Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: uGBDdcMjiOs42tC2oeL4g+TGTjJfXdIjrIGufuvKsmU=
Subject key identifier: C2:72:F5:57:EA:4B:C3:A3:67:75:8A:D6:5C:33:AD:3F:13:C1:B1:32
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 019CACEBCFBE70AB4D3915D5C2204B54C6A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 05:01:01 +0000
Manifest this update: Mon 02 Mar 2026 05:01:01 +0000
Manifest next update: Tue 03 Mar 2026 05:01:01 +0000
Files and hashes: 1: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: 3W1xUpLkdvjeJXEzDvTfTC14Kp481LJz0dqMmI9JEzE=)
2: XY5E_RelyGQ_x471R3yDmTVoDTk.roa (hash: eROWL67g5W2cGW9pnAdECfpL0HCLybLp8h6TDlEvGJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:cf:be:70:ab:4d:39:15:d5:c2:20:4b:54:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Mar 2 05:01:01 2026 GMT
Not After : Mar 3 05:01:01 2026 GMT
Subject: CN=c272f557ea4bc3a367758ad65c33ad3f13c1b132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:97:82:34:6f:11:2e:02:bd:17:e2:68:f4:
62:d1:88:bb:fd:14:7e:13:d8:2d:c7:95:e7:03:8c:
eb:a3:cb:83:a2:a7:ac:bc:0a:77:30:d5:f1:00:b0:
b9:e6:05:0e:bc:b1:45:00:85:52:b2:68:6d:b0:73:
62:ad:b3:2c:1b:b6:58:d8:53:e3:95:dd:3c:a9:0e:
36:1c:38:89:ad:7b:8a:24:03:42:0b:57:39:8a:f1:
02:93:18:a5:3f:20:55:64:d0:2c:44:17:1a:c3:ab:
8b:31:56:31:d5:2f:32:f6:35:f7:40:3e:ca:48:b0:
03:52:8f:c6:35:d9:ac:b4:ed:3e:69:9c:3c:c9:b5:
52:0e:a9:0c:fd:24:4f:e8:38:0c:db:60:8a:cb:98:
9c:47:70:90:0d:e9:a6:6d:7d:70:ef:be:23:27:64:
06:1d:9c:bd:42:8b:0e:39:af:61:5b:a5:92:2c:eb:
07:8f:1a:9d:6b:81:d3:94:51:13:01:0a:08:c8:79:
71:75:6b:24:1b:fb:41:48:33:35:56:33:0e:e9:88:
62:cb:52:6a:fb:f9:11:15:21:a4:50:7a:a7:1d:0c:
f8:bd:81:ce:67:90:0d:e5:71:26:d2:da:23:a7:a0:
33:3f:36:c2:9c:1e:a6:ab:ce:68:66:c3:39:03:5a:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:72:F5:57:EA:4B:C3:A3:67:75:8A:D6:5C:33:AD:3F:13:C1:B1:32
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:68:e9:5b:95:3d:43:31:2b:23:79:4a:94:7c:d9:82:ad:
aa:62:9e:25:be:66:10:61:ba:e9:ba:e8:b3:99:d9:bc:ac:d5:
2d:ca:12:95:c9:b0:c9:14:ce:25:7f:20:5b:5d:d8:2d:16:be:
29:75:0d:89:99:f9:8c:25:74:de:3f:81:1b:46:16:fb:ae:f9:
e9:7b:b2:7c:12:eb:75:3a:6c:65:57:ba:5a:54:7c:5d:9a:4c:
31:9d:47:46:a1:21:a2:ff:61:51:1e:06:8b:c4:2a:fd:99:0e:
fb:30:b9:01:17:a0:15:73:47:52:ab:87:fc:63:b4:12:2c:eb:
3e:98:7d:67:af:4e:42:17:67:0d:a8:e9:e2:50:5a:9e:42:5c:
26:55:4c:16:b3:8d:0d:92:ac:4d:cc:ee:b1:00:6a:e3:d1:e4:
fd:79:60:f4:7e:bc:de:c2:2b:bd:b9:eb:d6:10:20:ee:8a:4e:
1f:9b:92:0f:a7:e6:a1:9c:b7:2a:87:cf:9e:20:d2:4f:8e:54:
da:21:68:1f:f8:c9:49:ff:4d:51:d2:70:68:da:8d:c5:08:5b:
96:89:79:04:a0:28:2f:12:a6:9b:96:c3:99:51:cf:37:08:47:
5a:fd:8f:3a:9d:28:b4:f5:9a:8c:74:3b:b9:51:94:7a:9e:ae:
06:68:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:51 2026 by rpki-client