Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: uUevI6VMGm1tP84DmbFqjOQEaHFzitZobb//K8qsJUw=
Subject key identifier: 7A:CB:81:1D:D2:DA:42:A9:53:3B:0F:7E:7D:49:0B:B0:6B:75:6F:E3
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 019CAD59DEB4343274014A25EBCDA8FEBE6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 1146
Signing time: Mon 02 Mar 2026 07:01:13 +0000
Manifest this update: Mon 02 Mar 2026 07:01:13 +0000
Manifest next update: Tue 03 Mar 2026 07:01:13 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: eDMPsCY62K0uoWCsVwOx5VUXg1uyVC2ZgN7CI7Uq17s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:de:b4:34:32:74:01:4a:25:eb:cd:a8:fe:be:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Mar 2 07:01:13 2026 GMT
Not After : Mar 3 07:01:13 2026 GMT
Subject: CN=7acb811dd2da42a9533b0f7e7d490bb06b756fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:31:a3:cf:0c:d7:12:aa:65:4a:29:74:4a:
af:45:15:14:24:fc:dd:27:5c:bb:4c:28:67:68:2b:
11:95:c8:37:85:b2:20:a7:9b:4d:fe:b6:f1:c2:b4:
2c:2c:bc:32:2d:61:02:80:d1:28:3d:50:79:a5:27:
c9:62:8b:48:3e:1c:fe:99:2b:44:b4:78:b2:a9:69:
0f:51:36:4e:33:a1:e9:37:9f:32:40:45:ed:4f:01:
c6:0a:c9:ed:f5:2e:e6:10:b7:75:10:ad:8f:9e:f7:
f5:ce:2a:f5:ff:28:da:b9:29:dc:9f:c2:ee:96:09:
07:36:ef:f0:48:03:df:63:f1:1a:0c:00:0a:e8:2f:
35:c5:c3:69:68:e2:4e:e3:c0:2c:75:fc:c2:16:3b:
32:a8:2e:92:c3:c5:b0:ec:dd:19:29:83:36:e2:40:
3a:a0:7a:70:80:73:e3:68:20:f0:f8:c0:03:78:2c:
67:30:c8:c7:66:ab:42:dc:47:53:bf:3b:f6:c7:67:
a4:c5:7a:d4:cc:22:c8:33:42:5d:ea:c8:3f:32:f0:
a7:cf:bf:d6:d1:9b:b7:6c:f0:58:32:21:de:d9:12:
d4:fb:e9:69:ee:d7:12:dc:06:1d:76:9a:e7:f8:49:
de:03:3a:03:db:ed:f4:06:23:66:58:16:14:58:dd:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CB:81:1D:D2:DA:42:A9:53:3B:0F:7E:7D:49:0B:B0:6B:75:6F:E3
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2a:53:5a:03:78:14:90:e3:0c:d3:18:bd:5a:8d:bd:4b:47:
d5:c6:76:8f:11:07:ad:13:38:19:3f:f9:a7:ea:89:56:31:e1:
0b:a8:95:c0:8f:b0:86:94:85:07:fc:71:37:52:60:df:db:06:
f7:c5:8f:00:14:8f:21:c8:1b:73:fa:c2:01:af:b6:d1:ea:83:
6b:6a:f0:07:be:0d:6b:72:d2:6e:d1:2b:12:f3:f3:b4:dd:75:
de:f6:1e:f6:85:9a:de:e8:e3:68:bb:83:7a:1c:21:52:16:2a:
5a:6d:2c:ef:42:fa:5b:f4:1c:03:89:63:1e:1b:60:3c:9e:53:
a1:00:cb:db:4d:2d:51:9c:cc:5e:1e:dd:3b:ef:c1:96:a3:90:
3e:fb:1b:ab:bc:bb:d4:a7:b2:b1:74:de:1c:94:11:2b:94:9a:
c3:3e:74:8d:da:58:70:e6:06:4b:57:b1:8c:2b:9f:c2:d3:79:
75:7d:66:58:b1:f2:f3:6b:6c:d5:54:b8:33:f5:98:0f:71:2e:
3a:93:bf:d4:2b:37:45:6d:21:88:39:45:e1:f2:64:ab:a6:09:
02:09:26:e3:55:90:51:53:7f:c4:a1:be:01:a1:e8:79:69:a6:
37:6b:f8:31:d5:76:7c:2d:c6:3f:f2:4a:da:fa:46:fa:aa:fc:
a4:88:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:58:12 2026 by rpki-client