Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: bd2r5WS4cdyzFTX6dBvYj1mEiuT8rzTXFz9wVL6z2/M=
Subject key identifier: 07:D6:2F:26:98:3D:13:48:39:8E:CB:9E:54:8F:6C:68:00:BC:C5:18
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 019D38668D26DE27DD1398EEFFC69D79EA1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 1129
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: JpWmxtv0jH6ZoNUC2+KkR6DdY/L3VbxtLrg21uwW7Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8d:26:de:27:dd:13:98:ee:ff:c6:9d:79:ea:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=07d62f26983d1348398ecb9e548f6c6800bcc518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:3b:2d:54:00:68:4d:57:07:bf:e8:a8:6f:
95:dc:ad:72:a3:d2:4e:79:01:b3:65:88:b5:07:e6:
71:07:fa:c7:3d:12:9e:f3:23:02:18:17:84:4f:ba:
4c:85:44:d6:34:9a:a8:79:47:e2:f9:fc:51:6f:89:
30:05:c8:8a:8a:5a:1c:02:bd:05:35:cc:3a:f6:2e:
00:90:5c:22:17:e5:1e:6b:84:ab:e7:3d:36:5b:1e:
95:8b:b7:a9:d8:63:b4:0e:61:02:4e:b5:f0:5a:9b:
08:25:55:18:91:70:9c:17:42:77:5a:5b:1f:7b:15:
3e:b4:2f:dc:55:80:9d:71:77:5b:5b:b0:87:93:4c:
40:dc:77:81:dd:08:48:b7:7b:b9:46:46:65:37:3f:
d2:b2:32:ea:c2:72:b1:3c:fe:5f:ea:aa:b2:e1:02:
af:13:b5:08:b9:79:1b:31:80:57:ab:b1:fb:68:49:
61:60:d9:73:b7:05:09:36:b0:25:3b:29:b9:6e:e1:
05:28:31:43:c3:d5:da:7c:cb:1e:8c:30:ca:9e:9f:
84:ed:30:10:86:b2:09:ca:b1:fb:89:98:d8:0a:30:
8f:62:6e:e3:12:60:df:76:31:c0:db:ae:3d:72:5d:
4b:9f:56:91:1b:d0:a3:0a:96:d7:e5:60:38:2e:c4:
d5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D6:2F:26:98:3D:13:48:39:8E:CB:9E:54:8F:6C:68:00:BC:C5:18
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6b:1f:c8:38:6c:2b:4c:42:61:7c:da:cc:79:3d:fd:80:ba:
13:ea:78:59:f0:26:43:16:51:d3:49:67:0a:83:6d:03:f1:55:
4e:1d:48:6b:b0:e1:51:0f:65:aa:d9:e2:51:3c:a0:af:02:50:
09:fc:f5:5c:46:e7:f8:dc:e2:94:6f:cf:55:bf:fa:21:30:db:
45:e7:41:96:9c:7e:9e:3d:c1:3d:97:80:6c:71:7e:c4:54:92:
73:9d:f3:38:15:e4:84:08:1a:f2:7d:cb:8c:85:1d:9d:68:9f:
a7:b2:3c:ae:52:26:49:7a:5e:4c:7d:3d:95:bd:42:21:76:5c:
c7:9b:d6:88:3d:33:ed:27:1b:93:3e:c8:2a:52:4b:bf:92:f7:
56:1b:36:bd:80:b9:0c:18:7f:17:1d:2a:50:4d:69:a9:3a:ee:
71:e6:6d:3f:2b:b0:0a:e7:87:b7:aa:66:22:c1:b0:3d:40:5d:
cb:18:8f:a2:52:bb:ff:5a:d2:e9:de:a0:03:b8:9f:c9:66:21:
ce:42:62:a4:e1:a7:92:0c:91:40:7b:d3:1c:4f:35:1d:c7:72:
b6:8e:97:3e:8c:0f:11:91:99:ff:02:94:0d:c8:d1:62:3d:31:
34:d5:71:a2:87:39:49:8e:cc:6c:3c:3e:11:f6:59:e3:de:ee:
af:72:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:20 2026 by rpki-client