Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
File: ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json)
Hash identifier: vVabBf9V8914kJGocEoGI8mrkIawLScnq1xm1nK6A/I=
Subject key identifier: 07:27:12:CE:F6:82:AC:8C:F5:A6:C0:52:ED:1A:F3:1B:1D:5A:44:12
Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
Certificate issuer: /CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Certificate serial: 019D984F87564520EE0AF91454A598C1E51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 22:00:41 +0000
Manifest this update: Thu 16 Apr 2026 22:00:41 +0000
Manifest next update: Fri 17 Apr 2026 22:00:41 +0000
Files and hashes: 1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: D3LR0RVb9G2qPVcY1QGqNwha04De7Y8J3nggOfhX/zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:87:56:45:20:ee:0a:f9:14:54:a5:98:c1:e5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Validity
Not Before: Apr 16 22:00:41 2026 GMT
Not After : Apr 17 22:00:41 2026 GMT
Subject: CN=072712cef682ac8cf5a6c052ed1af31b1d5a4412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:98:21:9f:a5:ad:e4:60:d5:17:66:87:fc:75:
1c:b6:a2:26:55:33:12:80:20:1d:40:6a:ac:5f:cf:
59:75:84:f8:7b:f6:2d:6b:05:72:34:34:2f:f3:8d:
49:1f:16:ed:68:ed:4e:95:6a:18:46:e7:58:89:c8:
f4:d0:69:dc:fd:9e:4d:da:4b:ce:ea:ce:76:35:54:
50:2d:b9:8c:08:c8:3e:c2:b7:74:a6:44:a8:53:b0:
c1:53:b5:24:33:56:ec:80:15:5e:df:18:c2:ed:16:
f6:74:ba:ed:d9:0a:6e:79:d7:a0:f2:be:b1:64:13:
37:d5:7b:da:f4:ff:fe:4c:37:35:9a:02:2d:b2:14:
6c:d4:05:bc:4c:f1:25:bf:6a:3e:69:2a:45:e7:37:
36:f1:ec:60:cf:6e:20:3f:73:39:b9:07:4e:a6:f0:
de:00:e7:76:c7:b9:f2:93:c7:00:dc:b7:d3:ce:43:
bf:04:cd:00:3b:33:de:e5:94:76:43:f9:c4:ce:17:
ba:b0:a7:72:e6:65:e0:7a:a3:b8:49:80:5e:ff:2b:
4b:4c:de:bc:1f:3a:92:9b:68:3f:da:eb:4f:dc:6d:
0f:f4:f2:e9:12:f8:46:c1:48:11:cc:28:9a:03:9c:
d0:b1:02:5c:8c:59:0b:ad:44:3b:ec:cd:2f:3a:82:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:27:12:CE:F6:82:AC:8C:F5:A6:C0:52:ED:1A:F3:1B:1D:5A:44:12
X509v3 Authority Key Identifier:
keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:b1:72:09:f6:51:9e:9b:67:e9:74:d5:69:7d:d4:ec:e3:
c3:1f:8c:0f:03:14:2b:ed:e2:52:2e:92:5f:70:eb:3f:3d:6d:
6c:fa:8a:62:4c:bb:be:03:0c:0e:c6:f4:df:68:e9:ea:3b:38:
36:5d:6b:55:c6:6f:86:db:25:91:48:2a:ad:d7:cc:b2:ed:8f:
28:6a:6a:23:12:ad:8a:ae:bf:1c:e0:8a:4f:51:74:03:a5:e7:
77:6a:f1:a5:8d:c2:4a:f7:f9:5c:79:99:68:20:67:dd:d2:54:
b6:13:b6:99:06:e2:fa:63:a1:84:d2:61:36:81:76:47:df:39:
81:28:77:4a:da:fa:8f:11:94:58:96:1d:c9:a7:9f:1b:77:df:
29:1d:23:a7:d7:34:2e:e7:a9:b2:67:38:7d:39:14:4b:7d:a6:
d1:c7:40:64:b9:f2:34:04:0e:36:8c:9c:cf:ac:1d:89:b2:3a:
c3:06:5d:3c:d0:6d:89:ed:01:44:9a:8a:99:15:8d:b5:9a:a3:
6e:3d:76:d4:1d:7c:17:31:c2:32:58:ad:60:b0:5d:a6:81:82:
6c:2d:7d:f6:24:c4:21:c3:df:c4:38:05:d5:b1:49:8d:a3:50:
04:d2:20:c4:75:0f:c0:a1:a8:1b:e5:73:e7:69:9d:bb:bf:22:
f7:df:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:23 2026 by rpki-client