Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File: tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier: EwpF0g/y/FO+CMV6Jk6u4AEUVEZll3YhfifvDIw8MRo=
Subject key identifier: CA:2F:E6:DB:38:82:CB:DB:13:AC:DB:7E:5A:95:2F:11:69:47:7C:21
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer: /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial: 019D9AE3530B1B7F989B9DA1C5FB6F9B3895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number: 115C
Signing time: Fri 17 Apr 2026 10:01:22 +0000
Manifest this update: Fri 17 Apr 2026 10:01:22 +0000
Manifest next update: Sat 18 Apr 2026 10:01:22 +0000
Files and hashes: 1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: gwMHK7PF/qdXOT06JWIBMugG9hQQvkFbk7nAFGPeiOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:53:0b:1b:7f:98:9b:9d:a1:c5:fb:6f:9b:38:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Validity
Not Before: Apr 17 10:01:22 2026 GMT
Not After : Apr 18 10:01:22 2026 GMT
Subject: CN=ca2fe6db3882cbdb13acdb7e5a952f1169477c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:4c:39:66:bd:c8:d7:2a:0a:97:55:68:26:
c1:90:c4:86:df:7c:c8:b4:c4:6d:dc:8f:7b:a4:cb:
2f:d0:69:89:38:30:e4:17:a3:b7:6b:d2:6a:50:a6:
40:ac:4e:6c:0d:37:db:24:0d:d2:82:b8:12:29:40:
b9:45:6e:ce:10:c7:e7:a2:fa:25:0f:8d:7f:3b:25:
32:bc:c3:80:bb:a4:e7:aa:b7:67:4f:9d:57:d4:a6:
32:94:d0:4c:c8:64:0d:b9:8b:c3:1b:f9:17:5f:4a:
58:55:57:f4:b6:19:49:73:c7:a1:18:56:03:00:ca:
36:eb:e5:b8:63:95:5b:d0:ff:87:5b:5b:80:f1:fe:
6c:6b:b6:3b:c8:5d:6d:42:aa:67:fc:6d:d7:91:7e:
35:2d:de:8f:fb:ec:98:b5:c2:27:6c:20:59:0d:c7:
f9:0d:cd:ae:ab:9e:1c:06:c7:5a:98:71:82:cf:5a:
fb:7f:a5:ed:86:80:cb:5c:5d:84:99:1c:7f:04:f7:
81:34:fe:3a:66:f2:cd:ad:64:34:95:01:33:99:44:
80:88:e1:ff:62:8c:1f:a9:cc:28:06:f0:55:e7:92:
2d:72:f9:d1:16:6e:72:73:b6:2c:08:3e:cf:41:d9:
ca:87:38:b2:82:dc:6f:2a:93:1d:b3:db:a2:8f:8b:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2F:E6:DB:38:82:CB:DB:13:AC:DB:7E:5A:95:2F:11:69:47:7C:21
X509v3 Authority Key Identifier:
keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2a:6a:a6:62:e6:bd:9e:77:a2:b1:83:a2:84:ca:9d:c5:37:
8a:bf:65:6a:c1:fc:ec:1a:6c:6a:be:29:23:ce:08:94:65:6f:
e5:92:89:4d:8d:cd:5c:46:49:62:05:e3:31:c0:71:d9:37:38:
a3:7f:99:ee:47:46:db:a7:65:e4:9b:26:4a:89:06:be:d5:50:
49:34:31:6b:05:84:d1:3c:a9:d1:75:4a:49:ec:3a:f8:02:a4:
4a:39:cc:93:9d:25:f2:7c:41:70:7e:da:94:9c:3d:11:fb:b1:
21:fe:0c:e3:66:3b:6d:84:39:f1:0a:0e:2f:24:64:89:05:54:
6b:e3:28:b2:a7:89:b2:57:2d:49:e7:4e:32:59:34:ed:5e:11:
36:08:4c:47:8c:4d:8d:2a:c7:63:8f:ce:d7:41:65:4e:60:a6:
09:ef:5d:01:1c:71:18:52:bf:b3:e9:f3:80:5f:59:5d:7c:4a:
1f:ea:dc:28:4d:c7:7a:e7:31:16:96:b8:f0:fc:af:ac:96:07:
e1:08:90:8c:f1:ac:87:0e:82:ef:b9:08:62:38:0c:da:4f:a8:
0c:fe:c5:c0:4f:37:f9:bb:56:bc:bd:5f:c1:fd:43:c2:a6:a2:
2a:af:54:39:1a:cd:5b:50:2c:91:7a:80:57:ed:d6:81:36:a5:
ff:fe:fd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:18 2026 by rpki-client