Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fd60b8-88d0-4fdf-950e-d20252461ddc/1/OGAlwD1UXJjL3PKg2AgS_ANkUYw.mft
File: OGAlwD1UXJjL3PKg2AgS_ANkUYw.mft (raw, json)
Hash identifier: 3eEVvktc1C5FuvqPbQYehHhtX+H1HnQKb1Ywz86/5NQ=
Subject key identifier: 04:7B:6E:1F:B7:2E:2A:43:15:98:EC:D9:B5:0A:84:07:09:6A:53:07
Authority key identifier: 38:60:25:C0:3D:54:5C:98:CB:DC:F2:A0:D8:08:12:FC:03:64:51:8C
Certificate issuer: /CN=386025c03d545c98cbdcf2a0d80812fc0364518c
Certificate serial: 019D3A1C3DF4D03E9D46550B74CF447AD96E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGAlwD1UXJjL3PKg2AgS_ANkUYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fd60b8-88d0-4fdf-950e-d20252461ddc/1/OGAlwD1UXJjL3PKg2AgS_ANkUYw.mft
Manifest number: 2E
Signing time: Sun 29 Mar 2026 15:00:22 +0000
Manifest this update: Sun 29 Mar 2026 15:00:22 +0000
Manifest next update: Mon 30 Mar 2026 15:00:22 +0000
Files and hashes: 1: OGAlwD1UXJjL3PKg2AgS_ANkUYw.crl (hash: /asxb5puHv7/mfM3uMrVoADWhhuDlIWs/+X/C6/FW5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fd60b8-88d0-4fdf-950e-d20252461ddc/1/OGAlwD1UXJjL3PKg2AgS_ANkUYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fd60b8-88d0-4fdf-950e-d20252461ddc/1/OGAlwD1UXJjL3PKg2AgS_ANkUYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/OGAlwD1UXJjL3PKg2AgS_ANkUYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:3d:f4:d0:3e:9d:46:55:0b:74:cf:44:7a:d9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=386025c03d545c98cbdcf2a0d80812fc0364518c
Validity
Not Before: Mar 29 15:00:22 2026 GMT
Not After : Mar 30 15:00:22 2026 GMT
Subject: CN=047b6e1fb72e2a431598ecd9b50a8407096a5307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:7e:6c:d5:f8:0c:c7:fc:c3:55:1c:dc:1f:
f4:4d:70:28:81:0d:e3:5c:6e:e6:09:95:9a:e5:61:
2c:bc:90:dc:0e:63:8a:ee:93:6f:7b:89:ea:81:85:
2b:37:6f:8e:15:eb:61:21:61:10:c4:15:b6:03:34:
05:3f:4b:68:ec:67:2c:bf:32:2d:37:d8:a8:97:4b:
16:36:c2:5f:c7:3b:64:53:5c:43:03:90:51:14:ad:
7b:30:7c:4c:1a:9e:df:e8:bd:6e:e1:ca:b5:c4:e1:
6e:0c:57:cf:09:d0:f7:c6:5f:a3:d9:90:a1:cc:80:
7f:26:db:d3:6c:05:78:35:dd:0e:3d:39:c2:5d:f1:
e8:35:5a:b1:9e:4b:e0:09:c6:be:7b:e2:9f:4e:8e:
3e:00:cd:ec:97:0b:18:ad:60:f1:70:9f:1f:5d:6f:
2f:97:e6:52:a4:9a:10:37:fb:75:d1:71:be:84:2b:
c5:40:d8:84:e4:ad:63:be:92:e6:de:94:66:bc:78:
09:73:ea:27:33:2f:f6:d2:a3:7f:c4:7d:8a:09:11:
f7:b4:05:0e:5f:30:2e:94:bb:bc:20:2c:0d:9e:80:
e6:01:5a:b1:10:74:60:31:35:d1:6d:af:5c:d0:7d:
f1:f4:b3:be:87:35:2a:41:aa:e6:82:80:8c:41:4e:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7B:6E:1F:B7:2E:2A:43:15:98:EC:D9:B5:0A:84:07:09:6A:53:07
X509v3 Authority Key Identifier:
keyid:38:60:25:C0:3D:54:5C:98:CB:DC:F2:A0:D8:08:12:FC:03:64:51:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGAlwD1UXJjL3PKg2AgS_ANkUYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fd60b8-88d0-4fdf-950e-d20252461ddc/1/OGAlwD1UXJjL3PKg2AgS_ANkUYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fd60b8-88d0-4fdf-950e-d20252461ddc/1/OGAlwD1UXJjL3PKg2AgS_ANkUYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:50:b1:58:84:8e:eb:b2:1a:14:47:ce:29:7b:ce:21:ee:6e:
e0:f8:2a:61:95:69:5c:29:38:b9:5f:04:cd:a3:b9:78:6a:0b:
e6:cb:c4:99:0d:e8:9a:77:ea:2b:55:77:e0:4a:4a:27:17:48:
2d:30:af:ed:4b:5a:94:bf:83:2b:32:1a:fe:32:8d:6e:c0:2a:
6b:fc:1f:9b:3b:6b:47:1a:72:61:75:c3:e5:85:be:1d:e3:93:
e2:f5:85:a8:9e:ea:95:af:6b:07:b5:60:ab:67:40:d0:e7:a0:
e9:bb:e0:fc:60:28:2f:42:8e:9b:82:d7:a6:ad:e1:db:82:b5:
27:d8:29:65:2b:fa:d5:55:a0:e8:c8:c9:ad:02:50:1d:1d:c8:
c7:ed:b4:b8:b9:2f:61:02:36:6f:55:6a:dc:c8:32:70:07:0a:
d5:31:e0:d2:d6:b7:3c:95:1b:b4:26:ac:fe:40:15:4d:6d:2f:
a0:f3:93:62:a0:c1:3a:32:50:ae:6c:62:a6:75:86:8d:71:68:
ba:b7:31:c8:d2:bc:f5:b4:a6:da:90:10:81:46:c7:80:1c:81:
90:e5:f7:0f:22:7a:a3:59:35:fe:37:6b:f4:4f:2c:7b:2d:5a:
2e:f6:bf:dc:26:9d:38:73:6a:91:e4:4e:f0:3f:f7:5a:85:dd:
22:4f:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:31 2026 by rpki-client