Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
File: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft (raw, json)
Hash identifier: Vpjy96NrlI/+kvydgqFVs2c8d7YzTLmOmJsdv0ToZJM=
Subject key identifier: 1D:80:C1:F5:D5:D0:D6:DD:95:F5:20:A7:D9:12:B9:B7:5B:AF:8B:B6
Authority key identifier: A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E
Certificate issuer: /CN=a202d6b1527f10593ab5675690afee88c13c2f2e
Certificate serial: 019D37C072C5A58CE3CFF8A157DE8D31BD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
Manifest number: 1520
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl (hash: iZoSOFedKy0Uv3iBPcHSGMaMWL9O39XYBibGgekpRsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:72:c5:a5:8c:e3:cf:f8:a1:57:de:8d:31:bd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a202d6b1527f10593ab5675690afee88c13c2f2e
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=1d80c1f5d5d0d6dd95f520a7d912b9b75baf8bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:23:00:89:cf:d9:f5:31:d8:d6:e0:43:31:85:
15:77:17:8d:5f:75:5a:20:eb:51:51:b3:71:87:b9:
e2:a6:c4:4c:fe:fd:ed:47:11:a8:83:36:d1:bb:6a:
0a:8e:2e:97:c1:62:58:14:e1:80:b5:58:cf:6c:0e:
b9:70:db:87:4f:4c:e0:aa:fa:66:ac:a9:24:5f:1d:
f3:5d:83:ba:24:94:44:9f:a5:ba:5e:4f:42:fb:e7:
95:51:d9:44:76:51:a2:6a:8e:d6:aa:dd:53:59:db:
ae:9c:c9:52:9a:91:35:ce:4c:fc:5c:cd:98:8d:fb:
d1:32:ab:7d:83:a3:e0:11:30:72:46:14:5d:42:82:
bc:16:2c:f9:7e:45:8c:71:da:aa:81:5f:93:d5:57:
37:3c:3a:2f:b8:68:02:87:ff:5b:9d:c1:d8:fb:70:
a1:87:03:e7:8f:b3:33:c0:b9:d6:b2:f2:9b:99:c7:
8c:53:e9:39:0f:59:af:ff:34:0d:a4:89:29:2f:f4:
92:cc:f0:b8:ca:c0:c5:6e:7a:16:f0:d3:31:cd:e0:
60:e9:2e:92:8e:9d:a4:d3:15:e2:78:39:b1:50:7c:
e7:cf:13:16:60:da:b5:62:b2:a8:64:37:68:db:6f:
bb:e0:5d:69:22:1c:8f:0c:35:36:91:2b:a5:a9:b4:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:C1:F5:D5:D0:D6:DD:95:F5:20:A7:D9:12:B9:B7:5B:AF:8B:B6
X509v3 Authority Key Identifier:
keyid:A2:02:D6:B1:52:7F:10:59:3A:B5:67:56:90:AF:EE:88:C1:3C:2F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/236973-26e0-494f-8a12-1a5be92aba3e/1/ogLWsVJ_EFk6tWdWkK_uiME8Ly4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d8:26:a1:c3:eb:d6:5d:a6:68:d4:c4:fc:49:0e:85:2c:38:
cf:d0:68:56:ec:b8:72:9b:13:da:c7:72:3e:e4:81:8a:25:89:
d5:bf:24:36:a2:43:d5:65:50:7b:14:92:74:bb:4e:18:f2:62:
79:5e:47:7b:5c:ea:1d:d1:e6:bf:eb:2a:e4:de:5b:47:9a:73:
8c:fb:1e:a6:9a:00:a0:5d:76:99:70:8b:5f:38:f8:c3:60:87:
2c:e1:8f:4c:91:fa:57:02:4c:45:e7:89:30:4b:7d:41:38:86:
54:45:c1:ee:41:00:17:06:ed:b1:28:01:ea:1c:62:26:3c:cb:
02:d4:c8:17:7f:8b:90:2b:2c:f9:2d:ca:0c:23:e0:93:8a:59:
03:4d:aa:58:d2:b9:af:8a:f2:71:23:5a:cc:5d:86:6e:4f:da:
e7:46:2f:e6:db:28:ee:90:ff:66:95:aa:da:95:46:a5:a5:10:
54:b5:0a:d2:24:53:b0:e4:7c:5f:ef:fb:c6:3e:04:8f:32:d3:
1c:d1:a0:ad:a6:d4:c0:9a:0e:44:27:08:47:40:4f:7d:a1:0b:
b3:6c:3f:37:9f:1d:4d:7a:90:fb:67:9c:af:f8:65:54:f9:1d:
ca:04:96:cd:8a:a5:71:69:8d:bd:bf:78:71:59:e7:9c:b8:3e:
54:41:73:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:45 2026 by rpki-client