Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: gWQTPSRLh3C5kWrTIvRsSOqiTgZI2BMm+ENT6wGeOnY=
Subject key identifier: F0:5D:D8:A4:19:DB:E9:47:0F:5A:C1:16:51:82:E7:70:DC:25:7E:15
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 019D9AE33BE1651DD2339EB4BBD2B812EC5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 143C
Signing time: Fri 17 Apr 2026 10:01:16 +0000
Manifest this update: Fri 17 Apr 2026 10:01:16 +0000
Manifest next update: Sat 18 Apr 2026 10:01:16 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: R/KHDZ9DRfaxwWXKKWghAD3hWSIRSmPGr48CPD2LNV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3b:e1:65:1d:d2:33:9e:b4:bb:d2:b8:12:ec:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Apr 17 10:01:16 2026 GMT
Not After : Apr 18 10:01:16 2026 GMT
Subject: CN=f05dd8a419dbe9470f5ac1165182e770dc257e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5f:27:68:87:00:c4:52:4b:db:e5:64:87:2e:
5b:4f:75:88:3c:96:02:59:6b:db:73:8c:da:26:12:
41:22:55:ec:4b:6c:94:28:ec:05:c9:00:5d:8b:69:
a8:ef:a8:bd:30:cf:06:91:bf:bc:5b:cb:ed:c9:c4:
63:b5:56:83:52:a6:f1:25:d5:a7:d9:64:32:04:2c:
5f:60:ef:a0:cf:e5:e1:6a:71:60:ff:0b:1d:4f:77:
b8:37:6f:52:c9:7f:c2:5c:dd:88:31:d3:28:55:38:
b0:9d:33:73:60:38:e1:d2:bf:cc:6a:01:ee:25:c1:
23:62:6e:c7:4c:b3:6e:f4:53:bd:3e:69:d4:93:84:
a1:bf:0e:82:86:8c:8f:ef:e5:02:39:f4:fb:03:b1:
86:27:38:10:3c:cc:98:dc:b9:2e:df:ce:e1:23:1b:
06:3a:aa:18:f5:32:1c:76:a3:79:17:be:73:d7:62:
2c:6d:c5:ef:79:03:bd:1b:dc:b6:a1:11:c9:51:72:
08:1b:32:7d:58:b5:09:13:3f:69:a2:ae:b7:07:86:
1d:7e:77:f5:e5:5e:63:50:0f:d5:af:5e:08:7e:e7:
b7:1c:f7:6e:42:7b:ec:e3:a8:c7:e2:7e:06:9e:d5:
5b:5c:37:13:3b:b8:2c:f3:4b:26:f9:c0:7d:53:ab:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:D8:A4:19:DB:E9:47:0F:5A:C1:16:51:82:E7:70:DC:25:7E:15
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1d:1d:77:77:b9:cb:5f:5a:bc:f3:6c:1b:50:d1:e5:ad:84:
b2:9f:b7:7a:e9:15:ca:bb:4b:a1:cc:8f:5b:75:cb:4b:d5:e1:
f8:f8:01:c1:94:0b:b8:bb:2e:a7:cf:ca:78:6c:16:d3:0f:6f:
cc:e8:82:b2:6e:8d:05:76:74:44:d3:03:56:7c:1a:66:08:ed:
7e:83:0c:30:6d:bd:99:1d:41:07:8f:a9:f5:61:19:94:b7:60:
b7:28:0a:43:03:3f:84:42:e4:48:5d:92:d6:2c:a5:86:4c:ba:
22:74:32:c1:78:23:6a:6b:55:c9:79:7b:d0:e8:43:f7:6f:47:
95:eb:60:6e:fe:0d:ee:b0:c8:3e:b8:f7:d4:c4:de:74:46:8c:
3f:38:b7:c5:21:ac:76:d8:fd:84:1b:ca:c1:c2:57:e8:e4:fa:
ba:28:79:8a:bf:42:16:72:95:d4:3c:e5:54:9d:93:ee:7f:0e:
83:aa:d4:de:24:57:1b:78:61:38:d6:b2:a0:22:48:50:a1:50:
6a:e3:9e:5d:4b:cb:26:cf:c3:91:c4:2f:10:89:f7:c0:ea:5c:
1a:fb:34:e9:88:89:7b:ec:a5:a2:4a:52:b8:22:36:9d:35:d8:
f5:6b:01:1f:99:26:f3:57:e8:2c:54:ba:d2:f7:19:27:7a:56:
e4:93:71:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:21 2026 by rpki-client