
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: 8GhhNql2BIZmtaBy+oQrVqXyPOLS/JHDkbf7moLOEOE=
Subject key identifier: A6:D7:AF:CC:B0:7D:F9:E7:52:D7:CD:80:22:50:18:D0:B3:7D:E5:B0
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 019CAB6BB5A04CAA9AB5C69002829FD1EE03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 180F
Signing time: Sun 01 Mar 2026 22:01:28 +0000
Manifest this update: Sun 01 Mar 2026 22:01:28 +0000
Manifest next update: Mon 02 Mar 2026 22:01:28 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: t8XluGnOHcVXvqbPoLJHKUGu3KIT+L83aRwg4kSsfLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:b5:a0:4c:aa:9a:b5:c6:90:02:82:9f:d1:ee:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Mar 1 22:01:28 2026 GMT
Not After : Mar 2 22:01:28 2026 GMT
Subject: CN=a6d7afccb07df9e752d7cd80225018d0b37de5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:88:b9:8f:88:70:6d:ad:d6:91:ed:7d:d7:b3:
15:3f:17:85:8b:14:f5:b8:e6:f2:c2:5a:ec:f5:1c:
d2:e0:d4:fe:a1:99:a6:f0:57:03:97:25:c9:e8:b3:
be:e7:c5:fe:53:49:67:0d:97:d9:99:7e:e2:93:68:
10:97:a1:9e:0b:ec:e8:b7:dc:a9:1c:b3:95:eb:b7:
59:93:ca:48:d0:df:ac:24:ef:b6:e2:df:ae:41:97:
f1:1f:df:09:d6:18:c1:20:da:68:63:ea:c0:ac:27:
7d:ec:4f:b0:94:bb:0b:14:5b:02:f8:1c:7b:93:57:
9a:82:94:05:05:b0:c2:f9:37:74:07:bd:e9:d8:ab:
cf:74:51:5e:19:c1:e3:93:c7:17:ef:e0:00:7d:1a:
92:c5:67:db:c0:c2:ee:01:53:6e:90:bc:02:13:e2:
15:b3:ef:7d:4d:ca:94:23:74:f2:60:31:36:b8:52:
a1:7f:0f:80:64:a6:e3:b7:f1:2e:cf:ef:86:e2:b3:
85:2c:9a:23:42:74:56:48:9a:55:8c:6c:6f:70:f9:
a9:bc:05:b3:b9:42:fb:89:c9:62:88:0e:1d:ff:01:
d1:21:7e:d0:4d:ad:d5:2f:8f:1f:53:45:2d:e0:92:
92:ef:d7:69:8c:f8:cb:00:09:aa:72:c1:48:e3:18:
41:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:AF:CC:B0:7D:F9:E7:52:D7:CD:80:22:50:18:D0:B3:7D:E5:B0
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5e:26:ed:0c:2b:d4:26:6c:6d:2c:8f:56:fc:bf:90:d3:df:
ce:f7:d2:c5:13:d9:51:cc:75:26:3f:98:04:f6:d4:e4:8e:87:
bc:b0:e7:3d:59:34:d0:d7:96:21:4a:9e:e8:d8:b1:14:13:63:
1e:b1:75:73:26:fc:03:8f:92:08:f2:fa:76:48:f7:0e:c6:bd:
50:3e:6b:92:4e:78:b0:6c:46:97:27:32:c4:82:4c:43:21:7f:
85:5c:e3:3a:87:21:de:85:28:60:8f:0e:fb:d6:51:4a:39:7a:
fa:a9:46:85:68:3c:39:38:4c:6c:5c:c4:45:0f:45:e0:a6:db:
29:62:0c:62:f1:85:bb:cc:7a:7d:e9:63:98:50:f9:9e:fd:27:
c1:a2:1e:9a:1e:cd:a2:c2:d8:28:0d:9f:64:2f:03:f1:ba:7d:
e5:9b:76:82:ef:57:3a:2d:73:e9:e0:a4:6d:54:bc:ac:fe:07:
73:ba:59:ae:04:f6:eb:89:a5:d7:28:89:0a:61:a1:e6:54:f4:
d4:e5:bc:8d:62:f0:f8:75:6f:f3:88:b3:6c:b6:38:70:87:59:
84:39:e9:e0:33:8f:0e:47:bf:c9:00:64:38:21:f7:5e:58:d0:
c6:97:04:a6:2b:b5:a7:81:86:9d:5c:9a:34:96:5a:d9:7b:99:
11:65:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:15 2026 by rpki-client