Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
File: Os5p2XnZoNxneVEGweVayhVHCH8.mft (raw, json)
Hash identifier: THGrVKdq0uZN+Bad20z0Fo+gHVn09xnqdTazL6JKNEg=
Subject key identifier: F9:77:A4:E5:12:07:9E:88:B1:64:DD:DA:04:B2:14:58:2A:93:F2:F9
Authority key identifier: 3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F
Certificate issuer: /CN=3ace69d979d9a0dc67795106c1e55aca1547087f
Certificate serial: 019D27A87E2A9BE3A6659C192299C719829D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
Manifest number: 1880
Signing time: Thu 26 Mar 2026 01:00:46 +0000
Manifest this update: Thu 26 Mar 2026 01:00:46 +0000
Manifest next update: Fri 27 Mar 2026 01:00:46 +0000
Files and hashes: 1: Os5p2XnZoNxneVEGweVayhVHCH8.crl (hash: siyfcE5076QEHIo57XDC4Qz9ORFWy9y1DP7SMVorrXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7e:2a:9b:e3:a6:65:9c:19:22:99:c7:19:82:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ace69d979d9a0dc67795106c1e55aca1547087f
Validity
Not Before: Mar 26 01:00:46 2026 GMT
Not After : Mar 27 01:00:46 2026 GMT
Subject: CN=f977a4e512079e88b164ddda04b214582a93f2f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:92:25:cf:7c:f8:ae:32:c4:cd:a4:85:03:
84:bf:c5:e0:16:a8:51:3c:c6:83:3d:15:2a:f4:33:
f1:fc:9e:62:a7:ad:27:7c:05:ce:e8:d6:a3:49:ce:
c1:49:89:c3:b9:de:ed:30:a2:42:a8:02:66:36:e3:
80:65:ae:0c:00:01:d3:5e:40:00:24:8f:c6:c7:c9:
e7:cc:ce:ed:98:ec:5a:c0:ac:19:93:38:6b:73:fa:
48:99:35:f1:55:d0:06:aa:8e:3d:62:4b:4e:86:54:
fb:30:6c:dc:c2:55:5e:9a:48:9c:9d:55:f2:ff:8c:
c5:1c:de:92:a0:85:01:d8:06:73:d1:f7:9d:3a:a4:
88:fb:f3:3f:85:ab:39:96:8f:a4:22:c6:ed:98:29:
01:88:36:98:fe:8d:48:02:4a:5f:ce:64:4b:2e:08:
d8:8c:1d:04:a9:d1:0b:53:cf:3a:72:71:fd:9c:73:
e2:30:46:1c:2a:54:b0:35:2a:9a:51:23:e9:00:44:
5c:0b:85:a6:00:9b:a1:c9:63:59:ab:05:be:7f:3b:
23:4c:b8:ff:f3:e8:5a:b4:5d:2e:10:e1:1a:6b:58:
22:a3:a8:df:34:43:26:32:68:9a:f2:4d:c9:45:eb:
c0:2b:63:f9:b3:7c:e1:8f:26:78:1b:19:0e:bd:b8:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:77:A4:E5:12:07:9E:88:B1:64:DD:DA:04:B2:14:58:2A:93:F2:F9
X509v3 Authority Key Identifier:
keyid:3A:CE:69:D9:79:D9:A0:DC:67:79:51:06:C1:E5:5A:CA:15:47:08:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os5p2XnZoNxneVEGweVayhVHCH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/afd99f-df55-4e97-886a-a9775aa8d812/1/Os5p2XnZoNxneVEGweVayhVHCH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:03:8a:d1:da:9e:8f:e4:74:af:37:27:27:a2:9d:91:cb:b7:
21:50:fe:a4:ec:92:c8:e2:d0:4c:c8:df:c2:57:61:c8:03:32:
0e:a7:38:74:ec:15:27:b5:55:af:b3:04:e1:62:6c:d5:ed:39:
12:6e:59:20:33:81:bf:3f:d4:2b:d4:c8:4d:47:3c:d8:0a:bd:
70:da:0b:16:a3:8d:0d:c9:ba:98:10:82:ca:4a:b3:72:6d:2c:
02:1c:cc:9f:61:b3:20:5a:74:26:f6:39:0a:5e:bc:07:d3:f4:
55:50:d2:da:1d:c3:d2:16:7c:34:8e:97:84:e9:74:d4:51:e8:
b2:a7:12:fd:20:94:53:72:d5:1b:55:84:dc:03:55:d7:e1:6e:
88:a9:dd:50:02:71:ed:07:f3:bb:81:38:a1:89:f0:5a:ae:72:
a1:1b:76:80:27:22:0e:4c:14:da:a7:a4:b3:63:51:ad:a6:61:
66:94:df:83:86:da:3e:e5:b7:5d:a6:27:c3:56:79:b0:d8:5a:
d2:f1:f4:97:4d:16:b3:2f:ee:08:06:f3:4a:38:15:d5:8a:0e:
d7:6f:7a:d1:76:b1:f9:18:4e:12:68:18:e4:90:b1:f7:ec:77:
82:ac:ea:04:ec:c4:ac:54:b6:fa:a9:69:f4:e0:ad:6c:7a:7c:
82:f7:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:51 2026 by rpki-client