Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
File: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft (raw, json)
Hash identifier: Z/GBVo3qzGKIFMeTfAXFTX6tc3heQpqB1ppeJais4e0=
Subject key identifier: 05:F0:35:C8:5A:47:3E:0C:11:C7:63:74:98:62:92:08:61:36:19:06
Authority key identifier: FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
Certificate issuer: /CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Certificate serial: 019D386686351BDEE1CE7A9CE0C36E6FD16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
Manifest number: 1209
Signing time: Sun 29 Mar 2026 07:02:16 +0000
Manifest this update: Sun 29 Mar 2026 07:02:16 +0000
Manifest next update: Mon 30 Mar 2026 07:02:16 +0000
Files and hashes: 1: _OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl (hash: HRpRngZ8PYh7S/XJ+e+QfbMebanU6pZITxBoJNhtwV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:86:35:1b:de:e1:ce:7a:9c:e0:c3:6e:6f:d1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce27d64a4ce95e08311afaff43e66d073fb21d1
Validity
Not Before: Mar 29 07:02:16 2026 GMT
Not After : Mar 30 07:02:16 2026 GMT
Subject: CN=05f035c85a473e0c11c763749862920861361906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:e0:a8:a7:77:02:36:1c:f4:c3:76:ae:c4:
9e:cf:08:47:fd:9d:88:e9:87:dc:94:b7:63:03:f2:
e0:4f:5b:e7:82:f7:98:47:8f:4f:74:21:f0:16:4a:
38:17:1c:4c:f9:35:67:e4:9a:b1:1a:7f:4f:87:89:
6e:03:07:c5:90:62:20:1f:05:6f:b4:14:2c:98:a2:
48:7a:98:59:9f:fa:61:5f:f5:9a:ef:ba:48:c0:6e:
e5:43:5c:84:8c:31:df:0c:b8:f1:5c:45:92:b5:b4:
12:45:ac:f0:e1:37:04:08:d2:33:c9:6a:40:31:2a:
0f:6b:77:18:10:24:ff:2e:3b:59:d3:73:cc:61:fc:
7c:fc:6c:47:5f:2a:1e:20:5d:28:e2:0f:2e:4b:85:
45:97:83:51:14:dd:da:66:c0:76:5d:d3:b7:aa:e9:
74:bf:9b:fa:40:5a:19:d9:f4:62:c5:27:63:21:e0:
e7:85:e8:ab:7d:5a:44:f3:d3:1c:04:a1:68:6d:4b:
e0:41:53:26:3c:22:2d:fa:25:84:24:65:8f:37:bd:
6b:0a:4b:0d:e2:6b:e2:ab:5c:5e:39:f6:99:74:64:
49:c4:ee:b4:41:18:e3:5f:e9:4a:77:21:0a:44:5d:
40:16:64:4a:88:e7:9d:40:15:79:6e:17:c6:a6:22:
e7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F0:35:C8:5A:47:3E:0C:11:C7:63:74:98:62:92:08:61:36:19:06
X509v3 Authority Key Identifier:
keyid:FC:E2:7D:64:A4:CE:95:E0:83:11:AF:AF:F4:3E:66:D0:73:FB:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/37dce6-ffe5-476b-808a-0014bc855bf4/1/_OJ9ZKTOleCDEa-v9D5m0HP7IdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:86:e1:5d:e6:ff:26:a2:0c:75:b7:d3:be:5c:0d:03:3e:d2:
01:cb:61:99:5c:73:9d:f2:d8:33:0f:08:5b:bb:2e:0e:e2:1e:
ab:12:b5:eb:71:f5:a9:17:d5:23:39:6a:47:cc:fa:db:43:f4:
03:fb:14:d9:34:5d:84:7d:7f:45:c4:3c:ce:41:50:d4:4a:f2:
b2:1e:23:3b:0a:f4:42:13:95:66:da:33:02:ff:73:4f:9a:4d:
e3:54:88:6a:50:5b:d9:4d:20:7c:df:f6:ef:f7:ff:55:1b:d0:
e0:9b:23:52:51:ca:a1:74:fb:90:0c:d2:d0:33:92:ee:ff:8b:
91:4e:38:91:b7:32:db:2c:3c:a5:fc:16:ad:7c:d3:4d:1f:8d:
fd:7a:bc:45:03:68:2d:c4:ee:f0:47:00:7f:a7:0b:74:dc:87:
e7:d5:3d:a8:38:7d:f5:be:36:0f:48:22:c7:2e:68:6b:06:78:
d2:f7:20:86:cf:6c:5a:c3:ba:a3:8d:b0:46:c5:67:16:87:51:
42:1f:4a:3c:1f:d9:c7:06:86:2b:ad:aa:fc:71:04:cd:58:89:
f8:9d:a7:3f:ec:f7:7f:12:7e:f0:36:7b:9c:e2:74:c9:2e:0a:
fb:d6:d8:8d:67:ac:a3:ff:e4:23:aa:13:ac:1a:eb:51:4b:c1:
5a:e2:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:40 2026 by rpki-client