Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
File: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft (raw, json)
Hash identifier: CXYxQnGrHjygXjPhdPBTx3cm3bwPohOnOuSQpS5W870=
Subject key identifier: F5:FB:1A:E1:29:59:24:6C:FC:33:03:F0:55:60:2C:B6:8C:4D:F9:36
Authority key identifier: A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
Certificate issuer: /CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Certificate serial: 019CACB4D12BC0ED6C6EC910EDB1687C604C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
Manifest number: 0766
Signing time: Mon 02 Mar 2026 04:00:56 +0000
Manifest this update: Mon 02 Mar 2026 04:00:56 +0000
Manifest next update: Tue 03 Mar 2026 04:00:56 +0000
Files and hashes: 1: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl (hash: 7CBfDhMo8IkVH4ZGMVQkOPreFv5w8vL8mjjlS3P7FCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:d1:2b:c0:ed:6c:6e:c9:10:ed:b1:68:7c:60:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Validity
Not Before: Mar 2 04:00:56 2026 GMT
Not After : Mar 3 04:00:56 2026 GMT
Subject: CN=f5fb1ae12959246cfc3303f055602cb68c4df936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:31:76:a7:5f:1f:44:df:1a:53:03:f1:52:33:
68:08:76:55:7c:1f:8d:b0:6b:1a:8d:25:9d:ad:7e:
6f:3e:6c:b2:de:11:be:5a:e4:f1:e3:4a:5e:fd:1b:
7f:c1:96:5e:04:86:47:19:10:1f:bb:63:14:6e:67:
18:ff:52:9e:fa:32:a2:0d:e2:8d:1a:b4:1c:bf:6e:
54:d7:9a:4e:6e:30:4b:bc:7d:72:1d:57:db:83:81:
84:0a:de:95:38:33:90:e8:7a:fe:51:1b:e7:e8:c5:
f7:3f:15:77:0d:95:26:46:e3:0f:9e:f0:35:44:83:
6c:48:ef:db:9e:98:87:91:d1:09:86:0f:f7:7c:be:
57:63:f6:5a:22:98:24:90:b4:03:7d:b7:f5:03:96:
16:39:32:12:d2:99:2e:c9:66:05:86:5e:a8:ec:31:
4f:54:89:48:7f:88:a1:d5:db:31:af:05:c4:40:ed:
4c:64:cf:cd:4d:dd:27:06:79:56:b1:4b:ff:10:fe:
30:cc:70:57:9c:12:21:90:46:8f:06:b2:62:70:cd:
45:43:81:f4:59:76:ca:5e:b1:33:4a:d1:ef:2e:49:
c0:43:02:c9:ab:92:ee:e2:7d:8d:55:79:33:67:da:
e7:e7:33:74:1e:7f:40:f8:f3:b3:be:5f:ea:26:db:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FB:1A:E1:29:59:24:6C:FC:33:03:F0:55:60:2C:B6:8C:4D:F9:36
X509v3 Authority Key Identifier:
keyid:A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:68:fb:7a:92:00:42:9f:c5:0e:67:02:15:d7:38:76:3b:7b:
a6:61:fd:14:e0:3f:3b:aa:16:83:90:b6:a5:7f:cc:de:47:7f:
1e:4f:3b:51:86:38:61:7a:92:7c:22:01:fd:bf:bd:4e:92:af:
da:bc:f9:77:16:bd:04:10:ae:f7:14:92:c2:ba:dd:ce:91:b7:
3a:bc:09:5b:7e:79:57:ef:6d:ee:85:5a:2b:27:84:e8:73:c1:
b1:5a:7e:e2:41:3b:de:fd:b1:73:c1:58:fd:bd:b9:ac:d1:3b:
c9:73:93:09:a6:e9:a3:80:bc:e3:76:39:cd:72:fa:3f:18:8d:
38:23:42:43:38:49:72:e8:99:e8:b5:fa:6b:71:25:92:1f:0e:
85:89:55:84:08:ee:bc:0b:48:9a:6c:3c:ff:c5:b3:08:13:d7:
71:be:05:ca:7c:6c:2a:68:20:84:e8:e9:17:65:3e:2a:ff:49:
36:4a:00:1c:49:64:54:24:d7:cd:62:6c:ea:b1:7e:82:a7:41:
7f:e7:76:83:9b:ff:13:1e:64:bb:46:a6:47:06:f3:a2:d3:18:
74:61:f2:e6:ad:bd:65:9f:e4:84:da:d7:c8:60:17:05:75:f2:
fa:52:59:e0:7c:fe:f3:81:8f:e4:0d:d5:d4:49:f2:15:48:50:
e3:75:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:05:32 2026 by rpki-client