:a9:f7:
f8:db:3d:07:42:e2:56:82:d1:9e:6d:2f:eb:1d:10:59:5a:1e:
0a:a3:89:61:9e:f3:97:62:77:c9:3c:ff:cc:7b:ce:a8:1a:ef:
21:1c:7e:41:0e:05:de:73:e1:9c:c2:0f:6d:0c:68:d0:61:23:
49:61:6c:d8:24:ab:c6:80:f0:98:fc:f2:b6:9b:ed:93:6c:5f:
e2:7a:32:06:83:6b:94:a3:a0:6a:3b:e9:ff:f2:60:a9:94:29:
4a:b4:17:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:16:48 2026 by rpki-client