Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
File: oWkKV2UZ54d6ZAis325pu4RyqhU.mft (raw, json)
Hash identifier: JIB5C81iy3EfX2yE7ghgoZnrgcGhV5tiRR6liwrtqhs=
Subject key identifier: 12:7E:E4:C2:14:73:49:31:DC:67:1D:58:A1:0D:77:03:51:5A:E3:CD
Authority key identifier: A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
Certificate issuer: /CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Certificate serial: 019D3909C5DA6F1D76F8E1A31DFBB075334B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
Manifest number: 0781
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: oWkKV2UZ54d6ZAis325pu4RyqhU.crl (hash: xFfBLOuC4BQanVm9olfASwF4pUGXCsQiEKQJ3LTUPas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c5:da:6f:1d:76:f8:e1:a3:1d:fb:b0:75:33:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1690a576519e7877a6408acdf6e69bb8472aa15
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=127ee4c214734931dc671d58a10d7703515ae3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:17:7e:23:60:90:19:53:99:11:19:10:08:
bb:bb:98:3b:e5:a4:4a:95:c4:41:e0:43:cb:23:81:
ba:75:76:b5:b0:c9:95:64:61:f7:7a:45:9e:02:bc:
e6:dd:60:7d:5b:3c:68:23:7b:70:ad:a0:5b:e7:53:
b5:c0:d3:54:28:60:ec:05:29:40:23:c3:42:72:7a:
a6:48:b9:96:5b:69:25:44:65:98:cf:e6:55:a5:f3:
d7:96:1b:cd:9b:00:02:4c:b3:ba:41:9f:1f:3e:ed:
b4:c2:2f:2e:3f:f5:70:4d:bc:0f:79:07:8f:61:e2:
66:5a:fb:4d:ba:7c:04:88:10:49:2c:79:dd:29:90:
44:94:3f:78:2c:d4:2d:d6:c7:f5:90:ca:46:c4:32:
dd:68:90:06:14:86:58:24:f5:fd:17:e2:d9:f6:de:
38:bb:bd:ff:8f:56:a7:00:31:ed:56:71:e4:5c:f3:
19:cb:1a:81:87:f4:1a:22:b4:60:f5:db:c5:b3:38:
70:90:6f:ef:cc:cb:1f:4b:ee:c7:7a:7a:b6:94:2f:
bd:ef:bc:12:ed:59:7c:03:69:6a:67:42:9a:b0:60:
50:0e:06:ec:e6:9f:f8:2c:7c:88:37:56:63:98:01:
d4:b9:f9:cc:cb:c5:26:b4:d8:46:ee:48:17:08:69:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7E:E4:C2:14:73:49:31:DC:67:1D:58:A1:0D:77:03:51:5A:E3:CD
X509v3 Authority Key Identifier:
keyid:A1:69:0A:57:65:19:E7:87:7A:64:08:AC:DF:6E:69:BB:84:72:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWkKV2UZ54d6ZAis325pu4RyqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/017147-a6c1-4f48-a5d9-2cde4045c42a/1/oWkKV2UZ54d6ZAis325pu4RyqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:07:4c:46:a0:ec:a3:f4:98:cd:2e:8a:86:34:c1:fb:ff:6a:
5d:bf:8b:01:22:bd:96:79:ba:5c:07:0b:8f:df:54:68:15:9c:
3a:61:04:ed:9d:94:70:49:74:fd:39:84:0e:7e:15:6e:9e:90:
44:b9:b0:ec:5b:45:ac:6c:fd:4a:20:25:13:b8:43:6e:be:34:
7d:af:7a:a3:66:54:3a:47:3e:2e:05:a5:c0:80:84:61:41:b2:
ed:dd:23:f1:32:50:de:28:91:33:e3:1b:d4:bd:2a:94:a1:f2:
9b:6e:da:e9:5b:0e:29:a8:e4:23:00:3a:a6:ba:46:09:5a:b9:
dd:08:1d:21:3d:cf:52:aa:e5:47:72:43:5e:f6:5f:3b:06:3f:
7d:e9:95:c6:4c:10:f0:44:52:ec:87:f4:74:3c:42:95:1d:6b:
71:56:c2:03:85:d8:57:d9:3b:6c:4f:36:41:37:fe:b3:32:4f:
8f:71:02:7c:5c:ad:17:ef:08:07:3b:6a:78:bf:d6:17:29:ea:
dd:f5:d0:83:1c:a0:fd:31:45:14:44:d2:5e:e0:25:9d:56:1f:
50:c6:f8:b0:35:64:9a:06:6f:b9:a8:13:c2:c1:a6:77:69:18:
f0:c0:c8:ee:26:fd:c7:95:da:ff:9a:db:06:3c:de:dd:d2:cf:
2d:cb:95:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:32 2026 by rpki-client