Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
File: oewv8gIW07xkdbhQpGXjYvTs7s0.mft (raw, json)
Hash identifier: 4fh08w+b7ovLGmA1EaO8w8gd2YcZ5NMQFVILpJN3kD0=
Subject key identifier: 42:A2:CD:44:34:EB:60:B7:99:1E:60:9F:DD:2B:67:77:51:D7:FC:84
Authority key identifier: A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
Certificate issuer: /CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Certificate serial: 019D9BBF3145F525A6B6968B6AFA5A49D9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
Manifest number: 0544
Signing time: Fri 17 Apr 2026 14:01:31 +0000
Manifest this update: Fri 17 Apr 2026 14:01:31 +0000
Manifest next update: Sat 18 Apr 2026 14:01:31 +0000
Files and hashes: 1: oewv8gIW07xkdbhQpGXjYvTs7s0.crl (hash: v2pvl+eYZxIlgxQrP5eRVrupP0val7bcv8TbmLRqU5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:31:45:f5:25:a6:b6:96:8b:6a:fa:5a:49:d9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Validity
Not Before: Apr 17 14:01:31 2026 GMT
Not After : Apr 18 14:01:31 2026 GMT
Subject: CN=42a2cd4434eb60b7991e609fdd2b677751d7fc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:63:fa:88:0d:ed:68:ba:0e:bc:7f:de:f6:b3:
72:6c:f0:b5:7b:76:ac:54:e1:55:65:0f:66:56:17:
a1:2b:96:6c:4d:76:d3:c7:85:1c:4f:f9:7a:9e:b9:
fb:90:b1:b7:fe:e8:c1:1b:a3:e2:15:e3:85:cf:3a:
e4:96:ee:90:38:1e:8e:59:2c:f3:35:04:bb:67:13:
bc:f7:f2:01:48:be:ce:f4:5f:de:49:27:6e:62:39:
44:a5:d6:7b:4e:5a:26:c9:00:7b:ee:ea:2b:9f:82:
b5:f4:26:eb:2a:55:27:63:ca:bc:b8:0a:6d:41:ee:
c1:ee:39:0b:76:b7:f5:10:b7:b5:f7:fa:0d:44:d2:
81:6a:fe:96:69:6c:88:9d:9d:d2:ba:20:e1:ac:23:
7c:b3:d2:07:36:77:35:b1:14:75:44:a5:ef:32:81:
c4:a0:56:f6:cd:90:ea:f7:40:93:36:54:f3:c4:d4:
4c:22:8e:0d:a1:46:08:10:2b:8f:aa:e3:d5:10:cb:
22:f5:3e:1a:32:3c:7c:d7:e5:7c:a2:8d:99:10:d6:
0a:10:df:5b:4a:de:36:5c:83:90:b3:a3:cf:cb:ff:
3f:79:86:ea:5c:17:9f:b2:2a:68:9b:3e:75:29:ec:
de:1c:8b:76:ac:d5:27:9f:1a:52:17:f1:20:c3:12:
4d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A2:CD:44:34:EB:60:B7:99:1E:60:9F:DD:2B:67:77:51:D7:FC:84
X509v3 Authority Key Identifier:
keyid:A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dc:5e:9a:ff:13:37:85:40:e4:d6:04:62:c0:2d:9b:a2:4b:
63:b5:68:7a:2e:e5:0c:86:0b:8a:c9:00:be:ed:0e:e2:43:9e:
b6:43:b8:49:1b:b3:5a:29:ca:cc:2e:f9:1f:e1:09:a3:3c:7d:
5e:d5:b1:4f:e2:e4:92:bf:aa:56:5e:a8:f4:8b:c5:da:d9:33:
87:1b:3a:0b:09:a8:df:a6:4f:a5:d0:8c:29:5a:52:3f:59:c9:
e8:52:fe:a7:51:0c:89:5c:dc:bd:2f:82:cd:1f:2d:18:c5:a4:
b9:0a:31:56:10:8e:f4:2f:e5:89:9f:dc:18:76:ba:5b:4a:52:
94:24:fe:74:50:ce:53:68:f7:ed:6d:17:7e:14:8f:3f:34:cb:
6a:02:33:d9:b8:f5:c1:d3:62:65:cf:f0:50:32:01:b6:e7:0b:
4b:8b:d7:09:99:8d:3a:1c:8e:a1:2c:73:16:97:35:a2:8f:a3:
44:b0:da:2c:62:3c:d4:4a:c5:7d:1b:93:83:2e:6d:a8:ac:f4:
43:c6:42:62:5f:95:47:de:fa:11:06:14:59:d3:a7:3c:d6:99:
d5:74:6d:e0:4d:4e:0f:63:19:37:09:4e:13:7f:a5:b2:5b:44:
ae:b0:be:ce:ed:05:28:9c:aa:bb:d6:ec:54:d0:8b:b4:6c:33:
c5:11:6e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:14 2026 by rpki-client