Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: XvHuhOZaBRRLbQi1G/Z7gfkb6DrXV6ms0KJZ3dZIdoE=
Subject key identifier: 5F:4C:B8:28:C5:17:39:39:04:00:09:18:9C:DA:A1:98:56:64:A6:DB
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 019D9818FC3462771068D42B21082772845A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 117F
Signing time: Thu 16 Apr 2026 21:01:07 +0000
Manifest this update: Thu 16 Apr 2026 21:01:07 +0000
Manifest next update: Fri 17 Apr 2026 21:01:07 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: rhJVC3ZAYb477JJJgIjBXPE6v6JqSSWpr9uKYgjKIjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:fc:34:62:77:10:68:d4:2b:21:08:27:72:84:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Apr 16 21:01:07 2026 GMT
Not After : Apr 17 21:01:07 2026 GMT
Subject: CN=5f4cb828c5173939040009189cdaa1985664a6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:ae:b3:a5:68:c6:da:c4:96:4b:41:d3:e0:
ad:c8:56:fa:94:00:f6:b3:a1:47:c7:15:c6:fc:da:
3d:fe:5a:4b:53:30:7a:f6:6b:d9:5b:b7:48:ad:d8:
03:6c:b2:8e:0f:57:0f:25:f7:ec:7e:e8:7d:94:3a:
e7:0b:c8:12:7f:a0:c5:57:81:57:c4:eb:61:bd:ec:
a2:94:a1:f0:40:9c:85:81:9e:4f:e3:8e:ea:32:9a:
9c:d8:72:86:fb:f9:a8:9a:eb:7f:15:a7:d7:cb:72:
32:23:55:b8:ec:70:7e:bb:1d:71:d5:34:52:ab:0e:
80:40:85:a9:f2:12:c7:12:cf:f5:14:fe:20:ec:c5:
8d:68:98:7b:29:e1:e7:61:0e:4a:dd:e5:bd:d8:3a:
10:9d:08:6a:31:5f:8e:0a:d3:c1:02:1c:83:20:6d:
3d:e9:41:12:09:66:03:5d:f0:13:fb:1d:cd:af:58:
54:1f:82:33:55:38:6b:51:ef:25:dc:ee:24:7c:16:
36:ec:68:0e:e8:8b:ad:b2:56:0d:ce:92:6e:f5:29:
ca:12:ce:2d:c0:28:2c:f1:16:13:2b:3f:85:d2:ce:
45:40:d6:16:24:b9:d4:ac:b6:e3:fd:97:aa:96:f3:
06:f9:7c:ef:c3:f4:c2:5d:cf:4d:5f:50:d1:0b:d9:
bc:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4C:B8:28:C5:17:39:39:04:00:09:18:9C:DA:A1:98:56:64:A6:DB
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:00:ec:88:be:45:e7:e8:fc:11:a0:20:d3:a4:53:1e:44:b4:
6a:4f:43:7d:fd:03:d0:39:f7:17:11:ef:e1:2f:53:73:bb:0c:
6a:c2:5c:9a:de:ff:d0:77:0d:bc:81:e6:03:ff:ff:23:50:62:
17:38:4a:25:26:53:06:de:1b:fc:13:51:c3:1e:6c:46:9e:c3:
e6:ad:3b:4e:54:54:dc:a4:cf:3c:30:9e:40:22:92:48:c1:88:
4d:dc:5c:29:3c:ce:00:d4:4f:7b:56:a6:e3:e6:16:9f:4a:5a:
7f:ab:2c:35:a8:eb:84:da:cc:86:13:8d:f4:44:a3:04:87:3e:
4a:28:2b:2e:6a:2e:73:52:df:a1:03:df:3f:32:cc:e0:52:12:
64:c3:30:28:fa:2d:58:7a:f8:7c:c0:bb:85:33:ba:c4:6e:73:
56:a6:f7:84:ae:e8:4d:43:60:92:d0:99:67:22:f4:e5:ef:52:
48:31:22:6e:e3:ef:97:43:94:b9:bf:03:d3:ff:e5:f2:bc:0b:
72:19:eb:e0:95:1b:13:f3:8d:c7:a9:8b:ca:04:78:91:91:a5:
6e:4b:a7:b0:39:9d:36:86:56:6d:50:c4:ae:00:1d:75:8f:6c:
67:a4:c7:3f:1f:d2:56:ac:5d:14:9a:cc:03:8f:be:0a:2d:01:
60:66:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:55:45 2026 by rpki-client