Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: 90vwVyiFd/rmwM50cOOeo8iBzpA1BHdJpxgJqkA8LDU=
Subject key identifier: 65:2E:3A:97:77:4F:18:1C:38:DA:68:E3:24:FA:BD:7B:3F:4A:21:02
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 019DA48B7C46746709EE9F8AF774C5792BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 0C86
Signing time: Sun 19 Apr 2026 07:01:37 +0000
Manifest this update: Sun 19 Apr 2026 07:01:37 +0000
Manifest next update: Mon 20 Apr 2026 07:01:37 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: c/++5ipxsu0TE6VR0okXf8/CLiu70vW9ltnrkByQuXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:7c:46:74:67:09:ee:9f:8a:f7:74:c5:79:2b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Apr 19 07:01:37 2026 GMT
Not After : Apr 20 07:01:37 2026 GMT
Subject: CN=652e3a97774f181c38da68e324fabd7b3f4a2102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:af:8b:ca:76:d6:34:39:1c:d2:cb:7a:ca:
91:1b:1c:bc:c6:8b:9a:5b:b5:79:08:c7:c8:bd:12:
b3:02:e2:bd:c1:50:a5:6a:05:73:ac:19:61:04:53:
21:c4:f3:e2:7c:1c:bb:6f:2f:3a:16:8d:14:b7:b5:
41:2c:10:f6:09:4e:fd:b4:e8:35:de:98:25:35:e1:
0a:70:3a:ea:c6:ea:4f:22:df:2a:f0:39:09:0a:18:
3a:4d:ce:1d:2c:c5:5e:d7:44:35:29:67:9e:be:6b:
55:8d:b8:08:34:88:9c:bc:5a:13:04:aa:22:7c:c7:
5a:48:27:20:90:00:f4:f8:95:d7:93:c8:77:3f:13:
2f:e2:76:6a:50:3b:3b:7a:8b:86:b3:ae:c4:46:83:
67:9c:53:bd:ab:c9:4a:0b:86:5f:73:dc:e9:86:e2:
c7:59:bc:0b:a3:58:d0:e8:2e:ea:92:f3:24:71:ed:
c7:6e:4e:a5:8f:8c:a8:f0:5b:42:e4:ba:e4:21:56:
a4:9f:1e:4c:2c:eb:1c:a1:2c:ce:be:89:37:9c:13:
54:1a:5e:ba:4f:75:69:88:57:88:52:da:25:16:58:
36:ee:18:44:d1:c0:79:6e:15:30:b5:7e:9b:17:61:
5d:ed:5c:29:fc:7b:c4:da:42:6e:10:dd:5c:d9:5f:
48:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:3A:97:77:4F:18:1C:38:DA:68:E3:24:FA:BD:7B:3F:4A:21:02
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:86:56:4c:e6:53:7e:cb:d4:29:79:25:67:88:da:76:3e:3a:
4b:95:f3:53:85:c6:95:62:f2:97:c5:8f:b7:08:5b:46:4a:39:
1c:b1:4e:7e:e0:c3:84:2f:a2:f2:3b:71:ff:e4:4b:a4:ce:e1:
f5:19:f0:08:e8:3e:95:f5:42:e4:b3:bb:e2:58:b4:93:62:4d:
23:14:92:8b:b2:4c:7f:65:31:fe:7a:e0:ba:69:1d:80:ab:a7:
62:ca:f4:f3:ed:ee:15:99:9b:11:c1:ed:15:e2:d9:9a:6b:f9:
aa:10:23:12:6b:82:a7:d5:2b:2e:e5:ed:e4:0d:a6:af:72:e2:
d8:13:10:c0:5c:9d:10:72:05:dd:45:bf:7b:3b:2a:cb:e1:03:
d2:ba:9a:bc:b1:a7:cb:82:1a:c8:32:48:bf:68:ba:11:bd:bb:
9c:0c:68:d7:4c:4e:f9:1a:03:17:e3:ac:83:ec:87:ed:ad:9d:
7d:6b:b6:06:b4:a6:c6:94:cb:c4:04:ff:24:8f:75:54:fa:00:
ab:51:62:c0:25:f5:69:69:23:21:82:82:d1:7a:7f:32:15:0d:
5b:a3:46:29:f9:15:54:85:bf:55:c6:ec:f2:ba:53:06:f9:96:
71:6e:aa:a0:47:73:7b:b0:46:44:e8:03:62:a6:61:07:b8:43:
0b:3b:35:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:20:49 2026 by rpki-client