Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: 43fTvZt0w1CbGdl6B/2b9DMNzzgadVCQ1so3ly3vioA=
Subject key identifier: C1:6A:47:D9:F3:EE:76:C1:D9:AE:72:0E:56:18:5E:A2:C8:24:C3:40
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 019D3A53DC25120A309B694E1986900DAA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 1859
Signing time: Sun 29 Mar 2026 16:01:07 +0000
Manifest this update: Sun 29 Mar 2026 16:01:07 +0000
Manifest next update: Mon 30 Mar 2026 16:01:07 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: i3E8WISYZGx2QqKh9voK98g6yhfEjQ215KIN5p4278U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:dc:25:12:0a:30:9b:69:4e:19:86:90:0d:aa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Mar 29 16:01:07 2026 GMT
Not After : Mar 30 16:01:07 2026 GMT
Subject: CN=c16a47d9f3ee76c1d9ae720e56185ea2c824c340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:08:2a:f2:72:77:2d:a6:6d:67:31:82:76:
15:da:9a:bc:0b:c8:6d:21:0d:83:0b:f3:21:a1:a9:
c9:b3:7b:f9:38:28:94:69:f0:a8:3c:a2:7a:22:44:
c7:a4:99:da:ad:c2:ff:4e:e0:52:a0:4f:2c:57:fa:
b3:3e:12:2d:ae:d8:08:62:cd:d4:fa:91:9d:92:b8:
68:1c:be:72:24:87:04:e5:01:ed:1c:13:d3:ab:21:
7d:6a:c1:2e:b7:5c:29:33:9f:c4:68:43:f1:f0:88:
98:6f:4f:b7:31:14:45:9d:8c:4b:1a:72:88:d7:34:
52:71:fa:07:59:8d:6d:ed:33:0e:cb:b7:ea:c2:0c:
de:da:5b:98:5f:44:ae:81:1f:fc:ae:1a:a7:3d:31:
6d:69:79:f4:bf:3c:36:00:ca:3f:97:e2:21:c6:70:
6e:c7:99:e1:f2:dd:0c:f9:36:33:7e:a4:9b:25:99:
07:14:b5:76:ee:55:c5:56:28:0f:5f:33:6e:2a:c7:
d1:70:c2:c9:8b:b7:35:89:af:ca:e7:97:79:09:6b:
3d:21:29:03:b2:f0:d3:df:91:39:79:97:36:10:4a:
29:1e:6e:d6:06:03:2f:c9:43:6a:c2:fb:85:3b:af:
73:24:57:39:50:f8:e3:7d:f8:f2:e6:05:0e:2f:47:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:47:D9:F3:EE:76:C1:D9:AE:72:0E:56:18:5E:A2:C8:24:C3:40
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ea:97:aa:f1:74:1d:5d:35:43:e0:5a:40:04:df:63:8f:97:
f2:93:45:ec:68:88:b9:ad:91:14:81:36:8b:99:6e:39:45:b1:
46:14:f3:ee:da:a4:58:5d:d5:26:92:99:ed:2b:58:f1:93:04:
b6:8f:51:08:73:7d:9d:38:14:9d:60:fd:c7:11:c5:e6:0d:d0:
00:5d:63:78:fd:e2:ec:50:50:89:8e:03:7f:e5:3e:84:99:ce:
27:b6:06:0e:33:a6:3f:5b:04:05:2d:29:1f:4b:04:28:fc:37:
1e:85:30:7c:8a:87:47:71:b6:2d:5f:07:fa:4e:85:c0:a0:54:
f9:56:b9:a2:3f:1e:b1:35:b5:73:59:59:2b:f8:a1:2e:fb:fc:
0e:53:e1:69:5e:7e:28:ae:bc:e0:69:8d:dc:9d:05:5c:54:14:
c0:94:f1:93:78:3b:ed:46:88:20:3b:3e:1f:29:22:35:29:16:
83:b2:fc:61:73:d3:e6:db:99:ed:60:34:c9:a3:96:89:05:93:
0d:cb:a8:4e:d3:07:27:6c:11:23:8f:a3:11:d7:4b:ae:6f:56:
89:db:f5:39:b5:f7:c3:96:65:f8:29:2c:74:af:73:dc:a9:94:
ae:79:4f:8d:b9:a9:8b:f8:37:30:fb:fe:e7:d1:58:cb:97:b8:
a9:a8:73:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:04 2026 by rpki-client