Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier: QR51ljfCDytL9lR/OAYrPgz+gjoiybTxSXs0Z5g+4hc=
Subject key identifier: 51:B6:0D:CE:03:D3:CA:2D:83:FB:C9:13:E5:E4:42:53:7D:8F:6F:CF
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 019CAAC68700B1DB1901E66DB1DD9396ABCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number: 0483
Signing time: Sun 01 Mar 2026 19:01:03 +0000
Manifest this update: Sun 01 Mar 2026 19:01:03 +0000
Manifest next update: Mon 02 Mar 2026 19:01:03 +0000
Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: lyf9CqbFuWz8kmtJWKBgL9qThn9uRixQazKsmDeq6e8=)
2: m5e2ZDv7_-1udsvxigJbqqXmd_E.roa (hash: yOpoP5KeMEFEDYD+ejQW8hpR1s0gtVHvkYr8rcVTFC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:87:00:b1:db:19:01:e6:6d:b1:dd:93:96:ab:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: Mar 1 19:01:03 2026 GMT
Not After : Mar 2 19:01:03 2026 GMT
Subject: CN=51b60dce03d3ca2d83fbc913e5e442537d8f6fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:75:d5:1e:a3:d6:80:78:bb:c2:25:7f:de:
ef:cd:6d:79:03:e2:3d:ac:ed:30:ff:a8:c4:6e:d4:
2a:64:90:83:cb:0e:a2:eb:e8:af:63:7d:6c:d8:fa:
62:b6:02:b7:38:8b:a6:9a:61:26:48:41:2a:77:3c:
62:ce:d9:91:03:88:ce:0f:8b:37:9d:bf:8c:ee:c5:
dd:9e:e8:59:9d:e0:e2:7c:1c:77:d9:60:09:cd:1d:
7b:eb:f2:25:bc:8a:5c:8b:25:e3:c2:ca:15:e6:f1:
77:29:16:0e:3b:a4:d6:6c:1f:a2:42:37:e0:99:c0:
2c:b7:7b:b7:f8:de:b5:56:7e:d0:9c:91:b5:58:70:
c2:dd:f6:d3:7c:0a:29:26:fa:7d:09:6b:fa:90:fc:
23:1c:85:2f:42:5a:a9:9b:12:a0:71:a5:c7:84:59:
f4:73:1a:8a:2f:6f:18:f5:90:ff:31:e2:12:f4:46:
39:50:8b:4e:dd:d2:21:21:77:1e:12:16:18:ce:3e:
2e:fd:4b:88:f3:56:4d:ed:ea:4b:7e:13:3c:fa:f9:
7a:1f:fc:fd:41:ae:da:09:a2:a7:d0:00:6c:fc:c9:
a0:64:92:d9:65:d0:74:6d:af:89:55:0e:b0:54:83:
1b:9b:5b:b4:8e:b2:04:40:dc:a7:57:4a:67:cb:c5:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B6:0D:CE:03:D3:CA:2D:83:FB:C9:13:E5:E4:42:53:7D:8F:6F:CF
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d7:89:47:ad:51:b6:e5:ec:12:10:b6:37:03:de:4a:d5:79:
46:af:bd:3d:7d:68:a6:14:52:d9:98:9e:77:5d:06:11:26:2b:
b9:5c:b6:38:e2:a9:ab:1f:91:f7:88:6e:aa:c5:ea:48:51:cf:
2f:31:2d:98:cf:7f:55:4a:7e:45:9c:17:7d:40:bc:f3:47:4f:
4a:25:f9:d4:8c:7e:92:47:e4:07:bf:7a:a7:ea:81:33:2e:35:
c8:38:fc:9c:14:7c:d5:dc:8e:24:75:e5:28:c2:3c:18:c3:69:
60:c6:ab:51:68:79:63:4e:f3:6d:21:42:ed:85:3e:61:6e:e1:
3c:e0:a7:5a:2a:8f:99:87:75:14:53:e0:89:3f:2a:85:c9:34:
7e:1f:ee:d9:d0:3e:ce:21:2e:b7:f9:90:14:ca:e0:7e:e5:9c:
f2:f4:09:25:10:6e:4e:f4:14:d5:b3:70:49:c0:1a:23:af:21:
73:c8:d6:cb:09:0d:75:28:9c:f9:6e:b6:db:33:a0:5c:32:c9:
20:9f:c3:1c:df:cb:bc:05:ad:af:22:7a:a3:90:bd:b3:12:31:
df:e8:15:d4:a5:f7:f3:7e:a3:ab:85:29:bd:c4:d5:5f:60:36:
d4:89:e0:4b:d7:f2:3d:b5:0f:cc:d7:d6:eb:8d:45:63:f0:80:
b8:8f:61:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:53 2026 by rpki-client