Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
File: oVJEYml6J_56uUtqypBnkx2SEC8.mft (raw, json)
Hash identifier: 4EvbwjQph5P5/dMvh2dsJOB1gFxILKwfV/CF1/Za5EQ=
Subject key identifier: 24:B0:CD:26:4B:C5:9F:BD:39:19:0A:EA:0C:C6:16:63:D9:C3:E9:6A
Authority key identifier: A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
Certificate issuer: /CN=a1524462697a27fe7ab94b6aca9067931d92102f
Certificate serial: 019D98F51B3F66CFA5A14FE9F781B32F553C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:33 +0000
Manifest this update: Fri 17 Apr 2026 01:01:33 +0000
Manifest next update: Sat 18 Apr 2026 01:01:33 +0000
Files and hashes: 1: oVJEYml6J_56uUtqypBnkx2SEC8.crl (hash: kdtuU6srC3NkHsTJLlx5eIhNeb5g9GXygHV0bTFfKP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:1b:3f:66:cf:a5:a1:4f:e9:f7:81:b3:2f:55:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1524462697a27fe7ab94b6aca9067931d92102f
Validity
Not Before: Apr 17 01:01:33 2026 GMT
Not After : Apr 18 01:01:33 2026 GMT
Subject: CN=24b0cd264bc59fbd39190aea0cc61663d9c3e96a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:1a:50:4d:6f:6c:3d:0c:18:ca:bc:14:bb:
7e:23:90:13:24:7e:cb:ec:7e:9a:95:52:fd:87:34:
5e:41:7d:3d:0e:b6:a8:16:40:c8:d9:f4:7f:1c:90:
1e:8b:85:21:6f:77:af:37:c6:09:b5:e4:01:a4:18:
37:79:2c:7e:e1:5b:20:7e:76:e2:ec:e1:8a:52:5e:
0c:37:b8:ad:c1:cc:22:2f:4a:52:9b:4c:69:90:6e:
10:3c:5a:69:c8:42:a9:5a:fe:bb:8f:8b:b9:b1:8c:
7a:95:af:77:f5:5e:e8:f1:18:90:b8:b9:dc:c7:69:
ab:39:23:1d:23:a7:a0:ed:38:7a:39:68:b9:1d:3f:
58:01:ab:5f:bc:df:35:64:73:cf:73:ad:bc:3b:19:
d0:9d:7d:60:18:a7:3b:b1:ae:66:9b:06:e9:23:2a:
09:a3:49:be:da:e2:c8:8e:85:bd:ab:25:ca:68:75:
cf:9f:74:12:05:fc:fb:87:a6:42:7c:6a:f5:b2:58:
cc:73:c5:db:da:72:2a:53:a5:e7:b4:9f:0a:0e:22:
97:86:8c:17:e3:5e:0d:54:48:03:0f:45:c3:11:bd:
38:76:0c:ff:eb:e6:ea:f1:12:9d:31:e3:f4:04:e3:
c0:b9:11:48:f7:79:77:dd:b3:13:17:81:0a:08:77:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:CD:26:4B:C5:9F:BD:39:19:0A:EA:0C:C6:16:63:D9:C3:E9:6A
X509v3 Authority Key Identifier:
keyid:A1:52:44:62:69:7A:27:FE:7A:B9:4B:6A:CA:90:67:93:1D:92:10:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJEYml6J_56uUtqypBnkx2SEC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ea76fe-6119-4de0-bf4b-4b1af414fd00/1/oVJEYml6J_56uUtqypBnkx2SEC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e2:89:10:36:eb:0a:38:05:72:ce:d3:b7:94:a3:7a:66:0f:
e0:fa:11:61:31:de:a2:f4:ff:e9:99:b8:9f:5f:59:cf:18:30:
3e:9a:f0:88:70:be:70:3e:9d:7f:fd:c6:e0:92:6a:73:89:30:
24:59:ea:56:13:93:df:fc:d9:66:20:8c:bf:51:4e:84:12:70:
76:96:30:8b:ae:b4:22:cb:4d:8b:d0:f5:2a:a2:81:13:71:74:
6b:91:7f:7b:45:8f:bf:41:8a:c1:68:b5:bb:a8:13:84:e3:2f:
e5:7f:e4:80:75:3b:f6:db:99:cd:fb:2e:89:7e:b1:c7:9a:ae:
a6:7b:68:86:09:9f:91:c1:99:ab:66:02:e9:2f:2c:07:66:8f:
64:6b:e6:37:4d:79:95:26:31:b9:31:6b:71:77:8e:3b:f9:a6:
21:37:75:6e:c1:47:5c:16:bc:28:61:43:e7:bf:96:e3:34:3d:
3f:96:e4:c6:23:f7:ec:4a:dd:57:5a:cf:bb:07:80:29:21:ce:
1a:34:0a:55:65:cb:45:39:d5:69:33:e8:b9:d3:10:c1:b6:c6:
0c:67:58:30:72:05:96:c1:fd:f0:a7:f3:84:e3:cf:b6:d7:93:
66:98:fb:33:db:db:87:d9:aa:38:a0:ad:54:3e:43:aa:ce:35:
97:46:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:00 2026 by rpki-client