Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier: zOnYLQJn52OCLxHpwsC0zEB4eyq5pmEEHhM+moqq2mk=
Subject key identifier: 36:A2:3F:92:DB:AB:B3:67:EA:F8:12:67:1C:C1:84:41:84:99:E1:24
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 019D382DE253642FBB4767E4E9D4E0558C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 06:00:24 +0000
Manifest this update: Sun 29 Mar 2026 06:00:24 +0000
Manifest next update: Mon 30 Mar 2026 06:00:24 +0000
Files and hashes: 1: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: ElV1pDspHGzn6s6AsNYFxgcg28nNIK4VX71h9L50ADs=)
2: zhmEXTTO06gpLxWO64H29X0-CFk.roa (hash: 5E099Sh8nPjWGjRVAIGCRAKM5QSFykLo1AXb7NFz/x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:e2:53:64:2f:bb:47:67:e4:e9:d4:e0:55:8c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Mar 29 06:00:24 2026 GMT
Not After : Mar 30 06:00:24 2026 GMT
Subject: CN=36a23f92dbabb367eaf812671cc184418499e124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:9c:5e:82:06:c8:20:19:db:4b:c1:5a:d9:
9e:cd:2f:ab:f9:a2:ce:51:ae:14:fc:44:14:6a:da:
95:92:bb:aa:a4:e0:dc:e9:b6:5a:01:3b:6c:e4:12:
1e:d6:ea:5e:6c:03:e0:5c:b8:01:62:79:64:c5:b2:
7b:f4:e8:2b:1f:25:ff:68:14:f2:57:f5:fb:15:22:
82:6a:a3:4c:42:57:64:84:e7:9f:47:de:d4:b4:5d:
42:d2:0d:02:df:a5:c9:8e:d7:10:30:e9:bc:0a:db:
2b:6d:aa:3a:8b:8b:79:34:88:f9:45:19:d3:f6:f6:
8a:38:d2:dd:f3:dc:a2:90:c9:30:ae:80:d1:3b:78:
03:31:ef:ea:11:0f:fb:4d:8e:fe:37:59:b7:87:40:
72:79:a4:2e:dc:52:82:17:08:f9:8b:eb:3c:72:7a:
20:a3:1f:ee:bc:f4:67:46:8a:bd:df:24:d4:95:59:
58:59:39:f8:a5:b1:ad:81:72:f9:f6:c5:48:89:77:
fc:85:81:21:21:f3:19:c1:ac:a0:69:bb:fe:f1:d2:
f7:d8:09:bf:f6:0d:46:5b:b7:d6:d1:7d:0e:77:82:
d8:41:6a:30:14:82:e6:70:f9:87:97:17:95:5b:76:
18:6d:9a:dc:51:1e:55:e3:de:21:97:c2:84:a6:a5:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A2:3F:92:DB:AB:B3:67:EA:F8:12:67:1C:C1:84:41:84:99:E1:24
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:99:4c:e0:a5:e7:8c:f1:06:63:78:ee:5c:2a:29:79:29:cb:
22:85:d5:79:eb:b7:01:c7:f5:46:eb:3a:0f:a5:fa:84:cf:f7:
8a:ad:11:66:63:86:20:e0:65:66:18:dc:8d:f8:e2:f6:59:dc:
a0:73:b5:05:75:de:65:03:ea:55:d9:d5:db:6c:98:8b:0a:ab:
e3:28:cb:cb:6d:f9:c3:e0:ef:15:91:71:64:e1:34:97:ee:cc:
b2:53:45:05:97:45:72:12:8d:2d:52:78:65:bf:45:88:e5:d1:
f6:83:ba:7e:aa:2e:b6:4f:b3:f5:f8:69:8a:e4:4b:c2:d4:e6:
bf:ec:ee:c6:65:db:2f:34:36:28:cb:20:9d:86:46:4a:25:91:
b1:db:21:d4:e3:96:86:b1:51:2d:95:0a:e0:a9:82:af:14:ed:
ab:56:ef:15:4b:3d:9e:74:6f:84:b8:fe:46:9c:a1:3d:0a:68:
20:d0:aa:0e:72:7a:4c:94:a6:d1:9f:d1:a2:8a:26:b7:d2:46:
30:41:03:bb:bd:7f:b2:94:ed:1a:09:6b:ca:50:82:6f:a7:92:
5e:49:37:8b:46:f3:40:78:92:ef:24:61:cf:1c:41:01:dc:ef:
72:e3:c2:48:3c:db:36:c9:b2:01:bb:08:1b:ef:83:2f:7f:5c:
05:c6:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:52 2026 by rpki-client