Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier: 3KHgPVrIp4hXMdD4L+Arefl1kpZpe0Q/oA+VlN0EL4k=
Subject key identifier: F1:99:3E:C9:5C:FB:58:31:F5:E0:55:66:50:E9:E4:3E:FE:C8:A0:CA
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 019D37C02A49F5E17DFE1AEB7CE755D055E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number: 04CC
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: NMVDUnorE28FLyEkd167+NHPCxtDytL+i0e+XhxKQ5o=)
2: m5e2ZDv7_-1udsvxigJbqqXmd_E.roa (hash: yOpoP5KeMEFEDYD+ejQW8hpR1s0gtVHvkYr8rcVTFC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:2a:49:f5:e1:7d:fe:1a:eb:7c:e7:55:d0:55:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=f1993ec95cfb5831f5e0556650e9e43efec8a0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8c:b0:e8:3e:07:fa:75:11:2b:19:5f:31:fe:
37:7e:d4:31:f1:d6:c0:44:56:f7:b4:6f:52:2a:eb:
a0:5f:69:d9:56:74:54:fc:a0:71:34:13:ff:c7:4b:
12:6c:69:e3:f5:8a:6c:9c:95:c3:c4:35:65:e9:96:
ea:04:68:89:1b:4e:a1:2d:f5:3c:89:58:57:9b:b6:
b9:07:bf:f0:dd:a6:db:2e:47:86:35:62:a4:09:ca:
1c:9f:a3:79:28:cd:31:7d:89:c6:4e:c3:8b:0b:21:
45:30:4d:8e:b1:bc:d1:25:10:3e:29:72:24:7e:ad:
20:c4:db:4c:98:25:4d:f6:a9:fc:86:18:85:67:1a:
ad:fd:8b:29:70:c4:eb:7e:76:a1:85:bb:b7:e7:eb:
9c:85:c2:4b:fb:ac:66:9e:76:da:cf:11:8c:5a:ad:
06:1d:cd:c8:85:64:58:00:5d:ef:e5:65:a4:18:30:
51:62:c6:b9:09:08:08:a3:fc:be:31:79:92:84:7a:
b3:85:41:38:b6:cc:1c:64:40:76:8c:e9:4b:30:e5:
bc:69:5a:a8:b9:d0:12:68:e3:15:0f:2b:54:a8:56:
53:f6:e4:b7:87:bf:15:c1:1c:3a:c4:b0:77:a1:4d:
ae:33:c6:1b:d5:0f:f1:28:1e:7c:c5:c3:32:23:fc:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:3E:C9:5C:FB:58:31:F5:E0:55:66:50:E9:E4:3E:FE:C8:A0:CA
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b5:90:97:41:eb:6c:e0:b9:83:5f:0b:f2:00:64:9e:56:e1:
bd:e9:15:94:59:9d:62:ec:1a:ae:a8:86:04:54:e3:72:88:46:
08:bc:60:4b:48:19:02:fc:e3:94:cd:27:85:4e:86:8a:e2:6a:
eb:75:b9:37:b0:a8:9a:b3:26:36:8d:f7:73:6b:8e:1f:88:57:
b4:e1:15:84:e4:8f:ef:b3:2b:62:03:dd:b1:4d:0d:c0:d2:67:
95:a3:dc:8f:ce:1e:4d:ff:71:4f:39:58:fd:c9:50:a8:5b:06:
56:38:a3:2c:05:28:1d:ed:91:a9:84:76:31:18:c1:11:92:41:
da:75:12:1c:2e:91:9d:ec:92:81:6b:a8:9c:73:69:fb:de:cd:
37:dd:6b:a8:97:db:8a:52:9d:96:d9:94:2c:15:13:57:06:c3:
66:b5:f2:4e:10:2d:f5:14:13:5a:9a:cb:96:38:ac:8c:d6:03:
be:34:c3:19:62:f5:13:b9:54:11:5d:cb:8d:bd:2b:e9:2e:dc:
ae:46:3b:2b:95:6c:d6:3a:56:79:20:36:4e:70:19:dd:a2:92:
6e:7b:86:b2:86:ea:ca:10:1f:52:1d:77:29:f2:db:45:e4:97:
73:99:a5:2e:f5:5c:e6:aa:ab:65:25:1c:13:68:51:aa:f0:c5:
c9:1e:67:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:33 2026 by rpki-client