Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: CzeEe12lTc5xaa43opzSjWT2GknQH1GpIH7jUn41kD4=
Subject key identifier: 48:64:12:9F:89:09:3C:AF:6E:7A:8B:C9:B4:CD:96:B2:09:3E:50:61
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 019CAB6BDAA9D390A75BAE4FB4AD8BF54B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 0C05
Signing time: Sun 01 Mar 2026 22:01:38 +0000
Manifest this update: Sun 01 Mar 2026 22:01:38 +0000
Manifest next update: Mon 02 Mar 2026 22:01:38 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: 19UGuJ6dNobBRAGk2W/wXq+I5rD7d/jhujG/NjfWRLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:da:a9:d3:90:a7:5b:ae:4f:b4:ad:8b:f5:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Mar 1 22:01:38 2026 GMT
Not After : Mar 2 22:01:38 2026 GMT
Subject: CN=4864129f89093caf6e7a8bc9b4cd96b2093e5061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:c6:4c:be:38:e1:25:30:44:b9:92:32:af:
39:70:33:5a:cf:15:5b:65:69:4d:0c:cc:0a:c5:54:
f6:8e:15:58:82:26:87:bd:03:3f:94:6d:2c:c4:d0:
e3:13:e3:51:2c:ad:ce:22:f6:0c:39:5a:33:6b:bf:
4c:0b:c7:d4:b4:be:e3:5c:4f:aa:51:f8:b0:35:6c:
25:1e:64:36:7c:1f:38:d9:9b:9d:21:bd:e5:cc:66:
e2:04:6a:fe:5f:c0:2a:ed:46:fb:38:b3:7d:de:bd:
4f:2b:6b:96:c5:72:3a:07:a6:a4:3a:e7:e0:e6:b8:
41:ec:d9:c6:1a:7a:29:de:d7:be:97:ac:31:47:e5:
26:ca:d2:63:e4:46:a9:21:65:6d:38:a6:5b:5a:86:
0e:45:e3:aa:d5:8f:cc:ed:b3:05:51:7c:26:ff:3e:
25:78:c2:ad:c2:4e:bc:91:bc:21:22:3d:77:e8:80:
1d:25:f6:4c:c0:c1:93:8c:44:dd:bd:cf:a6:de:ea:
6a:ab:b7:8f:1f:53:4b:64:d5:dc:49:25:4e:4c:f9:
97:3e:a5:31:cb:d8:74:d8:dc:57:05:de:e3:b8:e1:
ee:85:c1:0c:93:d6:3e:80:a2:50:e3:01:6b:66:d2:
b4:86:3c:6c:47:e7:67:21:6a:a9:a5:56:4c:ff:71:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:64:12:9F:89:09:3C:AF:6E:7A:8B:C9:B4:CD:96:B2:09:3E:50:61
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2d:39:3a:ec:e0:b0:2b:d3:3e:28:4a:93:b1:65:19:dd:30:
8d:a9:4f:71:c0:81:57:fd:8a:ee:e9:7b:ec:d9:e3:db:28:b9:
74:0d:0e:33:24:25:0f:77:ea:67:39:3d:96:c8:86:7f:09:71:
8d:37:6b:af:52:7e:e9:57:b8:ad:9e:3c:4b:88:dd:1b:36:68:
5c:d2:70:56:3d:c9:51:78:39:89:74:e0:4d:66:20:c5:a5:1e:
33:1e:d4:63:64:db:4a:9b:ff:76:a0:63:22:64:97:d0:00:ef:
a0:c5:8d:1e:f5:cd:0c:05:4d:67:03:72:37:19:51:75:ca:7c:
39:64:cb:d3:d6:da:62:48:67:03:02:6b:e2:64:c8:b0:46:a9:
99:be:00:44:b0:c5:3e:81:11:d8:fd:1b:33:83:9d:e9:99:a6:
3b:ff:af:bf:66:55:f0:12:77:7d:9c:ab:80:6d:25:50:d4:55:
c1:06:2e:10:39:21:fd:4a:5c:d3:a6:8c:43:e6:2a:82:ff:92:
02:dc:7e:ab:33:84:40:ea:88:b4:6c:a8:a6:82:e0:92:6e:95:
e7:69:3f:43:8e:79:35:ab:31:db:f1:a7:d5:3f:33:4c:a7:db:
39:07:08:1c:81:8b:a3:86:4a:5b:21:a1:55:60:b0:7a:a3:c5:
da:86:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:13:21 2026 by rpki-client