Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: gR0XCgIAEKDQrMgFBbU4XvdUpsLghziEMZbCkqAb4PE=
Subject key identifier: B4:88:99:26:48:2E:AA:BE:FB:37:3B:0A:4F:6A:09:B8:22:A5:EC:63
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 019CAD59D7AF26F2DAB182138CCB391175FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 13C1
Signing time: Mon 02 Mar 2026 07:01:12 +0000
Manifest this update: Mon 02 Mar 2026 07:01:12 +0000
Manifest next update: Tue 03 Mar 2026 07:01:12 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: uoUnAipbmNJz+T2MJ3wFxcpALs3lcJ7QlBy+M3cy48U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:d7:af:26:f2:da:b1:82:13:8c:cb:39:11:75:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Mar 2 07:01:12 2026 GMT
Not After : Mar 3 07:01:12 2026 GMT
Subject: CN=b4889926482eaabefb373b0a4f6a09b822a5ec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:93:c4:f1:9a:f8:90:dc:b6:22:f4:f7:ac:2c:
58:02:53:47:7b:b4:ab:c0:ac:c6:f0:7c:0a:9c:68:
18:0a:32:6f:9b:83:4d:55:9e:c1:a0:7b:01:b8:51:
09:b8:a9:04:b4:c5:34:a1:30:ad:7d:68:b7:81:a4:
74:33:73:19:3e:20:3f:77:12:0d:53:3d:2f:8d:0d:
7a:a8:d7:05:47:06:e5:2a:63:0b:eb:bc:ef:ed:16:
a9:bb:06:15:89:0d:5d:60:53:0d:59:fa:8f:c3:c5:
37:d2:cb:45:62:0c:10:f3:cf:9b:4b:f3:25:13:d7:
05:9d:6e:a2:14:d2:26:fb:8c:2e:26:37:ee:10:be:
ff:0c:ce:e5:9c:2b:85:a1:70:e8:20:8c:cd:df:af:
38:f5:48:3c:22:a1:0b:ac:00:25:8d:09:96:00:86:
b4:01:d4:c4:8f:fa:0e:27:28:1e:db:16:6d:db:54:
24:b4:a3:f5:ef:d3:c5:9b:ae:8b:53:bb:0a:ca:c9:
2d:a8:1f:61:88:88:44:f4:b7:a0:3e:7d:cd:f5:02:
81:84:40:bd:d0:23:81:fc:f5:2e:ff:8e:df:44:02:
ed:07:bc:7b:0b:52:23:c7:92:86:8f:a2:2c:74:6d:
d2:98:ac:8c:fb:0e:74:2d:2c:50:3e:59:a9:84:48:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:88:99:26:48:2E:AA:BE:FB:37:3B:0A:4F:6A:09:B8:22:A5:EC:63
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:30:e9:54:d6:14:96:24:75:8b:48:14:96:62:94:4f:cb:0a:
6b:9b:e4:4d:6e:22:f9:a0:c7:5a:58:2f:42:8f:c0:55:bf:66:
77:a4:7b:37:c5:e0:71:97:6e:bd:52:ae:79:ac:66:bc:ee:90:
97:01:35:82:db:73:59:6a:fe:c0:f6:b4:08:2c:47:52:12:74:
1b:a3:8d:e9:e0:d6:e7:c5:46:49:fa:25:f1:99:9a:24:25:b8:
f0:ac:ff:54:a8:8e:7f:1e:2f:f0:9d:11:46:3a:bb:55:de:7a:
be:3e:9a:1e:75:98:31:b1:08:ad:e0:f5:dc:35:37:9a:d9:ea:
c9:9b:c2:f2:6c:26:23:23:94:79:bd:a1:c8:98:15:ad:d6:79:
05:14:78:2a:9a:21:da:f7:fb:d3:f9:5c:c9:9b:93:28:7a:34:
d1:3b:ef:27:81:87:c8:17:21:e8:92:d7:02:76:e1:65:5c:0a:
1f:c2:1f:10:0e:2e:06:ee:aa:36:43:52:8a:45:85:75:3f:b9:
86:b9:c6:9d:03:8a:16:64:2c:1e:45:46:72:5c:ec:c8:ef:d5:
b5:63:77:4b:5d:3d:45:8b:64:da:77:3e:dd:0c:1b:00:8d:8e:
0c:2e:83:ac:f2:b1:94:4b:d4:d2:88:ec:c1:d0:dd:c2:87:fd:
a3:56:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:39 2026 by rpki-client