Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
File: oqodRGKTg8rfx1F9733ikpWuObQ.mft (raw, json)
Hash identifier: LoYBY9R0pIjCY93zOcrSvIN9GcqYMCzUMheyWrhMBqU=
Subject key identifier: EC:3A:63:42:30:07:8F:9F:F8:39:94:41:B8:2C:CA:46:E0:96:22:0B
Authority key identifier: A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
Certificate issuer: /CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Certificate serial: 019CADFE5FA9EDD7DC2079D495055AF4F691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
Manifest number: 0FBD
Signing time: Mon 02 Mar 2026 10:00:54 +0000
Manifest this update: Mon 02 Mar 2026 10:00:54 +0000
Manifest next update: Tue 03 Mar 2026 10:00:54 +0000
Files and hashes: 1: oqodRGKTg8rfx1F9733ikpWuObQ.crl (hash: KjFRB6Du3SJUl/0qkHhOxVulta3nk6H990yFDO244FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:5f:a9:ed:d7:dc:20:79:d4:95:05:5a:f4:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2aa1d44629383cadfc7517def7de29295ae39b4
Validity
Not Before: Mar 2 10:00:54 2026 GMT
Not After : Mar 3 10:00:54 2026 GMT
Subject: CN=ec3a634230078f9ff8399441b82cca46e096220b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:2b:b7:bc:c2:8c:a9:62:b8:82:af:e7:a7:
d3:55:63:f2:a3:13:33:63:6e:0c:55:7c:9d:72:da:
b9:56:14:11:c1:f8:33:98:10:5a:d4:86:ea:f2:a7:
f5:97:be:81:d6:1b:a6:e6:d7:46:29:7d:81:fa:87:
c0:69:33:d0:13:c5:db:f0:69:15:75:77:24:92:b7:
5b:10:37:15:98:b1:83:73:6f:9d:a0:55:b7:5c:ea:
12:cd:0e:af:e5:3d:71:48:81:9c:bc:f1:a3:14:90:
06:70:0b:85:f3:4d:7f:1b:32:6c:5b:57:23:ca:91:
59:49:e0:3c:e4:32:8f:86:66:be:19:9f:33:f2:13:
03:fe:96:5e:21:d9:4b:8a:f6:34:e3:03:fa:e8:f6:
6c:9d:44:e5:4c:c9:db:bc:26:65:d5:0b:45:9e:57:
7d:54:b6:96:9a:6a:9a:5f:4c:de:69:97:31:21:ca:
60:ce:6e:d5:b6:64:d4:99:a2:0a:2c:b1:44:06:56:
c6:6d:ae:f2:06:95:43:d3:57:2e:79:64:df:09:13:
02:78:dc:e2:8e:47:cb:70:d7:4a:38:34:f2:44:0e:
50:ed:3f:9f:b1:9b:27:9b:ff:e9:4e:53:77:f2:73:
16:84:05:e8:38:00:b6:f4:46:85:b5:88:04:0e:d3:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3A:63:42:30:07:8F:9F:F8:39:94:41:B8:2C:CA:46:E0:96:22:0B
X509v3 Authority Key Identifier:
keyid:A2:AA:1D:44:62:93:83:CA:DF:C7:51:7D:EF:7D:E2:92:95:AE:39:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqodRGKTg8rfx1F9733ikpWuObQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/317824-f8f5-4b78-9b5e-749175b178f1/1/oqodRGKTg8rfx1F9733ikpWuObQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f0:d0:a9:4e:f1:eb:b3:ad:42:44:9e:2f:95:eb:87:01:80:
e9:b3:39:16:ab:56:04:c4:08:2c:68:5a:e0:d4:04:ca:38:19:
30:73:8a:24:b4:89:47:82:19:fb:56:ca:fc:82:f2:92:47:45:
55:ce:e5:c2:82:e1:d0:59:b3:5a:40:95:ca:de:99:84:2c:78:
bc:91:cc:01:33:32:fd:d1:9a:7b:91:8c:12:ec:5e:f5:a4:66:
83:a3:87:83:a1:3c:86:69:d8:96:8f:dd:83:d0:ee:cf:b8:fb:
f4:ad:6b:13:eb:9a:3c:15:48:46:e3:9a:34:af:ec:34:a9:cc:
b3:64:7c:37:be:52:6a:27:dc:e8:e9:72:76:6e:38:e9:58:49:
eb:bf:4a:68:a1:96:7b:b7:49:e0:9b:cd:31:d5:4e:bf:19:fe:
da:b9:c8:6c:2c:36:fa:5b:9f:2c:e6:d1:ee:1f:07:f9:de:87:
da:01:7b:9a:a4:d3:bc:f5:42:63:2e:69:e7:ad:5b:2f:03:6a:
fa:13:2a:b5:7a:76:25:bd:cb:df:c5:62:f8:f0:06:d1:0b:92:
e2:c0:0f:ce:8f:80:0e:28:5c:77:0b:cd:8f:13:71:e8:ee:49:
e7:d7:4e:b7:9c:09:de:15:c6:6d:ff:a1:96:82:83:87:d4:1f:
f8:f6:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:14 2026 by rpki-client