Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
File: oUYsqczoyP_R-dfefH6QXG6JPPw.mft (raw, json)
Hash identifier: 9J1qdnqPYIafnMgnAXZ5dD360ciOEWk/bSI+DTN06W4=
Subject key identifier: 46:4D:67:64:74:EE:BF:0E:0B:E1:5B:FE:54:6C:D5:5A:D6:CE:12:05
Authority key identifier: A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
Certificate issuer: /CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Certificate serial: 019CAD5A7B9FD29DDFB201D8B927ED08F159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:53 +0000
Manifest this update: Mon 02 Mar 2026 07:01:53 +0000
Manifest next update: Tue 03 Mar 2026 07:01:53 +0000
Files and hashes: 1: oUYsqczoyP_R-dfefH6QXG6JPPw.crl (hash: ISfC+85j9GSEj+LoSw+S19Wn8ZjgzL33jSRsePlUjjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:7b:9f:d2:9d:df:b2:01:d8:b9:27:ed:08:f1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1462ca9cce8c8ffd1f9d7de7c7e905c6e893cfc
Validity
Not Before: Mar 2 07:01:53 2026 GMT
Not After : Mar 3 07:01:53 2026 GMT
Subject: CN=464d676474eebf0e0be15bfe546cd55ad6ce1205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:a8:e7:13:4a:13:b6:e2:2b:6a:c2:1c:ab:
0b:fb:61:78:6d:86:37:74:ba:34:2b:ec:74:e9:34:
3b:fe:2e:e5:98:f0:73:29:a4:0b:1c:65:13:e2:54:
fc:cf:9b:c6:6a:23:a8:1f:d2:93:ad:35:e9:2a:66:
4b:3f:cd:e5:04:ca:11:4b:48:00:c0:75:0e:8d:50:
eb:82:86:c0:99:91:e1:06:cf:9b:51:27:9e:51:54:
08:65:77:57:04:5c:35:be:08:56:20:ee:69:a3:cb:
8e:17:df:42:4c:c2:57:f4:bd:b9:86:c0:5c:50:73:
6c:d1:d0:b1:b4:a4:5b:ae:57:9e:21:cc:ff:8e:a7:
fa:ef:66:4d:2e:eb:fb:69:bb:ee:47:23:70:3d:42:
6d:03:69:26:8a:3b:8c:a7:59:c1:bb:da:5d:e7:e0:
3b:50:d1:34:77:a5:20:4e:d4:75:71:b1:f4:4e:0e:
98:76:01:f1:22:5d:0a:2b:8b:60:2d:f8:15:3e:9f:
82:9c:91:0f:b8:e1:fe:96:45:dc:ca:01:ad:6b:7f:
ae:e4:5d:e9:ce:87:f9:bc:00:36:60:3e:9c:41:6e:
75:b1:07:2d:90:3d:5b:34:17:00:fc:b6:16:67:b8:
4c:fd:a6:6f:95:57:d6:e4:8e:c4:7b:e2:22:7d:35:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4D:67:64:74:EE:BF:0E:0B:E1:5B:FE:54:6C:D5:5A:D6:CE:12:05
X509v3 Authority Key Identifier:
keyid:A1:46:2C:A9:CC:E8:C8:FF:D1:F9:D7:DE:7C:7E:90:5C:6E:89:3C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUYsqczoyP_R-dfefH6QXG6JPPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7971ed-5842-4e5b-b828-272cc92cc60b/1/oUYsqczoyP_R-dfefH6QXG6JPPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:91:9e:1e:bc:4b:22:2d:e5:17:89:1d:7b:0e:0d:83:59:a5:
cf:16:8f:65:cf:14:25:e0:3b:e7:7a:e5:78:d4:8c:b3:9b:3c:
3c:5f:29:a7:db:f7:c8:23:f7:c4:f7:c7:bf:e9:45:4c:92:83:
40:12:dd:7c:9a:89:33:17:53:ef:81:30:4a:a2:b8:f7:07:7c:
82:d7:01:7f:6f:9a:20:7e:ed:03:95:b2:76:94:6e:fb:e1:ef:
85:fa:b3:e3:4b:9c:3e:e8:5e:5f:f8:10:6c:20:19:34:4a:b3:
08:09:05:5c:44:65:d4:cb:18:11:9e:70:e3:6e:76:bd:8a:d6:
2c:e0:c9:60:52:22:ce:d3:d2:fa:20:21:97:6e:8f:22:24:8e:
8d:ee:a3:b8:91:87:71:d3:49:eb:ac:9c:7e:3f:d4:b7:aa:c9:
de:1e:b1:e4:fe:f1:fc:15:ef:ff:93:51:f6:04:fb:06:e9:5c:
4e:75:7d:6b:ad:83:69:ab:c4:06:f8:9c:e0:b1:34:e7:a1:1c:
6f:94:b4:c7:d2:a0:1c:7f:e4:48:29:2c:84:b7:82:8e:d3:b9:
73:65:38:bc:c2:92:b0:59:77:0d:49:9d:b6:1b:0a:2a:ca:c2:
3b:e7:a1:12:19:6f:e7:80:8d:a6:8e:4e:d4:1d:0b:39:21:53:
17:d2:25:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:45 2026 by rpki-client