Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
File: O1HtwFDk-YX73VeMzgKtyIDGyKc.mft (raw, json)
Hash identifier: PHc8sfu4GOMRbcxCc65qITF0Lv9HxQ6CLuJnSc6oWSQ=
Subject key identifier: 63:0A:B6:1C:21:40:42:B0:16:44:F2:C9:6A:68:D8:07:3C:61:43:F8
Authority key identifier: 3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
Certificate issuer: /CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Certificate serial: 019D38657ED3347B273D0B44A2422C7BA709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
Manifest number: 0FE9
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: O1HtwFDk-YX73VeMzgKtyIDGyKc.crl (hash: yaDZ1iXOdL8cCeU53H/ZUbIrgPKck3Eey+2h3uomR4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7e:d3:34:7b:27:3d:0b:44:a2:42:2c:7b:a7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=630ab61c214042b01644f2c96a68d8073c6143f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:aa:6b:18:77:6b:41:eb:96:78:7e:a5:9b:24:
90:17:85:4c:6e:29:a0:2f:3f:77:0b:57:3a:bd:2d:
df:0b:1f:48:9b:7b:66:28:9c:7a:94:b8:89:19:a4:
01:b5:39:71:4b:11:cf:7e:1e:e3:28:58:9b:dc:a0:
25:e0:c4:27:f6:fe:d7:0c:a7:6a:71:c9:75:4a:ce:
bc:21:36:9a:38:b7:c9:68:02:dd:3a:6c:42:01:ee:
95:3b:96:66:78:23:f7:f5:43:c6:74:9b:44:ad:da:
50:5d:fd:ea:66:21:14:4f:a1:97:b3:1d:72:81:5d:
3e:c5:52:5a:94:c1:fd:59:9e:42:e0:3a:ce:24:f8:
b6:77:0d:c0:a8:a5:d3:41:c4:ae:77:d3:1e:bb:c4:
23:21:1c:e6:d7:f8:11:c2:f4:e8:15:c9:c3:80:18:
64:9d:86:7f:43:08:73:d5:e4:29:2c:4d:d2:2e:3d:
09:4d:36:8a:c7:e1:74:53:d0:33:d3:1b:8c:9d:23:
d1:8e:a6:bc:97:aa:dc:18:54:51:32:52:fc:e2:ce:
d2:7d:99:2d:40:99:76:35:7d:13:74:08:02:52:05:
56:6c:7b:48:e2:b9:9a:bd:44:53:bf:5c:42:1c:a1:
f4:f6:15:fa:fc:9c:3b:00:24:dc:0f:54:9e:62:c5:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:B6:1C:21:40:42:B0:16:44:F2:C9:6A:68:D8:07:3C:61:43:F8
X509v3 Authority Key Identifier:
keyid:3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:82:22:e3:09:bf:62:2b:a6:7f:0d:a1:38:f1:47:69:9f:3d:
f5:b9:0f:9c:5e:01:15:24:32:44:a1:ec:21:c7:ff:af:42:85:
e0:77:34:0d:a5:a2:24:4f:5d:92:ae:10:db:b7:b9:22:76:79:
42:1a:3f:e9:e8:ce:20:9f:2e:db:06:4b:dc:3c:bb:de:ab:fb:
6f:84:d6:aa:76:80:4e:ad:26:5e:61:1d:f9:2c:2b:e4:5f:3a:
ec:64:03:ed:38:42:37:76:5d:de:88:74:5d:ff:bd:d7:f9:6d:
70:af:bd:ca:1c:0e:c0:54:50:47:83:22:1b:54:a1:5d:95:68:
b7:cc:9a:57:e9:5c:01:b0:af:79:66:5a:66:6e:8f:34:1d:98:
04:a4:ed:33:b9:af:76:b0:f5:28:6e:4a:e0:41:7a:57:f7:f8:
ec:a7:24:53:ea:a1:9f:1b:a6:fe:78:58:ef:d4:97:7b:33:c4:
ab:70:b8:7e:7c:6e:a8:75:95:71:e0:ff:40:96:e9:00:bc:d2:
85:9d:c0:0e:a4:47:17:1f:88:b3:54:eb:3d:59:c8:a9:ec:47:
b9:43:6f:ad:8a:11:d5:21:50:be:ab:25:b4:a5:37:72:89:b4:
5f:b6:c8:17:8d:ea:25:a7:98:81:21:dd:d0:26:75:95:85:91:
87:23:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:16 2026 by rpki-client