Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json)
Hash identifier: 1Arl4s5/Bi/uqQ8Jj42YJGCr2gLG0u62Pau1KlDIdtw=
Subject key identifier: C9:C5:3A:BD:31:D2:44:70:55:0C:4E:D3:22:CE:07:D3:13:80:9B:90
Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Certificate serial: 019D98F4739AEDE57D55014C73CBDF75FAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
Manifest number: 112F
Signing time: Fri 17 Apr 2026 01:00:50 +0000
Manifest this update: Fri 17 Apr 2026 01:00:50 +0000
Manifest next update: Sat 18 Apr 2026 01:00:50 +0000
Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: p7c7c2ZA+YhyqfMtk+RbZbnNa1Gm0mnUzDFyawNJXrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:73:9a:ed:e5:7d:55:01:4c:73:cb:df:75:fa:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Validity
Not Before: Apr 17 01:00:50 2026 GMT
Not After : Apr 18 01:00:50 2026 GMT
Subject: CN=c9c53abd31d24470550c4ed322ce07d313809b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:68:fc:8e:11:70:9e:55:8c:fe:d6:0a:d7:
91:50:fa:bf:89:fa:a5:0c:90:ac:d2:54:c7:b5:4f:
1e:33:0a:f2:df:98:79:f5:a5:36:c7:fe:b5:e5:5f:
10:0e:91:fc:c2:33:96:91:81:0b:9b:5a:1f:5b:e6:
58:04:77:97:be:23:12:18:c0:8f:33:d3:bc:da:b3:
73:a8:f8:e8:c9:e2:2f:d1:79:16:45:f9:90:a2:9c:
28:92:40:40:45:c6:5b:f4:f1:00:d0:ac:c5:e1:4a:
0b:3e:e0:11:25:9d:8d:26:ad:3d:0b:12:cd:39:ae:
df:9b:bb:52:76:48:57:61:4e:44:92:31:af:20:d0:
41:83:9b:11:38:3d:83:79:05:26:53:c6:49:ca:d4:
d8:33:d3:5a:a2:2b:9c:e3:b0:dc:34:05:b2:01:de:
03:5e:0b:0a:f1:1a:00:1c:76:e1:e3:9e:bf:eb:67:
89:21:43:b5:b6:46:17:4a:27:a4:2a:a0:59:b5:14:
cc:43:e5:96:86:e3:ab:04:03:3d:b2:a8:5d:c2:8d:
0b:59:3b:cc:14:31:4e:2e:44:d4:0c:c8:64:5b:d6:
fd:d3:bb:19:2d:dd:57:e8:b9:7d:22:3f:84:c4:2e:
88:84:3a:92:d8:fb:8a:da:c5:d4:71:f7:98:8c:78:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C5:3A:BD:31:D2:44:70:55:0C:4E:D3:22:CE:07:D3:13:80:9B:90
X509v3 Authority Key Identifier:
keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:66:bf:91:60:99:fb:e8:f6:e7:ad:ef:77:84:f8:82:8b:b0:
2d:07:c0:87:74:c9:7c:8b:87:ff:32:9d:e6:62:e1:b5:0b:bf:
20:65:45:5a:1e:f4:d2:a6:d0:4f:22:df:ce:d2:a5:bc:e5:f1:
38:74:a6:c3:f4:88:ea:57:f9:d3:dd:22:ee:9b:30:e1:d1:5b:
bc:40:86:dd:f4:9e:f5:cb:84:76:09:03:a5:4d:27:d2:ef:d9:
b0:84:e7:1e:43:60:9d:1a:f3:b6:4d:7d:76:3d:cd:5a:50:ad:
c8:b4:12:83:c5:58:4e:1d:f9:cf:55:3c:d2:f7:b5:b2:36:dc:
72:3c:32:7c:ed:cd:0f:02:d7:fc:ee:1f:2c:69:a2:a6:a2:a6:
5e:be:95:88:f1:e4:a0:a9:97:f9:3c:43:8b:ce:5f:10:7b:7e:
c9:14:18:d9:e7:77:ea:75:af:97:92:ee:8c:52:04:2f:10:23:
a9:c9:e4:ef:ce:0a:5e:01:ec:94:b7:44:7b:9b:d0:c6:fc:bd:
21:94:2c:75:1a:5c:fc:ad:dc:b0:a2:fc:fb:3d:a3:67:e4:f3:
b1:3f:e1:1b:38:48:9f:bf:4a:e8:c9:f2:24:f8:a6:f0:a3:2e:
a1:be:83:a8:ed:9f:ed:a8:37:77:9c:d6:c3:9b:78:54:e6:bd:
f8:51:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:12:56 2026 by rpki-client