Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier: b82dEgTX7zd7BxT66RVE8BEDRfX7ANF6jT5v+s+C6nA=
Subject key identifier: 9E:C9:44:03:9A:F7:FB:7B:FE:2E:1B:C6:B5:7D:0E:B3:B7:EE:1F:DA
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial: 019CABA23A25C636DBE5E01C95F394DB033F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number: 0555
Signing time: Sun 01 Mar 2026 23:01:01 +0000
Manifest this update: Sun 01 Mar 2026 23:01:01 +0000
Manifest next update: Mon 02 Mar 2026 23:01:01 +0000
Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: KU6aGL4+iiWePWgkXcaH/ba4eoTFn73EkcbwBQ7x8ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:3a:25:c6:36:db:e5:e0:1c:95:f3:94:db:03:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
Validity
Not Before: Mar 1 23:01:01 2026 GMT
Not After : Mar 2 23:01:01 2026 GMT
Subject: CN=9ec944039af7fb7bfe2e1bc6b57d0eb3b7ee1fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e0:b1:37:1c:d6:09:03:01:78:64:47:fb:f1:
9f:35:2a:3f:66:d9:0c:3c:0e:5d:20:3a:14:8e:8d:
15:86:ca:5d:44:73:00:ea:00:7c:27:63:db:a0:63:
7e:b2:91:59:f3:f1:01:6e:68:21:41:77:80:c6:dc:
ed:bb:fc:63:3d:83:50:7e:2c:7c:40:d9:cf:bb:f7:
56:b6:5c:aa:7c:43:d1:e4:a6:46:df:3e:de:bb:42:
a7:be:52:7c:8f:07:02:41:ff:8a:2c:71:6f:3d:ee:
43:5b:d2:a2:99:cd:da:81:35:d3:6d:b1:0e:cd:a2:
95:66:48:66:4b:b6:2b:00:a6:21:28:db:12:6d:5c:
fb:1f:0a:90:1c:30:3f:09:d9:4d:3b:69:29:9a:ca:
4c:ef:8d:66:fa:97:4c:28:be:1f:37:d9:06:a2:43:
eb:58:6c:bc:4f:62:72:86:bc:f8:41:66:5b:da:41:
6a:f9:b9:7d:11:b3:4f:55:7d:bc:60:24:a6:a1:da:
6b:04:44:21:bb:cc:be:d2:c3:7f:c6:d0:14:a7:a1:
ef:8c:2e:53:fb:2b:16:54:39:9e:62:31:bd:85:29:
21:0d:d9:3c:ab:af:94:4e:c9:44:82:38:e1:b7:88:
ce:a4:cb:ba:61:68:37:01:9f:c1:f5:e2:b4:9b:43:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:44:03:9A:F7:FB:7B:FE:2E:1B:C6:B5:7D:0E:B3:B7:EE:1F:DA
X509v3 Authority Key Identifier:
keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e2:2b:8a:28:de:93:5c:4e:d5:10:fe:aa:4d:6e:61:87:38:
5e:45:df:3a:1f:51:d1:e9:b3:ac:be:28:84:02:0e:b1:0e:b1:
a4:31:26:3e:b2:39:82:fc:76:f5:bf:7e:ed:ac:4c:1b:cd:60:
a1:7c:4a:92:bb:8a:c6:83:df:a2:de:e8:1f:27:d8:ac:d9:4c:
53:b7:fe:d1:97:cd:a5:6e:94:46:51:03:2b:55:41:c8:37:b0:
d8:1f:3e:da:6a:57:6c:0a:a7:7b:9d:e9:37:14:c3:47:02:bd:
c5:50:9c:8d:74:d8:59:6c:ca:6a:c8:df:98:4e:b8:73:44:fd:
3c:4b:ad:1c:9f:f8:1f:c2:48:75:46:fd:60:01:f0:a3:4f:a4:
e2:f0:b0:a3:a3:ce:77:b2:ca:34:0c:59:a5:0f:22:bc:7c:bb:
9a:36:f8:73:8d:49:eb:2a:9c:11:c7:59:e0:79:99:0f:0a:df:
76:bd:72:d0:e7:5f:23:be:e2:39:cc:ea:3d:05:1c:db:42:71:
50:6f:b5:01:7b:6a:56:4a:0f:24:e4:c6:8d:96:77:f9:34:d5:
7d:22:7b:bd:1f:52:13:28:5a:1d:da:1b:5b:ab:46:be:6a:2f:
19:70:65:90:b9:8b:be:fd:bc:48:8b:7f:cb:37:b7:f8:07:82:
b8:0d:4c:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrojolxjbb5eAclfOU2wM/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMzVlZGI1MDY0MjExNDQzMWFkYWVkOGJjNTA1ZTY4NTU5
Y2FkNGEwHhcNMjYwMzAxMjMwMTAxWhcNMjYwMzAyMjMwMTAxWjAzMTEwLwYDVQQD
Eyg5ZWM5NDQwMzlhZjdmYjdiZmUyZTFiYzZiNTdkMGViM2I3ZWUxZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOCxNxzWCQMBeGRH+/GfNSo/ZtkM
PA5dIDoUjo0VhspdRHMA6gB8J2PboGN+spFZ8/EBbmghQXeAxtztu/xjPYNQfix8
QNnPu/dWtlyqfEPR5KZG3z7eu0KnvlJ8jwcCQf+KLHFvPe5DW9Kimc3agTXTbbEO
zaKVZkhmS7YrAKYhKNsSbVz7HwqQHDA/CdlNO2kpmspM741m+pdMKL4fN9kGokPr
WGy8T2Jyhrz4QWZb2kFq+bl9EbNPVX28YCSmodprBEQhu8y+0sN/xtAUp6HvjC5T
+ysWVDmeYjG9hSkhDdk8q6+UTslEgjjht4jOpMu6YWg3AZ/B9eK0m0NXoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7JRAOa9/t7/i4bxrV9DrO37h/aMB8GA1UdIwQY
MBaAFKA17bUGQhFEMa2u2LxQXmhVnK1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMTM5ODMtZmNkNS00MmQ1LThmMTUt
ZDQ5OGFhYjRlYjJhLzEvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMTM5ODMtZmNkNS00MmQ1LThmMTUtZDQ5OGFhYjRlYjJh
LzEvb0RYdHRRWkNFVVF4cmE3WXZGQmVhRldjclVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOIriije
k1xO1RD+qk1uYYc4XkXfOh9R0emzrL4ohAIOsQ6xpDEmPrI5gvx29b9+7axMG81g
oXxKkruKxoPfot7oHyfYrNlMU7f+0ZfNpW6URlEDK1VByDew2B8+2mpXbAqne53p
NxTDRwK9xVCcjXTYWWzKasjfmE64c0T9PEutHJ/4H8JIdUb9YAHwo0+k4vCwo6PO
d7LKNAxZpQ8ivHy7mjb4c41J6yqcEcdZ4HmZDwrfdr1y0OdfI77iOczqPQUc20Jx
UG+1AXtqVkoPJOTGjZZ3+TTVfSJ7vR9SEyhaHdobW6tGvmovGXBlkLmLvv28SIt/
yze3+AeCuA1M/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:47 2026 by rpki-client