Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: ZwJ3/BcTTTUXc5iE0Vp4yw+wUGdgArMGscnbMnSYHMg=
Subject key identifier: 3C:0C:7B:60:0C:EE:D3:43:99:BD:ED:50:DA:E6:BD:F0:CB:7A:3C:00
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 019CAC7DE8BAC0A7E944DBA028C46192F6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 1105
Signing time: Mon 02 Mar 2026 03:00:58 +0000
Manifest this update: Mon 02 Mar 2026 03:00:58 +0000
Manifest next update: Tue 03 Mar 2026 03:00:58 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: oP+7/y2RFVNuUSEnwlcrV3CCEync2/2qLPCD/HdosHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:e8:ba:c0:a7:e9:44:db:a0:28:c4:61:92:f6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Mar 2 03:00:58 2026 GMT
Not After : Mar 3 03:00:58 2026 GMT
Subject: CN=3c0c7b600ceed34399bded50dae6bdf0cb7a3c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:84:71:02:17:3b:a1:bd:91:4a:75:20:2e:
06:95:bb:6b:9d:37:c1:9d:c5:cb:27:39:fa:76:1f:
25:d4:dd:bc:18:73:fe:b7:e1:7e:5e:31:55:cc:31:
4c:88:79:9b:18:f0:30:89:f8:ba:4e:0a:c6:1f:4e:
55:64:97:3e:aa:ef:7f:91:4b:6e:5d:14:1b:3c:77:
f4:b9:8a:cd:0f:12:5e:11:ce:d4:ad:35:9e:40:42:
3b:e2:15:30:f1:26:6f:c9:4d:ee:2f:54:11:46:75:
17:01:37:f8:83:38:6d:10:14:06:e3:e8:d1:58:3d:
38:6a:51:d6:d6:0e:23:44:85:c5:2b:df:92:48:9f:
35:fa:07:50:6f:9d:cb:0a:1f:fb:0c:db:82:c5:84:
33:20:76:d7:04:39:bb:4a:bf:5a:97:69:d1:5c:60:
5d:8a:0a:00:c0:39:02:3e:fd:a1:74:e4:02:23:9d:
f5:45:dd:42:7a:4d:b5:4b:eb:ac:20:b2:b9:16:28:
87:30:32:df:cc:4a:b5:1f:ce:b8:79:ec:a2:42:ed:
5b:85:78:b7:5c:c3:ad:d6:0d:cc:f9:cd:5d:71:fc:
66:28:d9:72:26:3b:f7:16:e3:0d:d0:b2:a4:23:84:
8e:e4:07:c2:aa:c0:09:c2:06:13:db:fa:88:16:5c:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0C:7B:60:0C:EE:D3:43:99:BD:ED:50:DA:E6:BD:F0:CB:7A:3C:00
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ff:01:1f:fd:39:d9:c6:f6:3f:4d:5d:54:97:93:03:75:1e:
82:09:c4:71:91:ed:10:82:22:5c:59:cb:29:7a:4c:ce:4b:08:
f3:27:eb:9f:05:f9:4d:54:0b:9f:79:0d:da:8e:90:de:ad:a9:
24:7e:88:47:68:d9:2f:c6:da:54:fc:a8:8b:e9:15:7e:94:91:
4c:71:c4:56:7e:53:ba:55:e6:c3:c9:64:06:ae:46:89:d7:3b:
8f:0f:9f:62:56:4d:1e:5e:34:9b:de:af:ad:21:da:a5:b8:5e:
af:72:bd:3f:8b:28:16:80:e9:d0:d3:10:48:f2:6c:d4:30:65:
97:f9:de:07:d6:a7:dc:52:6a:51:55:df:e9:cf:78:48:ab:e3:
d1:c6:e4:03:11:24:4a:cb:1d:90:5b:d6:6b:6a:0e:5d:a2:47:
ae:80:04:0c:22:63:c8:86:16:e2:b3:37:c9:50:9a:c3:0d:22:
69:06:33:b7:c2:6c:c5:8e:b5:12:8e:cd:c2:4f:64:8d:ac:51:
7b:56:02:66:43:98:9a:42:a9:be:af:89:39:4c:77:d5:f7:37:
df:93:17:61:80:cd:66:86:f9:f2:6f:64:1a:54:db:79:ca:8a:
47:ff:dd:46:20:ec:de:3b:91:5a:35:15:b7:d6:1f:cf:9f:0d:
67:2e:6e:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfei6wKfpRNugKMRhkvbuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0
MzFiNjkwHhcNMjYwMzAyMDMwMDU4WhcNMjYwMzAzMDMwMDU4WjAzMTEwLwYDVQQD
EygzYzBjN2I2MDBjZWVkMzQzOTliZGVkNTBkYWU2YmRmMGNiN2EzYzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2GEcQIXO6G9kUp1IC4GlbtrnTfB
ncXLJzn6dh8l1N28GHP+t+F+XjFVzDFMiHmbGPAwifi6TgrGH05VZJc+qu9/kUtu
XRQbPHf0uYrNDxJeEc7UrTWeQEI74hUw8SZvyU3uL1QRRnUXATf4gzhtEBQG4+jR
WD04alHW1g4jRIXFK9+SSJ81+gdQb53LCh/7DNuCxYQzIHbXBDm7Sr9al2nRXGBd
igoAwDkCPv2hdOQCI531Rd1Cek21S+usILK5FiiHMDLfzEq1H864eeyiQu1bhXi3
XMOt1g3M+c1dcfxmKNlyJjv3FuMN0LKkI4SO5AfCqsAJwgYT2/qIFlwXAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwMe2AM7tNDmb3tUNrmvfDLejwAMB8GA1UdIwQY
MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt
ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz
LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMP8BH/05
2cb2P01dVJeTA3UeggnEcZHtEIIiXFnLKXpMzksI8yfrnwX5TVQLn3kN2o6Q3q2p
JH6IR2jZL8baVPyoi+kVfpSRTHHEVn5TulXmw8lkBq5Gidc7jw+fYlZNHl40m96v
rSHapbher3K9P4soFoDp0NMQSPJs1DBll/neB9an3FJqUVXf6c94SKvj0cbkAxEk
SssdkFvWa2oOXaJHroAEDCJjyIYW4rM3yVCaww0iaQYzt8JsxY61Eo7Nwk9kjaxR
e1YCZkOYmkKpvq+JOUx31fc335MXYYDNZob58m9kGlTbecqKR//dRiDs3juRWjUV
t9Yfz58NZy5uPA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:29:11 2026 by rpki-client