Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: LKui1XI9HLPdTfEizZ2+Jg4iDrUd0Ku58+5sBMu3TPQ=
Subject key identifier: 80:B1:F6:63:43:98:07:1D:8B:43:31:E6:BF:16:A2:6C:90:E9:9B:27
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 019D9CD101091A32DB417C135FCC819CAA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 11C2
Signing time: Fri 17 Apr 2026 19:00:35 +0000
Manifest this update: Fri 17 Apr 2026 19:00:35 +0000
Manifest next update: Sat 18 Apr 2026 19:00:35 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: bZWq5koUywXIvImGmeUJ+gaHtOn8y1tNoiSZoeWHev4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:01:09:1a:32:db:41:7c:13:5f:cc:81:9c:aa:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Apr 17 19:00:35 2026 GMT
Not After : Apr 18 19:00:35 2026 GMT
Subject: CN=80b1f6634398071d8b4331e6bf16a26c90e99b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:ec:52:de:62:08:68:dd:e7:d3:32:f1:4c:
4d:ef:3e:7d:3a:ca:bd:19:3f:ee:27:79:f6:99:02:
e2:7e:f4:cd:4b:55:c1:19:2d:d2:5e:98:a1:19:82:
60:8d:0d:e9:fb:4c:d6:9a:54:5f:fb:c4:74:57:0b:
11:43:f1:30:a2:ca:3c:9a:4a:e1:d6:ad:87:ef:d7:
79:e9:a5:39:51:af:07:75:2c:9c:58:72:ae:f8:c1:
eb:be:73:fe:4f:ce:a5:62:d6:d0:c8:89:0f:a5:51:
b5:7c:c5:46:2a:7e:ba:aa:46:2e:a6:ba:39:43:aa:
1d:8a:93:8c:9c:92:7f:6c:a0:a7:e5:1c:d9:d2:a1:
de:ac:2e:00:3b:18:08:58:21:43:86:3b:50:b2:64:
52:23:41:58:6c:09:8e:ea:f7:f3:53:b4:4b:f9:c3:
51:c5:aa:39:ea:cb:8e:31:cf:19:b3:61:b9:49:d1:
76:c0:27:13:21:a1:35:50:a2:7c:87:a9:81:b1:3b:
7d:ae:a9:91:09:3c:03:f5:67:0e:04:c4:5f:e3:59:
6b:d1:67:54:b8:07:76:d7:6e:e7:5e:1c:49:d2:95:
19:24:b4:6e:bb:1a:00:36:dd:fe:ea:42:b4:45:f3:
27:dd:37:06:04:74:81:f9:33:6e:e3:3c:f6:e2:60:
e3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B1:F6:63:43:98:07:1D:8B:43:31:E6:BF:16:A2:6C:90:E9:9B:27
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:74:80:ee:e9:83:ef:56:ae:aa:2f:e4:d3:cb:b7:dd:29:e0:
de:a7:dc:8a:26:a7:14:30:10:da:93:19:ea:9e:ce:da:89:55:
81:c4:ff:f4:75:cc:26:10:85:60:92:ae:d0:38:7e:7b:e3:9f:
43:eb:0d:22:3b:4f:61:73:60:73:9f:1c:e5:21:f6:41:58:43:
74:57:44:c0:e0:c5:5d:7e:0c:1a:5a:87:f8:77:f4:ca:96:b6:
07:f0:91:30:ba:fc:30:ae:f8:1a:21:bc:88:6a:38:23:b0:13:
27:96:15:23:b2:f8:17:b6:99:ee:08:4b:64:8f:3a:a2:97:e6:
f8:ec:28:9a:54:56:dc:4a:18:ed:55:45:ea:e9:1f:2f:aa:21:
84:f8:2d:2e:78:24:fc:be:0c:6c:f9:ae:82:04:a8:1e:cf:b6:
1f:ef:d7:d6:f6:12:2d:b6:b7:26:bc:25:08:fe:d5:6b:7f:a9:
57:92:58:0c:a1:67:1e:23:78:69:f2:cd:dc:2c:0d:86:c3:94:
f5:46:fb:91:fc:a2:5f:fa:6f:a1:1f:bc:26:78:fc:92:81:09:
32:0c:bb:43:c3:1f:32:e7:ef:af:cd:46:23:9f:fe:32:f7:6e:
92:79:f6:a7:f0:38:d4:42:6e:0a:1a:d5:6c:db:d7:1e:76:4b:
10:09:c7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:05:26 2026 by rpki-client