Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: JbQQsNXruRTIj/3JmagfhE0mvgeVmERnlPy9r2AlTkg=
Subject key identifier: B0:70:CF:47:FF:54:1F:F6:B5:BC:9D:A1:AA:0B:BA:17:E5:FA:9D:2A
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 019D38660411F305717533949F76BE44AAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 14AB
Signing time: Sun 29 Mar 2026 07:01:42 +0000
Manifest this update: Sun 29 Mar 2026 07:01:42 +0000
Manifest next update: Mon 30 Mar 2026 07:01:42 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: xUIwK0KUOiUQyRok+U8O6TzndVhNNilPgHOiilUDMi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:04:11:f3:05:71:75:33:94:9f:76:be:44:aa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Mar 29 07:01:42 2026 GMT
Not After : Mar 30 07:01:42 2026 GMT
Subject: CN=b070cf47ff541ff6b5bc9da1aa0bba17e5fa9d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:9d:cb:98:2e:68:f7:f5:0d:ea:c5:f5:75:
12:9e:12:73:87:1f:ff:e9:3d:ea:62:ce:e2:13:59:
7d:ec:ac:c4:6c:08:63:8c:1d:d2:1a:05:90:b8:ad:
ca:09:1b:3e:75:b1:4c:91:d5:e3:92:bf:4a:67:03:
cd:f5:fb:a8:ae:d8:fd:79:21:8c:34:48:a9:41:5d:
5c:d5:82:3d:3a:9b:fb:82:da:30:49:52:69:d9:5f:
f1:78:4b:45:aa:c5:ed:f6:0a:f6:bd:c5:8e:1c:08:
03:ef:89:ef:54:c2:5a:c2:68:57:6a:f6:5d:83:44:
58:13:66:86:69:4d:97:15:e9:c1:9d:4a:69:97:36:
25:ee:86:20:a4:1a:84:61:64:1d:e6:3f:87:5e:c0:
b9:79:56:bc:cd:06:49:95:a6:a8:c9:ea:b6:53:e2:
d2:4e:98:02:35:e3:6a:22:1c:26:03:90:cd:4a:f1:
fe:a2:66:e9:b3:d9:10:04:3d:a4:93:44:78:d7:6e:
4d:95:2e:aa:0d:e8:b8:ab:8e:d5:0a:96:04:c9:df:
d2:8c:0e:ed:1d:79:ed:7d:81:83:bc:72:7a:fc:e6:
75:26:d2:af:c0:40:4a:ba:0b:01:2a:13:5c:d3:b7:
1e:1f:2b:03:5f:47:1a:b3:e1:09:99:04:a0:56:76:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:70:CF:47:FF:54:1F:F6:B5:BC:9D:A1:AA:0B:BA:17:E5:FA:9D:2A
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7e:d8:94:24:5e:46:5f:45:fd:bd:45:b1:74:01:a5:d2:ec:
20:a0:d2:dd:67:06:74:7a:3a:6a:10:1a:6a:8a:a9:ea:aa:70:
f9:fd:b1:27:a4:78:b0:89:88:d3:2a:b5:1e:d3:63:d4:d8:18:
ee:70:c1:aa:88:da:42:da:ec:cd:1f:a8:87:6c:67:a7:8c:e0:
fc:e7:78:ea:21:1a:04:07:99:85:43:20:71:c5:f2:f7:d3:48:
16:85:7a:fc:1a:05:68:39:2d:b1:7f:bc:a6:60:df:e1:d0:2f:
21:d0:49:06:3f:b8:6f:7e:1a:25:11:a5:fc:e0:69:c2:b7:00:
39:a0:3b:68:28:ff:88:bb:61:82:49:46:5d:73:fa:8f:24:c4:
a5:ec:b1:30:57:81:60:e4:20:46:a4:c1:58:7d:66:da:15:bf:
88:2d:a8:80:74:d6:47:0d:74:f7:57:a1:92:f6:bc:8a:45:35:
f5:ec:ac:d4:46:72:37:94:f4:bd:18:09:45:47:79:46:87:a4:
88:54:03:9c:6a:49:92:41:04:64:cb:ad:d2:7f:e1:54:8f:e5:
5f:8e:2c:1a:ac:1b:79:e9:d3:c8:29:36:0c:f9:ce:6c:33:f8:
ef:5b:2a:ff:69:38:6e:de:0d:82:e0:58:c7:b8:c7:67:9c:0e:
0f:53:f7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:39 2026 by rpki-client