Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
File: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft (raw, json)
Hash identifier: IDtrLeJM4rmZ4LBMHe7lZVEA0RdhUsTqhZXB1FvGoE8=
Subject key identifier: B6:E4:C6:25:26:CC:87:1F:4E:81:35:D0:D7:6E:EB:20:2C:A8:DE:C6
Authority key identifier: 39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
Certificate issuer: /CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Certificate serial: 019D37894F609AA8BEDA5A20CED856CD0A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
Manifest number: 05E5
Signing time: Sun 29 Mar 2026 03:00:38 +0000
Manifest this update: Sun 29 Mar 2026 03:00:38 +0000
Manifest next update: Mon 30 Mar 2026 03:00:38 +0000
Files and hashes: 1: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl (hash: n/jkO6ETPvU2bIN2xN9ai9BY6HPgz4ynhAZo4CMYsVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4f:60:9a:a8:be:da:5a:20:ce:d8:56:cd:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Validity
Not Before: Mar 29 03:00:38 2026 GMT
Not After : Mar 30 03:00:38 2026 GMT
Subject: CN=b6e4c62526cc871f4e8135d0d76eeb202ca8dec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:17:76:50:b9:13:6f:2e:65:e3:b6:19:87:aa:
ec:07:67:20:5c:c2:5c:d1:ac:9f:c4:ca:c5:2d:0c:
e8:8e:21:2e:78:6f:c7:32:e6:fa:80:24:ba:cc:ea:
a5:7f:11:04:14:37:bb:79:04:f8:a4:66:5d:c5:65:
8e:d0:1d:20:cd:e1:fb:64:e3:4b:e7:24:e1:6f:b6:
e9:84:10:5c:ad:63:c6:d4:19:fc:63:4d:b4:99:de:
73:0c:d4:8e:d6:64:de:06:54:d6:5b:bb:dc:b6:80:
6f:d9:f6:f3:79:43:c2:9e:51:e3:b9:98:fb:34:01:
29:5e:7e:5a:a1:74:44:17:2b:e5:de:73:82:9e:4e:
6f:de:23:3c:d4:34:eb:00:5c:a2:a2:dc:3f:32:29:
06:d7:43:3a:42:b1:bf:d5:0c:e5:b9:cd:b2:7a:dc:
aa:27:90:33:fb:d4:c6:8e:f3:3b:26:5f:61:94:48:
2c:08:10:f6:47:cf:c7:48:77:e6:08:bd:32:20:a0:
83:23:85:6a:f0:1f:61:7b:c1:ae:7e:3d:d0:d7:95:
0e:3a:07:a9:47:61:24:97:f7:47:16:17:13:e9:f4:
e8:3d:59:ad:cb:37:37:00:39:1c:ea:8b:16:49:a7:
ae:6f:ea:34:37:11:f0:20:32:d0:68:a6:4a:c5:05:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E4:C6:25:26:CC:87:1F:4E:81:35:D0:D7:6E:EB:20:2C:A8:DE:C6
X509v3 Authority Key Identifier:
keyid:39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1c:47:e0:44:28:f7:fb:45:08:ae:03:8f:b7:8b:42:0f:19:
23:f0:d6:9c:00:f3:5f:d5:07:ac:d1:a2:70:a9:a1:6b:bd:ff:
32:9b:29:80:bf:3c:67:41:2a:4b:96:14:47:36:8c:f1:8c:c9:
f8:64:d2:66:0b:2f:f5:8a:f9:26:72:77:1f:c7:a1:f3:90:de:
34:43:49:19:c3:8f:fb:dc:b9:29:73:54:8a:0c:67:d1:9f:8e:
ba:a0:06:29:ae:42:c6:0d:73:04:da:7e:78:df:5f:74:f5:f6:
3b:df:c5:45:19:18:d0:c9:b7:41:e7:77:44:79:51:24:da:d7:
d5:bd:64:0c:ff:a6:68:30:98:34:2d:c4:2c:56:c8:37:13:41:
d1:65:90:2f:cd:6e:28:9c:0c:06:45:32:e9:65:4c:e7:ee:e4:
bb:59:65:4f:6f:95:42:14:c6:5c:16:1d:44:6c:00:c7:95:84:
fd:1c:6e:3f:66:fc:ee:cc:dc:01:e4:58:67:5d:d6:9b:99:68:
5f:b4:a2:72:6e:d1:8b:9d:59:6b:f1:0a:59:b2:0d:00:cd:38:
a9:65:41:aa:5b:db:c8:2e:c1:62:20:77:ad:7a:50:7e:f3:32:
d1:d6:52:6a:cb:f1:62:f0:37:33:7a:79:a8:c2:0b:a5:dc:9d:
90:d9:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:05 2026 by rpki-client