
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
File: O63rHzjiUanY1hTzLTbyat9P1YA.mft (raw, json)
Hash identifier: vPsIEJct7H9vwqJKrD1SNQ5YNxjs8KuBuE1dZH6FV9c=
Subject key identifier: 0A:F9:DE:1F:57:6D:1A:98:CF:DD:5A:D4:94:C9:7C:68:37:C6:55:2A
Authority key identifier: 3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
Certificate issuer: /CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Certificate serial: 019E8EA54816403D0ED9C82616B60558B8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
Manifest number: 10EB
Signing time: Wed 03 Jun 2026 18:00:57 +0000
Manifest this update: Wed 03 Jun 2026 18:00:57 +0000
Manifest next update: Thu 04 Jun 2026 18:00:57 +0000
Files and hashes: 1: O63rHzjiUanY1hTzLTbyat9P1YA.crl (hash: haeBSpis7skKUx1/MIoJGmGAOWJiH3WeqdeeqK2uDWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 13:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:a5:48:16:40:3d:0e:d9:c8:26:16:b6:05:58:b8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3badeb1f38e251a9d8d614f32d36f26adf4fd580
Validity
Not Before: Jun 3 18:00:57 2026 GMT
Not After : Jun 4 18:00:57 2026 GMT
Subject: CN=0af9de1f576d1a98cfdd5ad494c97c6837c6552a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b2:0b:04:bc:75:f5:16:c0:34:5b:58:84:a8:
f3:3a:66:b8:fb:70:c3:67:52:f2:36:43:52:10:18:
25:c2:76:de:7b:e9:6c:6a:68:fa:c3:64:06:c8:27:
72:1e:58:b5:50:16:85:89:63:73:24:92:ea:62:2c:
10:43:e0:d8:30:81:f6:93:4c:1f:34:82:78:76:fb:
27:2d:f4:47:45:ce:c7:3a:2d:50:2b:52:73:64:fc:
d7:6b:75:14:d5:9e:ae:1b:d2:fc:04:ed:f0:df:c3:
60:b3:4f:5d:05:da:a9:0f:41:f5:61:ab:46:83:ba:
2c:2a:ab:74:e7:46:33:3c:de:b3:c4:45:81:1e:6a:
5e:03:af:62:a3:38:82:08:78:5a:c8:a5:d3:59:66:
d2:78:92:f2:cb:79:58:45:22:00:65:5a:e0:1b:e3:
52:37:dd:c0:bd:9b:ff:9e:68:22:64:82:80:59:ca:
29:20:7d:63:43:04:07:f3:4d:d8:8e:26:7f:e9:80:
d5:a3:d6:46:0b:43:67:28:d3:2e:91:cf:ea:76:a7:
83:0a:a7:35:bd:b7:2d:fe:11:7c:7e:60:48:09:df:
0a:38:57:2a:f4:c9:fb:a0:aa:80:01:e2:55:b3:e9:
bf:15:8c:5f:51:35:e3:2d:39:ea:df:11:eb:db:18:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F9:DE:1F:57:6D:1A:98:CF:DD:5A:D4:94:C9:7C:68:37:C6:55:2A
X509v3 Authority Key Identifier:
keyid:3B:AD:EB:1F:38:E2:51:A9:D8:D6:14:F3:2D:36:F2:6A:DF:4F:D5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O63rHzjiUanY1hTzLTbyat9P1YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bba0f-d56d-4d7f-a8b5-4c87fe5fdadc/1/O63rHzjiUanY1hTzLTbyat9P1YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:24:29:a8:c5:72:a8:54:6e:40:21:3f:67:76:ec:c6:a3:57:
cb:10:ff:80:ca:2f:da:ae:a4:1c:13:8e:ac:03:50:99:79:73:
f4:eb:1c:0b:49:59:06:f0:eb:2e:cd:7f:51:26:55:38:15:72:
a7:ea:52:d3:43:3b:84:8b:f2:5e:63:52:88:7f:7a:3d:8f:f3:
49:39:07:d1:3d:dd:30:5f:72:f8:78:da:dc:8e:fb:fb:c5:36:
e6:e5:8b:c1:5d:22:e6:f1:7b:7b:d1:58:eb:4b:91:65:20:2f:
c3:83:e1:25:db:0c:18:32:e9:33:94:75:c2:8d:42:82:56:96:
9d:c5:39:ea:ec:5a:14:51:37:7b:de:8c:18:e6:64:00:70:03:
5c:90:1e:d6:cd:9f:be:eb:2e:44:ac:68:fd:13:13:41:9c:ac:
b1:31:7d:40:b9:58:fd:5e:17:73:16:f9:08:e0:4b:9a:0c:b4:
1a:96:db:25:01:41:b0:2c:34:d9:e9:22:de:dc:3a:63:a8:94:
e6:e9:ba:26:83:8d:19:1e:0f:bb:cc:4e:0c:b5:32:b6:e1:24:
78:28:ea:c1:ef:5f:8b:58:5a:72:2c:7d:e2:97:93:74:60:ef:
17:93:59:90:c3:4a:01:90:89:7e:f9:8a:cf:06:67:94:cd:1d:
9f:c9:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:55:29 2026 by rpki-client