Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier: VSsVPBXrdw+6u0ZrdQdKupA3rt33rPY7u/FbDvTZUC4=
Subject key identifier: 4B:BD:2C:99:87:62:0C:FE:62:CE:7F:BA:92:91:B7:A9:05:D9:E5:B1
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial: 019D390A67186C5632ECA3C32DA0DA6168CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 10:01:16 +0000
Manifest this update: Sun 29 Mar 2026 10:01:16 +0000
Manifest next update: Mon 30 Mar 2026 10:01:16 +0000
Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: Uu8n5Zkv3GmGwZGfocsPQNdSUwoP+xdH0q7fkgKIoLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:67:18:6c:56:32:ec:a3:c3:2d:a0:da:61:68:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Validity
Not Before: Mar 29 10:01:16 2026 GMT
Not After : Mar 30 10:01:16 2026 GMT
Subject: CN=4bbd2c9987620cfe62ce7fba9291b7a905d9e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:59:fa:dc:ef:ea:69:ca:47:b0:6f:12:6e:37:
59:56:dc:b4:bc:07:02:10:94:95:6d:a6:22:58:a4:
7b:1a:7b:ee:0c:1f:ee:fd:c8:4b:8a:f4:ec:f5:e6:
5a:67:9b:cb:86:67:97:71:92:fe:f9:c3:ce:4b:b3:
02:8b:4d:f7:76:50:16:91:b2:fa:ee:a6:89:96:95:
60:d4:6f:3c:53:40:17:a5:b5:9d:c3:4c:7c:db:49:
58:7e:0b:1b:81:64:0b:fb:84:8a:d1:4d:04:db:6d:
ce:af:df:fb:0e:50:a4:9b:60:b4:6c:e7:28:77:8a:
a6:1c:96:cf:0b:91:18:1f:bc:b1:52:84:83:47:ee:
ff:8b:19:43:e3:61:cc:62:d3:fa:3a:5c:34:8b:8e:
ab:74:dc:a7:d7:40:6c:cf:71:66:0a:93:92:0a:d7:
86:2e:b2:de:9e:de:0b:23:33:5f:e3:a6:54:8d:e3:
e5:3c:b5:dc:ef:22:f9:d3:a6:6b:32:24:2b:02:33:
51:c1:f7:37:7d:24:21:4c:8c:ce:09:8d:e1:f4:c7:
d9:b1:d3:e7:d0:78:7f:c9:61:6a:a7:cf:6d:d4:12:
1d:b6:d5:9a:60:d3:58:bc:c9:9d:de:b9:ae:58:9d:
7f:5f:68:84:9d:52:e2:b5:2f:38:0f:2d:0a:89:33:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:2C:99:87:62:0C:FE:62:CE:7F:BA:92:91:B7:A9:05:D9:E5:B1
X509v3 Authority Key Identifier:
keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3c:b5:1a:3e:37:f2:8f:94:1b:17:3c:9b:d1:8b:ce:1a:9f:
8c:29:db:97:f4:e2:4e:35:e4:1b:4e:dc:89:6b:9e:1e:33:e1:
c2:1a:e1:0e:5e:8f:c0:60:b5:e4:f1:4b:1b:04:86:23:71:72:
43:3d:0d:f2:66:3e:5d:df:dd:fa:6f:5e:b9:1c:e9:f6:b2:9c:
a4:31:54:f7:6d:cb:07:ef:9b:cb:8d:55:c0:dc:a0:0c:5f:15:
5e:23:b3:0f:af:0e:19:bd:99:6c:06:ef:df:e7:78:5d:5e:c3:
9e:c9:ed:84:97:57:9e:11:ce:03:e0:81:65:d0:3f:3b:16:22:
0f:03:72:60:66:4d:5d:02:4e:70:f6:5d:92:ea:14:cc:65:69:
e0:aa:19:17:29:09:73:8f:21:76:de:7e:2f:76:cf:4e:50:c3:
a1:75:b4:4a:fe:b1:5d:57:62:f3:86:4e:27:de:30:54:58:03:
84:1b:55:95:bc:8b:80:d9:32:ba:e6:d3:b5:bd:0f:c3:0c:0c:
2f:ba:aa:a8:32:c5:08:9f:63:85:39:6f:68:fe:db:63:27:47:
c0:85:cb:ad:d8:fc:34:c8:a7:2c:fc:4d:2b:45:5c:aa:cd:35:
2e:95:2c:b3:2a:c3:80:d1:d0:d4:3a:84:54:a6:d9:2b:2a:aa:
62:04:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:58 2026 by rpki-client