Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: ESqaVn0of/gnB+R6Z6Xg0dtpj+OfQZ0iy3if4gNCv0s=
Subject key identifier: 91:CA:EA:01:FE:65:A0:96:E4:19:E9:25:A4:7E:B3:DA:60:F8:DB:82
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 019DCF07B601A0AC4EEE729C15AEE55951A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 13CA
Signing time: Mon 27 Apr 2026 13:01:22 +0000
Manifest this update: Mon 27 Apr 2026 13:01:22 +0000
Manifest next update: Tue 28 Apr 2026 13:01:22 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: d5o6AAE0+eL+Iw3K1ELEvrzPHfBs1Bxsminf72iFPMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:b6:01:a0:ac:4e:ee:72:9c:15:ae:e5:59:51:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Apr 27 13:01:22 2026 GMT
Not After : Apr 28 13:01:22 2026 GMT
Subject: CN=91caea01fe65a096e419e925a47eb3da60f8db82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:27:cc:af:d4:fa:f6:36:62:86:96:08:5f:
96:84:d2:67:2d:df:d4:11:a0:90:fd:c1:af:e9:1e:
fe:ca:dc:47:39:f7:00:7a:6c:07:fc:d9:3e:65:bf:
f8:ab:3c:9c:5c:c4:6f:24:d4:be:09:3e:37:97:46:
6b:eb:68:5e:68:65:2c:75:45:e0:af:d7:e2:e2:8e:
a0:b0:2b:ea:39:d4:24:b6:c3:e0:37:83:2a:cd:eb:
4c:d8:9b:0b:7d:e9:eb:1c:35:dc:9c:30:c7:83:1e:
25:36:1b:18:3e:1c:97:29:1c:5b:0f:84:6d:9f:1d:
d1:2f:04:f6:f4:b9:57:b4:11:16:32:e0:2e:cb:dc:
ac:20:5e:83:05:ec:c2:b8:a5:5c:66:c7:28:3f:9c:
9e:60:6e:6f:10:0e:77:de:f4:7a:5d:96:8d:7c:db:
27:99:20:92:91:64:e1:4d:31:4e:d3:46:d7:4c:5b:
45:4e:36:be:42:01:4a:7b:89:5e:9f:85:22:43:5d:
4c:39:a1:66:cd:fb:9a:85:d4:ad:11:1e:f9:08:fe:
f0:ea:4a:90:cd:df:e9:ea:34:ec:38:9c:f3:9c:2c:
25:aa:b8:7a:68:4d:2f:70:89:a8:e5:41:1d:bd:82:
02:dc:3f:32:b9:ef:ca:c2:f3:ed:80:cb:e4:f8:4c:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:EA:01:FE:65:A0:96:E4:19:E9:25:A4:7E:B3:DA:60:F8:DB:82
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:79:38:89:96:d3:31:8a:4f:46:bf:db:a1:0a:78:d1:e4:24:
7c:9c:e8:1e:99:75:e0:64:3b:eb:6f:17:5c:b7:6a:00:df:ff:
4f:19:d2:83:15:ee:eb:e8:06:4c:6d:ce:b5:f9:46:7d:36:fb:
1f:fc:8e:f3:d7:99:93:04:72:9c:c0:cf:6a:0a:cf:75:df:b5:
ee:38:e4:a7:e7:8e:03:20:e3:ac:4e:83:9d:70:80:63:05:dc:
7c:2a:6c:bd:11:15:4f:d4:9d:7d:48:8d:b0:09:1f:6d:8a:06:
b5:07:a0:cd:10:93:52:b6:08:01:d1:a9:60:60:87:ac:46:60:
1d:23:ab:08:66:3d:d1:bd:40:2c:f6:82:fd:38:00:ab:a0:b6:
15:93:a6:25:de:c5:c9:ad:37:5a:f1:e1:2b:d3:f9:4b:8d:cf:
ff:8b:84:ed:5a:11:f3:c5:40:15:25:0e:d9:4b:5d:ba:f8:29:
c2:18:e2:f3:06:a9:7e:8a:35:d2:d6:e4:91:51:77:ec:54:97:
4f:79:dd:79:f2:c3:f1:01:69:d1:d1:ef:fa:1e:50:20:84:ea:
52:17:2a:2d:f5:7c:36:3f:f3:75:79:e7:11:b6:0b:1d:a0:6d:
22:b5:be:cf:49:4c:6c:d9:8a:f1:b7:2f:a8:c3:78:07:ed:14:
39:43:e3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:43 2026 by rpki-client