Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: lvEDK3dg8fy/nv1isbP377M6WLZItc1sGWaMP5LuIA4=
Subject key identifier: 8C:B6:EC:18:30:63:FE:0C:24:0D:90:04:EC:9C:F7:22:D9:9B:88:9D
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 019D3AC1D359D867EB0EB2F1276F279A09ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 0F09
Signing time: Sun 29 Mar 2026 18:01:14 +0000
Manifest this update: Sun 29 Mar 2026 18:01:14 +0000
Manifest next update: Mon 30 Mar 2026 18:01:14 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: AnYMePPXcC1b5Ynn+UNxWQ6cAFFULsPAh6e3zhqfT+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:d3:59:d8:67:eb:0e:b2:f1:27:6f:27:9a:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Mar 29 18:01:14 2026 GMT
Not After : Mar 30 18:01:14 2026 GMT
Subject: CN=8cb6ec183063fe0c240d9004ec9cf722d99b889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:ec:59:23:21:30:17:ff:2d:71:6b:f9:30:
a4:62:49:fa:75:20:16:45:2d:54:65:4d:fa:c5:a8:
a7:1b:12:b8:cc:48:cd:d8:81:ce:8d:05:1e:a5:59:
fb:34:b0:38:a6:fe:ae:80:6f:6a:5d:27:3c:76:33:
a9:35:a5:1a:41:ac:f0:14:e8:66:b0:a2:a4:d7:ef:
cb:e9:ca:07:15:27:72:35:31:7d:39:87:cf:f7:37:
f2:32:34:d7:0b:75:4d:6d:d1:79:26:ee:e3:1f:4c:
b3:d6:c7:1d:e6:be:1f:b3:50:d2:39:2a:76:5f:11:
82:6e:a0:71:a1:98:1c:2a:9f:7b:44:c6:92:c7:9c:
47:aa:04:bb:95:58:76:16:db:e6:dc:0a:70:ac:b3:
c0:4e:2a:4c:c2:b0:21:44:e0:ce:a7:2e:a9:7e:a8:
82:26:53:7d:8a:30:e1:b2:91:50:cd:22:a5:93:93:
bb:f5:84:51:cc:b2:b0:db:b1:59:f3:d2:d3:5b:b7:
ed:24:f9:6c:90:cb:df:a4:d8:79:d4:c1:d6:ba:8b:
8b:7b:4f:b7:ab:8f:b1:e1:b5:46:96:bf:ca:46:4b:
51:24:50:6a:3b:12:36:f6:e6:f0:8d:34:07:a3:e0:
da:57:46:e3:28:5b:ee:4a:f3:fb:7f:ae:61:a5:33:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:EC:18:30:63:FE:0C:24:0D:90:04:EC:9C:F7:22:D9:9B:88:9D
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8a:5a:b9:1d:3f:c3:16:f6:79:70:67:eb:35:dd:67:83:87:
d1:e2:ca:4d:63:fc:cd:b6:32:24:71:00:70:51:50:8a:21:f4:
f9:77:d7:83:70:11:b8:9b:6a:f9:c0:42:a9:ad:f2:55:e2:f8:
53:be:09:4c:24:ea:83:b7:14:ee:ac:55:5b:b0:e0:bd:03:5a:
0f:63:5c:77:0e:82:c7:27:2e:d7:e2:40:a4:c6:1a:62:9d:6b:
99:f7:6f:96:d4:2c:f8:85:aa:0b:b9:4c:ad:65:f0:a6:d9:84:
75:f7:26:35:c9:d0:d5:c5:1a:3d:a7:06:4c:03:12:54:e0:03:
b6:7a:66:ff:9f:2e:3e:b2:82:be:7a:2f:d2:c8:5b:f4:85:58:
1d:6f:d9:9f:4d:88:13:eb:d1:f0:48:1e:05:cb:e2:dd:e2:94:
bf:95:9f:4e:44:51:a5:8e:50:e7:e9:3c:d0:96:72:ac:d4:d3:
9d:74:7c:fb:f2:8c:2a:80:d6:75:6a:70:0a:f7:c1:88:bc:45:
e2:ed:19:e2:57:f4:31:ab:88:31:39:d1:ec:f0:10:79:f5:8f:
3e:20:f0:7b:c7:db:13:42:fb:48:86:14:7d:41:34:61:a3:fc:
76:71:85:76:2c:7f:d4:3b:f5:cd:dc:dc:eb:56:90:72:f8:4f:
ff:77:60:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:24 2026 by rpki-client