Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
File: oewv8gIW07xkdbhQpGXjYvTs7s0.mft (raw, json)
Hash identifier: 78Ig1uUGybupDCGHPIbzBB/JUZkg3darW3t1May1UWM=
Subject key identifier: C2:13:28:28:54:2D:EB:7D:AE:98:17:BF:A1:B8:1D:96:DD:6E:13:B6
Authority key identifier: A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
Certificate issuer: /CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Certificate serial: 019CAE3531E0F259BBCF2017FFAAA7DCB647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
Manifest number: 04C9
Signing time: Mon 02 Mar 2026 11:00:47 +0000
Manifest this update: Mon 02 Mar 2026 11:00:47 +0000
Manifest next update: Tue 03 Mar 2026 11:00:47 +0000
Files and hashes: 1: oewv8gIW07xkdbhQpGXjYvTs7s0.crl (hash: +PyC5GD3aeOM9Tm8uyDZS7DBQUb7L5fUP+FV838F5eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:31:e0:f2:59:bb:cf:20:17:ff:aa:a7:dc:b6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Validity
Not Before: Mar 2 11:00:47 2026 GMT
Not After : Mar 3 11:00:47 2026 GMT
Subject: CN=c2132828542deb7dae9817bfa1b81d96dd6e13b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:1f:9e:06:31:e3:7a:42:d7:49:71:f7:85:
67:bf:3c:29:f9:83:38:f5:77:32:b3:36:73:d0:18:
ca:23:39:c6:39:6a:7f:f1:80:3e:b5:8a:f6:1d:28:
7a:3d:89:f8:3b:c6:b8:8e:54:6d:4d:47:7c:ba:c3:
ee:45:48:82:8c:02:cc:31:99:e3:34:07:f5:36:23:
1a:8c:40:b1:ba:e3:6f:68:8d:45:dd:ea:e9:97:4f:
40:00:47:12:72:8f:42:2b:85:a6:73:87:f8:e1:9e:
0f:4c:37:56:8a:73:a9:26:ad:a7:ed:92:ef:fa:7a:
d4:e6:7e:f3:ac:e0:8e:42:b1:43:7e:09:9a:55:d3:
75:5f:ae:cc:84:85:0a:6d:0b:81:b5:c5:c1:b0:f3:
db:91:f6:ba:81:bd:89:f5:c5:5f:21:a5:80:a1:f5:
6d:ff:d6:17:a3:b1:84:b0:9e:1a:04:46:cf:0f:a4:
c7:a8:6e:0b:aa:f4:d0:f1:09:5e:d4:a4:ca:79:11:
bb:6b:97:dd:84:1e:eb:66:8a:b8:9e:a2:ff:bc:36:
a4:c8:46:21:03:22:48:4a:e4:cd:ce:bd:c5:8a:2d:
53:9d:46:ae:44:90:10:c8:bb:1e:43:8d:25:b7:c7:
27:66:fd:6b:b3:3b:49:9c:54:da:9d:0b:4f:67:1c:
51:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:28:28:54:2D:EB:7D:AE:98:17:BF:A1:B8:1D:96:DD:6E:13:B6
X509v3 Authority Key Identifier:
keyid:A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:36:f2:c2:16:d5:ed:e2:4e:fb:82:71:50:94:25:3c:af:58:
1e:90:29:38:75:59:26:da:a8:55:b5:1a:20:f5:af:51:e7:49:
7a:04:f9:93:24:6f:2b:7d:60:d2:f6:78:04:a3:d6:c8:dd:f8:
cc:df:11:39:94:d9:49:b3:f0:7b:c2:71:31:d8:0d:aa:71:36:
58:53:f2:d3:da:02:67:35:70:f4:10:c0:e9:f8:0b:3d:7c:e0:
ac:dc:c8:71:11:99:20:84:2d:02:f2:e7:a8:9f:c0:3c:b3:a8:
a9:bd:dc:31:bc:8e:07:ad:2f:a2:b5:86:83:d0:63:2e:88:14:
0e:c2:8d:1e:fb:65:c8:c0:e7:11:29:78:bf:dd:3a:19:45:e0:
fe:be:34:6c:aa:f2:4a:31:be:87:61:19:6a:8b:b5:28:39:25:
18:26:6b:e7:a1:dd:2c:82:23:3a:28:05:af:49:49:a4:92:f2:
31:73:41:bf:c7:9b:35:ac:3a:29:43:9d:ac:18:75:ca:31:12:
3e:48:b4:ab:c2:81:98:ae:33:ab:d1:59:6f:b1:85:7c:f1:5a:
2c:fa:ae:ca:26:56:37:7d:da:fb:f2:ea:43:45:dd:44:01:dc:
2f:26:b0:af:6a:3f:02:56:72:8d:44:25:12:5d:8a:49:f7:f2:
72:e0:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:17 2026 by rpki-client