Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
File: oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft (raw, json)
Hash identifier: k+pbVMH5/YNGthLRPDcd+0b+iQs7WzmYq4JwwBvQDJ4=
Subject key identifier: 7C:26:E7:5F:87:5B:E2:68:C4:14:AD:21:34:56:8C:A7:9C:A2:AA:19
Authority key identifier: A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10
Certificate issuer: /CN=a223d15344c02a551e63f831c604f80dbec4ba10
Certificate serial: 019CAB6B4C2B47F5FAC2211EFC93FBD24CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
Manifest number: 0C9B
Signing time: Sun 01 Mar 2026 22:01:01 +0000
Manifest this update: Sun 01 Mar 2026 22:01:01 +0000
Manifest next update: Mon 02 Mar 2026 22:01:01 +0000
Files and hashes: 1: oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl (hash: G6LEBVDfaNvuBPZzHuSZ88dXp4ZZibqJslZGpmKq3sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4c:2b:47:f5:fa:c2:21:1e:fc:93:fb:d2:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a223d15344c02a551e63f831c604f80dbec4ba10
Validity
Not Before: Mar 1 22:01:01 2026 GMT
Not After : Mar 2 22:01:01 2026 GMT
Subject: CN=7c26e75f875be268c414ad2134568ca79ca2aa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:43:ba:66:a0:18:7e:aa:23:81:7a:34:c9:
39:8e:01:af:78:ac:c1:63:97:61:5e:00:6f:12:f6:
98:53:cc:ec:0f:3a:28:d4:d6:6a:2f:00:ab:60:55:
be:87:81:56:64:a4:11:c4:f3:e1:df:ed:79:6a:83:
da:72:28:ca:35:67:91:03:b1:ff:42:43:34:cc:9b:
55:8f:5d:d1:5d:59:b7:11:84:37:f6:9b:b8:3f:03:
1c:52:e5:c9:eb:dc:22:93:0c:bd:17:f1:fa:19:5c:
e1:fc:9c:48:53:e7:eb:18:7f:91:bb:f7:fc:69:41:
e1:16:9a:4f:6b:b9:09:63:16:ff:6c:5c:f8:5b:20:
d1:3a:e7:2a:1d:9f:c8:1d:4d:bc:a7:e0:80:fd:99:
ee:6c:91:bd:42:67:0d:d4:65:cd:34:70:d2:0e:e1:
e3:b5:54:46:b0:e4:71:91:23:39:f1:25:65:1f:72:
56:ec:d8:02:95:92:d2:8c:ff:5e:dc:40:86:e0:90:
c4:64:78:74:36:51:b8:c5:9f:0d:ad:27:64:5a:5e:
75:61:35:bb:4a:ac:69:d8:24:f8:e1:56:c9:1f:d2:
85:98:79:fa:43:f1:31:26:7e:d4:90:d7:6d:e0:aa:
90:30:80:5e:13:4e:97:ea:74:b3:4f:53:ce:97:4a:
98:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:26:E7:5F:87:5B:E2:68:C4:14:AD:21:34:56:8C:A7:9C:A2:AA:19
X509v3 Authority Key Identifier:
keyid:A2:23:D1:53:44:C0:2A:55:1E:63:F8:31:C6:04:F8:0D:BE:C4:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oiPRU0TAKlUeY_gxxgT4Db7EuhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8c2fae-bd49-4bf7-baa7-809a2d7ff348/1/oiPRU0TAKlUeY_gxxgT4Db7EuhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f3:cb:f4:e3:b3:f5:01:dd:d8:5f:55:da:ad:b2:57:13:16:
ee:93:26:15:2a:ec:45:d1:12:f7:a1:1a:32:cb:77:7c:e8:2e:
45:ef:b2:cd:0b:1b:28:b4:3e:9d:d7:fb:6b:d3:78:28:ee:ad:
07:6b:dc:e7:7b:e4:45:4d:72:21:77:8e:ff:c4:4d:25:df:3b:
08:9f:3f:0d:10:4d:66:54:7f:24:ad:d8:12:ab:8b:c2:d6:51:
ca:c2:bb:32:8c:db:bf:ea:52:14:02:cd:58:3c:4b:06:6d:47:
4d:4a:35:ad:63:91:46:61:87:99:a1:e0:71:c7:cd:9d:24:65:
43:31:dd:b0:70:e3:53:ff:d2:ce:d7:75:d8:f9:ba:57:a3:4e:
db:a3:e0:3c:15:2b:fa:9b:94:46:29:0d:1c:82:72:53:1f:77:
79:d5:10:df:cd:fd:00:12:f4:df:f1:77:68:6d:5f:fc:0a:15:
87:cf:31:32:ed:22:f5:75:f4:ea:ac:93:c1:13:89:43:6b:13:
1c:1c:9b:35:39:f9:03:52:f3:79:e0:15:70:21:7a:ea:5c:99:
36:01:44:e6:c4:dc:76:cf:6a:b6:87:7a:1c:b2:41:14:b8:f4:
28:a2:1c:cc:eb:35:ca:70:96:31:3c:9f:cf:90:a8:22:52:a1:
56:4c:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:33 2026 by rpki-client