Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
File: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft (raw, json)
Hash identifier: ytCfEK7n3VuiRLjlTKWUA9yYBFBdsQ9Gv6zUptwrKXo=
Subject key identifier: 3D:BB:3F:20:26:F9:CF:CA:03:3F:60:94:1E:58:7B:F0:01:E9:69:EF
Authority key identifier: A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
Certificate issuer: /CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Certificate serial: 019D9A3E0BAC31DAC2F7B2E232F76A179B3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
Manifest number: 07E1
Signing time: Fri 17 Apr 2026 07:00:50 +0000
Manifest this update: Fri 17 Apr 2026 07:00:50 +0000
Manifest next update: Sat 18 Apr 2026 07:00:50 +0000
Files and hashes: 1: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl (hash: SXqbMEOt8glr7eV8zuyTLALgDRFWi3sBTBbFtPOmfcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:0b:ac:31:da:c2:f7:b2:e2:32:f7:6a:17:9b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Validity
Not Before: Apr 17 07:00:50 2026 GMT
Not After : Apr 18 07:00:50 2026 GMT
Subject: CN=3dbb3f2026f9cfca033f60941e587bf001e969ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:b3:ff:a5:05:74:66:3d:1f:2a:52:b2:d7:
df:37:ae:1f:41:38:69:ef:5e:dd:82:3f:46:5c:3d:
43:44:2b:89:a5:cf:77:ab:ed:9c:66:09:44:af:fc:
0e:3f:39:e8:64:4f:51:7e:87:0f:ce:52:99:ee:ad:
15:2b:81:b1:f2:20:6c:f2:db:26:ee:f4:2e:9f:4c:
ed:dc:c0:df:78:36:94:53:6e:b5:7d:eb:81:ac:3f:
4a:72:31:6f:c3:e1:48:ca:72:63:67:b4:8e:53:99:
04:88:a1:55:ce:18:8d:29:b7:9c:bd:5c:59:b2:f5:
ca:eb:0b:f3:ba:b9:49:b5:99:55:5b:88:db:16:8d:
98:db:68:e2:93:22:14:8b:e0:7c:e8:7b:13:8b:6d:
ec:63:fc:3f:dc:db:e8:ce:71:94:95:3f:03:cc:c4:
83:8d:10:ff:a6:72:a8:49:e2:8e:0c:25:bb:6f:95:
95:09:51:0d:76:73:d1:d7:5f:af:68:74:da:81:9d:
9e:35:d6:62:5f:d5:a1:30:e5:04:b7:36:66:fd:0a:
20:d2:85:52:a4:32:bc:26:25:d7:31:e3:d4:ab:c1:
e5:e3:65:14:3a:44:6f:9a:16:38:06:69:1d:f6:5d:
62:1a:e1:c5:98:2f:8b:84:81:ba:9d:c8:fc:31:4d:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:3F:20:26:F9:CF:CA:03:3F:60:94:1E:58:7B:F0:01:E9:69:EF
X509v3 Authority Key Identifier:
keyid:A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:9a:1f:54:8e:0c:ed:e6:e4:cc:f7:aa:99:84:16:78:b3:e6:
de:4a:82:51:70:18:88:2a:43:12:4a:4d:71:c5:b3:df:b3:35:
dc:2a:34:95:e1:17:67:e6:20:cd:54:92:9c:16:75:ed:67:83:
8e:7d:c1:0d:6a:b0:02:fd:2f:ac:5e:69:77:e3:4e:b8:84:9f:
80:f7:fe:8e:84:90:05:96:e4:86:9a:fd:5e:a8:ef:6d:30:4a:
e9:05:e6:f1:b1:ad:b9:21:1c:53:04:1c:8a:6a:bf:d0:d2:53:
9c:45:e6:7f:20:53:b5:f9:0c:9a:69:b8:5f:fc:d3:1c:f5:03:
41:b9:ff:01:5a:7d:f6:6a:3e:b3:44:5c:ed:78:62:10:ca:08:
e5:d9:ac:b0:3e:c2:cb:b4:86:8a:64:ab:68:e2:a8:d3:d1:0e:
37:e7:74:af:44:ac:4e:61:b6:57:65:1a:61:10:6c:3f:ac:40:
35:c4:da:01:c2:b2:42:df:f2:09:95:4f:27:d8:00:f4:9a:49:
16:2b:f9:71:69:6a:88:eb:d7:4f:63:8b:15:4c:b4:4b:07:17:
48:c3:56:bb:8b:cf:03:b7:23:3b:77:2c:cc:41:8d:93:fd:45:
92:42:d6:f9:3c:b4:4d:ca:8a:65:04:56:13:1c:c7:27:88:dc:
d7:27:6a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:08 2026 by rpki-client