Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File: oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier: MImAK4Xw/J6uglVU5caOjkV34kTauIUg1uzVepeK8Sc=
Subject key identifier: 60:17:63:BF:4A:4A:D5:76:4F:D5:15:86:68:77:E2:69:9B:E3:2E:7E
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer: /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial: 019D9AE38504DEEA51C61E18953D65B2F024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:35 +0000
Manifest this update: Fri 17 Apr 2026 10:01:35 +0000
Manifest next update: Sat 18 Apr 2026 10:01:35 +0000
Files and hashes: 1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: S2lNGrI11FeBAXQGUzcG4nvDjQ7mrgX47vu6y5V1Tb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:85:04:de:ea:51:c6:1e:18:95:3d:65:b2:f0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Validity
Not Before: Apr 17 10:01:35 2026 GMT
Not After : Apr 18 10:01:35 2026 GMT
Subject: CN=601763bf4a4ad5764fd515866877e2699be32e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f9:24:94:aa:03:62:74:27:43:6f:0d:85:84:
e6:67:67:a7:ad:ec:37:80:9c:b1:2f:63:de:3d:73:
a8:e0:47:68:da:4f:04:0b:cd:15:79:33:59:4d:a2:
44:78:50:cd:39:e7:d9:62:6a:2f:42:f2:7f:cc:d8:
5c:23:9d:1d:fd:ce:43:09:c8:7c:23:cc:12:dc:e3:
08:c2:e7:7c:4f:2e:99:ab:5a:6f:be:ac:78:d8:04:
cc:81:b0:3f:37:52:e6:3f:2a:b2:bc:3c:de:6b:ad:
07:f4:bb:b7:82:73:f3:b9:0e:06:38:33:45:13:0a:
4e:a1:d9:28:f3:21:2e:a5:e6:d9:d6:ab:4b:84:71:
84:83:d3:74:90:20:cd:17:53:54:45:bc:ac:99:1e:
d1:72:62:bd:34:ea:00:95:8c:cb:74:e1:70:74:de:
08:1c:27:da:14:7f:d0:67:3b:fa:e3:f9:7f:db:b6:
53:de:4f:42:95:51:67:cb:95:ed:22:57:02:39:6b:
49:5b:f5:db:c5:8b:3d:cc:65:db:ee:ae:b5:a8:71:
29:a0:47:c7:42:b4:3b:3d:7b:79:ca:0b:b3:59:c5:
a2:e0:81:e2:36:d5:11:63:55:14:6c:be:de:1f:7f:
14:2f:75:44:a2:53:40:13:0c:56:0a:81:63:26:9b:
17:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:17:63:BF:4A:4A:D5:76:4F:D5:15:86:68:77:E2:69:9B:E3:2E:7E
X509v3 Authority Key Identifier:
keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:34:9a:d3:86:ba:3a:8a:3d:7f:04:e9:a3:fb:7a:2f:99:
b4:45:3d:bd:50:9f:4d:74:19:92:6a:9a:77:42:16:30:f7:9a:
42:94:f2:0f:52:99:14:c6:a8:9e:7c:3c:39:2a:19:f8:b1:13:
59:f8:58:e4:64:9a:ad:85:1f:a2:62:93:1d:30:ef:0a:92:c5:
35:4d:cc:9d:12:5e:5a:68:16:6d:d9:b2:61:4a:7b:62:8f:5f:
2d:44:17:7e:8a:db:a3:b5:e5:a6:36:46:06:58:99:63:c5:36:
6b:95:86:ca:d9:f0:e6:4a:e0:c4:16:cd:5e:4f:16:24:15:8f:
ae:d7:b0:f5:3b:91:09:cd:91:cc:56:85:ed:d3:e9:71:7e:2b:
ee:7c:f8:e2:cf:75:d6:04:36:be:56:96:d4:92:4e:78:0f:ee:
c5:16:d4:e5:a2:3e:75:9c:8a:42:31:a7:53:b2:33:79:53:c6:
95:b8:20:3d:74:5f:9d:3b:5c:e7:41:64:e7:84:13:66:52:e2:
89:32:62:59:68:9d:c1:ec:ea:ff:64:b1:cb:fa:80:ed:c5:aa:
62:e9:dc:cc:51:8c:83:81:4f:d0:a3:c2:9a:0f:5e:84:76:2e:
1d:63:8f:de:6b:cf:dd:2f:11:04:4f:96:bf:6f:90:23:60:79:
fa:da:62:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:02 2026 by rpki-client