Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File: oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier: IKkyH/hq/D2DwQBidiOEjgCpuJhrbm4WpNGXKSqYPLE=
Subject key identifier: 87:3F:40:7B:CD:44:57:57:9E:84:2C:FD:64:81:66:42:FE:26:3D:2D
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer: /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial: 019D3753365D2C545654B20CF49C7A575C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number: 120A
Signing time: Sun 29 Mar 2026 02:01:33 +0000
Manifest this update: Sun 29 Mar 2026 02:01:33 +0000
Manifest next update: Mon 30 Mar 2026 02:01:33 +0000
Files and hashes: 1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: WvB6u0ikz6482ZKkp70Z5r2egewQ5ItUCmr/vn7dLOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:36:5d:2c:54:56:54:b2:0c:f4:9c:7a:57:5c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Validity
Not Before: Mar 29 02:01:33 2026 GMT
Not After : Mar 30 02:01:33 2026 GMT
Subject: CN=873f407bcd4457579e842cfd64816642fe263d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:eb:fc:7b:34:52:d3:a5:84:d4:c7:88:b7:3a:
87:fa:1f:7b:7b:1a:99:44:b2:fe:e5:3e:14:b8:20:
2b:64:44:96:a7:f7:78:12:30:34:b5:4d:cf:d5:c5:
d8:35:91:df:82:d7:a8:34:a0:c8:83:14:15:9c:6b:
37:05:85:54:a4:2d:ca:3f:dc:3c:30:f2:72:bd:6b:
4a:c1:7c:93:1f:66:73:60:30:13:a9:c6:0a:b9:4b:
90:1c:7b:8d:13:aa:c7:dd:0f:23:ba:bf:74:59:3e:
d4:2b:43:17:c5:b4:3b:00:36:f5:0f:0b:a2:b7:44:
df:ab:23:50:9d:40:9d:66:4e:5d:d2:78:a6:27:b7:
30:2a:90:dc:2e:a4:1f:63:28:87:f3:a4:74:2c:9c:
f4:63:67:9e:a4:f9:35:1c:84:a0:14:16:38:37:91:
aa:ce:1b:5d:ff:ac:b7:94:1e:2c:40:1d:c8:18:ce:
9b:b6:db:71:04:bb:7f:a5:2b:79:58:2d:dc:d9:3a:
f9:93:70:c4:6b:d9:68:0a:cb:42:6a:53:15:fc:fe:
43:06:fc:e0:c1:b5:09:af:46:dc:03:23:9b:66:f9:
17:aa:69:e2:d5:33:bd:c8:43:ba:76:bc:1e:cf:a8:
15:27:ea:54:72:8b:ce:63:d0:44:51:3a:c5:00:0a:
71:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3F:40:7B:CD:44:57:57:9E:84:2C:FD:64:81:66:42:FE:26:3D:2D
X509v3 Authority Key Identifier:
keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:97:57:01:fe:2a:54:93:f1:63:bb:bf:6b:2e:03:2b:ee:7b:
e2:d4:97:16:67:4a:a9:64:b5:8b:a7:a0:6c:a0:ea:84:61:81:
a8:df:17:10:e4:ca:4e:c4:db:7b:d0:0b:3e:5f:e9:a8:00:23:
20:8c:78:93:f3:65:ad:42:b1:d4:2c:7d:77:ae:e3:2e:35:4b:
83:07:7d:32:63:98:4c:f2:94:0b:60:46:d5:dd:78:13:9c:f0:
47:cc:c9:d6:17:86:b9:7d:a6:60:eb:8b:1a:e6:73:de:c1:f0:
b5:9e:51:5b:e9:62:a0:03:6c:ba:6e:00:2b:33:06:09:87:1e:
cd:13:44:87:2c:21:70:0d:b3:db:85:3b:b8:b8:ad:8e:88:54:
74:c9:67:8a:a9:16:f3:eb:6b:b9:12:94:00:f6:00:e8:f4:04:
1b:9a:83:c2:ae:e5:8b:e6:17:12:e0:dc:b3:0a:78:57:e8:99:
2d:7a:9b:88:e7:54:b5:1f:3b:1d:a0:4e:f6:99:be:b2:e9:ed:
3f:9f:a8:df:ed:df:c5:3a:b0:40:e3:14:0b:fe:20:45:af:c0:
9d:9d:cc:79:9a:d0:da:6d:f1:ad:92:6c:e5:c2:e8:8e:48:cb:
eb:6e:e9:12:63:3f:9e:ca:61:85:44:c7:ec:f7:00:e9:2f:b0:
95:59:6e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:38 2026 by rpki-client