Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
File: OUjkpbK65iNUmZE9y-wE38pTHpA.mft (raw, json)
Hash identifier: CSMUl2UTvf7a83sc5XvM5pedcqMlfKp0Da66zix4j2g=
Subject key identifier: BC:2F:C5:A5:70:F3:84:94:C0:C2:59:32:72:EC:01:24:AF:79:F8:BE
Authority key identifier: 39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
Certificate issuer: /CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Certificate serial: 019D9B87C13EF849C66134B503FD9319B242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
Manifest number: 1794
Signing time: Fri 17 Apr 2026 13:00:58 +0000
Manifest this update: Fri 17 Apr 2026 13:00:58 +0000
Manifest next update: Sat 18 Apr 2026 13:00:58 +0000
Files and hashes: 1: OUjkpbK65iNUmZE9y-wE38pTHpA.crl (hash: nQzcmNtqr7ZflesgwTq+hPBi96SufRZTqvBqvRdAea8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:c1:3e:f8:49:c6:61:34:b5:03:fd:93:19:b2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948e4a5b2bae6235499913dcbec04dfca531e90
Validity
Not Before: Apr 17 13:00:58 2026 GMT
Not After : Apr 18 13:00:58 2026 GMT
Subject: CN=bc2fc5a570f38494c0c2593272ec0124af79f8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f6:19:81:93:aa:33:6b:94:cf:16:5f:57:5d:
04:da:03:02:13:33:a9:6a:2c:ed:bd:f4:6d:c0:4b:
4e:6c:6a:47:45:74:96:ad:fb:fc:03:25:85:2d:13:
89:47:19:e5:d7:74:4b:02:87:f7:47:65:ef:f6:5c:
c1:71:29:f6:59:0d:7a:a3:a7:fe:51:7b:46:11:cf:
a6:2e:d4:61:6d:8d:6e:5e:2d:95:ec:06:b1:89:21:
c1:18:36:4f:e2:c0:38:14:8b:00:e2:e0:c4:5c:ef:
49:29:65:b6:57:4e:9b:17:d8:c5:f7:17:90:af:6e:
68:84:c0:07:db:d1:23:60:b2:8a:2b:b3:cf:54:d5:
20:12:8c:b7:ec:9c:5d:ed:a1:54:0e:bd:35:c8:59:
7c:70:96:70:e3:14:d0:6c:e5:ff:a6:aa:c6:94:9e:
c5:37:26:54:90:e1:97:55:77:88:d7:b8:f1:62:fc:
8d:8a:9f:92:9c:ba:72:2f:de:b1:27:5f:d3:94:ed:
f9:f4:c7:aa:50:ef:d0:92:f1:ea:86:03:fc:71:ac:
34:40:d3:c6:71:9c:fa:83:e2:ae:f1:1c:ce:1c:0c:
56:42:6f:45:2c:c7:00:15:1b:d6:45:4b:d8:d2:b3:
6b:d8:d9:9c:e3:81:d5:50:29:fe:60:bf:d0:c5:6c:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2F:C5:A5:70:F3:84:94:C0:C2:59:32:72:EC:01:24:AF:79:F8:BE
X509v3 Authority Key Identifier:
keyid:39:48:E4:A5:B2:BA:E6:23:54:99:91:3D:CB:EC:04:DF:CA:53:1E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUjkpbK65iNUmZE9y-wE38pTHpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b1c3f3-7a40-432c-b41e-f650e507a76d/1/OUjkpbK65iNUmZE9y-wE38pTHpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:9e:85:13:be:cf:52:cd:34:0b:8d:e3:91:36:81:8a:1e:de:
9f:d0:9f:e5:e7:66:f7:40:6e:6c:00:7d:56:d2:66:7f:cf:c9:
20:8e:08:d4:87:b8:69:17:71:38:1c:4e:62:bc:99:b7:a7:8c:
d2:e0:a6:00:53:52:40:53:da:a5:57:5d:be:71:29:ed:b0:45:
bf:82:3d:4e:35:18:89:90:88:63:00:26:73:83:8f:02:40:be:
bd:00:8a:52:4f:0a:c0:7e:9b:50:e1:7d:f7:a1:f6:71:34:08:
a9:87:94:c7:2b:0a:d7:f5:77:bb:09:ba:7e:b1:82:a3:f4:2d:
9b:8c:d6:0e:ae:c6:02:3f:8d:9e:fe:2b:9f:ac:0b:0b:31:83:
6b:79:0b:70:5c:65:22:cb:08:33:d8:aa:e8:a7:98:ff:8e:c4:
a2:c6:bc:37:db:2c:65:b4:e5:f8:52:1a:76:0a:eb:5c:57:b1:
bb:21:82:21:02:9b:63:6b:c8:9b:ba:c8:c7:57:95:62:1f:92:
32:72:10:b7:6c:8d:72:73:a0:f9:ec:ff:63:3d:07:57:00:35:
51:d0:09:67:45:20:8e:1f:7e:e4:ef:73:a6:f0:75:3d:b5:73:
49:91:f6:fd:30:7a:fd:8a:ed:dc:3b:90:eb:a2:3f:ec:b4:64:
80:78:59:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:29 2026 by rpki-client