Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
File: Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft (raw, json)
Hash identifier: 03LfxhXg9R8+LnLyZfVf+esIyAMgzZQhSd4pCcxGJw4=
Subject key identifier: F2:4B:30:E2:31:D0:17:14:93:F7:3A:D3:7B:3D:AD:E4:EA:49:BA:A9
Authority key identifier: 39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
Certificate issuer: /CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Certificate serial: 019D390A1E9D07B69B6E2986E53B49FCD36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
Manifest number: 113C
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl (hash: fgwczKoKkFq0PeeYxJdvYaasqqMnfYNkWFZKWeqEXUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1e:9d:07:b6:9b:6e:29:86:e5:3b:49:fc:d3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39fda6ed161f822b82bead29ee1061c68ffd4aec
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=f24b30e231d0171493f73ad37b3dade4ea49baa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:81:b6:65:b9:e0:60:3e:a0:25:1a:bc:a2:
50:06:30:3d:48:20:65:66:04:46:05:c5:b0:f8:6b:
e2:7f:b3:68:58:7a:04:9b:8c:33:89:73:05:79:0c:
eb:b8:07:71:d3:29:e6:ec:6e:f0:20:5a:91:07:e4:
cb:46:68:d3:0e:20:12:0a:b7:88:57:35:64:92:87:
02:1b:1c:44:ac:81:24:de:03:9a:79:8d:af:50:c1:
b6:38:17:3c:2c:8e:7b:17:02:af:59:8a:83:3b:e1:
6f:95:2a:cc:2b:c0:81:a9:f3:6a:c9:4e:96:1f:21:
fc:f7:b4:6f:cd:b8:22:f0:c3:f6:7a:fc:71:f0:08:
6a:f9:8e:e7:24:75:eb:32:d6:84:26:5c:d9:12:f7:
19:03:49:b6:2a:32:6d:e2:0c:26:1b:48:8f:ce:43:
98:23:ce:e6:78:09:49:77:21:2f:d1:b3:ca:09:b5:
df:0c:d6:2d:d4:3c:01:4a:97:9e:43:be:ce:09:69:
42:71:3d:70:8b:9c:f5:02:4b:03:40:34:8c:12:d6:
64:13:3f:0b:55:05:9a:61:bf:fa:a2:4e:ca:56:5d:
12:01:e0:67:8a:42:62:f8:03:a6:2e:3c:c9:c0:7f:
3d:35:9b:f5:39:a0:73:96:80:66:c6:dd:9d:41:9a:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4B:30:E2:31:D0:17:14:93:F7:3A:D3:7B:3D:AD:E4:EA:49:BA:A9
X509v3 Authority Key Identifier:
keyid:39:FD:A6:ED:16:1F:82:2B:82:BE:AD:29:EE:10:61:C6:8F:FD:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of2m7RYfgiuCvq0p7hBhxo_9Suw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11eb93-7ea7-4b7d-ac57-cc37c272b771/1/Of2m7RYfgiuCvq0p7hBhxo_9Suw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6a:c2:63:9e:ff:49:a2:59:8d:49:d7:eb:c8:43:c5:af:6b:
ec:b0:55:ad:c0:9a:ca:6c:59:26:cb:6e:e9:ef:59:5c:dd:f6:
70:85:52:3d:0f:f2:28:08:43:a5:4d:fd:89:28:81:24:9f:68:
76:0d:6d:84:03:66:cd:cf:be:99:d5:cd:71:5a:22:7c:38:62:
17:d9:65:bd:6f:94:27:2c:99:b9:8e:94:18:2d:3b:fa:fb:6a:
d2:e8:6c:a4:b3:95:ff:68:80:04:3c:a0:8c:c8:67:8c:92:da:
0b:5f:66:d4:86:b8:44:ba:81:65:fb:95:4b:68:65:94:d1:7d:
b2:ab:e2:6f:5b:d0:8e:29:68:af:5b:a2:15:75:f9:29:ae:ca:
85:42:2a:c9:b6:1b:27:b7:70:10:36:91:8c:29:ff:41:c3:d7:
90:26:ff:a5:e9:90:dd:3e:7f:17:ed:97:43:a9:c9:86:be:28:
42:a4:f1:73:d1:da:7b:8c:fe:a5:93:6a:72:e2:f2:e5:4d:59:
12:c7:c0:9b:18:90:84:e3:e3:94:8e:79:2c:7b:43:ab:48:b3:
5a:3d:62:4d:b2:3d:52:5a:97:de:a3:20:2e:0e:b7:e4:ad:3d:
65:19:ee:28:cb:93:77:d0:e5:90:c6:db:ce:f5:31:df:65:6d:
09:d7:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:15 2026 by rpki-client