Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: 6h4c2gaMeoBToemljngL4t3R1lBwKKpIFqBeBDfuqPQ=
Subject key identifier: 49:0B:8D:52:46:D4:B6:AC:7F:FB:8D:96:89:86:81:8E:E6:A6:0B:C6
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 019D98F508795ADA173C5F8012E5A18B83FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 14DD
Signing time: Fri 17 Apr 2026 01:01:28 +0000
Manifest this update: Fri 17 Apr 2026 01:01:28 +0000
Manifest next update: Sat 18 Apr 2026 01:01:28 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: vpqhYzL9jkq9qAEkHZGutgYHyPqGSk4Dnj3mAkJS0VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:08:79:5a:da:17:3c:5f:80:12:e5:a1:8b:83:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Apr 17 01:01:28 2026 GMT
Not After : Apr 18 01:01:28 2026 GMT
Subject: CN=490b8d5246d4b6ac7ffb8d968986818ee6a60bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:68:7d:5d:52:ae:1e:0d:ed:ab:db:07:11:
cc:88:39:1e:9c:5a:db:8a:c4:08:98:14:42:3c:e8:
eb:dd:7e:b6:3d:ad:0c:1b:45:5b:22:a3:a7:aa:65:
5a:78:a8:07:18:cd:bf:ae:fb:0c:f1:00:32:4b:8c:
62:63:c9:e4:98:69:76:00:48:97:4a:77:47:21:14:
fb:6b:b9:95:0c:56:8b:65:93:73:fc:82:f3:bd:1f:
18:ce:18:26:6d:b7:b1:b4:6e:27:b8:fa:4b:d8:82:
3c:1d:99:46:e4:5f:29:4f:01:5e:c4:c8:67:a1:73:
a7:09:73:5e:21:84:53:25:78:10:2e:5a:d7:8e:3b:
e2:12:d2:21:1f:d6:b9:c7:20:23:44:fc:24:f1:bc:
d1:f0:36:66:d6:93:1f:ff:f9:27:f3:ec:2e:ce:d4:
67:53:ea:08:f0:2d:bd:50:98:b8:5b:7d:fc:85:60:
4e:63:fb:ff:b5:51:95:56:08:05:fb:0d:14:ee:8a:
90:f3:c7:31:7f:50:bf:d8:cd:df:e9:3c:9d:da:12:
f4:7f:a7:a2:27:69:42:0b:29:f0:07:58:15:d1:5f:
1f:e9:ae:69:27:31:cc:63:8b:96:39:a6:3d:9d:f2:
2a:38:af:55:fa:47:90:a8:cd:c0:20:3f:d3:4e:c2:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0B:8D:52:46:D4:B6:AC:7F:FB:8D:96:89:86:81:8E:E6:A6:0B:C6
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:65:bc:13:67:9d:36:f4:3f:44:82:f3:97:d6:51:80:1c:ea:
17:84:b7:45:92:5c:76:b4:fb:ef:92:c5:11:1b:d9:c1:98:31:
27:88:9e:6d:f0:24:39:8d:a4:17:8e:39:5a:24:ec:95:36:0b:
fb:1a:c3:01:d3:54:66:30:29:60:5f:55:41:df:40:47:38:f4:
dd:64:9d:1e:58:8e:24:41:ff:b2:ef:18:c0:e2:8e:e8:cc:d3:
98:04:d1:38:a0:67:19:9f:7b:c1:16:a5:21:52:51:24:52:dc:
56:cf:24:5d:6c:ff:ac:36:91:30:34:23:c9:d1:78:81:38:e3:
c1:62:a6:48:9d:ce:98:76:cc:27:a3:81:42:55:7e:c4:e7:78:
90:29:ff:26:fc:f2:77:3f:25:48:d2:ad:ef:33:db:e6:9b:4b:
a7:46:ec:63:08:95:4a:2a:83:6b:55:d8:d6:3f:13:f2:9b:98:
7a:b7:70:8d:99:1e:c5:3e:3b:0d:38:4f:35:46:8c:43:1d:99:
99:41:00:55:a6:42:63:30:af:6f:0f:63:4c:d0:46:66:4d:26:
89:a0:c6:72:3c:65:04:c7:0b:81:50:ef:8c:5e:f9:63:8c:c3:
51:9d:01:3c:2c:1d:cd:f0:21:2e:d1:33:a2:48:a3:a4:bd:90:
25:05:81:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:07 2026 by rpki-client