Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: vxn0NgbTROEVrH5yLcq/brJX1/aZ61953NIUFa3TJYE=
Subject key identifier: 46:4A:FD:73:46:BE:57:CA:D6:BF:7A:E0:DE:8B:BF:B1:11:E4:1D:AE
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 019D265FAF21DF809B9FAB978D1D844C8C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 06C3
Signing time: Wed 25 Mar 2026 19:01:38 +0000
Manifest this update: Wed 25 Mar 2026 19:01:38 +0000
Manifest next update: Thu 26 Mar 2026 19:01:38 +0000
Files and hashes: 1: 8y7GNNa3VSZ0w99_9ipLylxWc2w.roa (hash: 5mPkRAu5BGZlM5kj1fiinENXANd4dMpIzIY3DWFLsx0=)
2: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: SwO+IDfjX+omx7igSmAoNkWoDjeX16KTjB4zELz28vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:af:21:df:80:9b:9f:ab:97:8d:1d:84:4c:8c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Mar 25 19:01:38 2026 GMT
Not After : Mar 26 19:01:38 2026 GMT
Subject: CN=464afd7346be57cad6bf7ae0de8bbfb111e41dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:31:7c:05:53:d1:a4:d8:13:4c:9e:e1:f1:
0b:c5:2a:77:b7:f8:15:58:a0:0a:ae:2a:e8:8b:60:
22:7a:b9:ee:56:bd:c4:25:69:29:f5:b8:b4:35:33:
f4:da:31:d9:8c:65:ce:1d:08:21:b3:87:fa:60:01:
a4:16:ca:7e:5e:79:75:31:18:0b:99:23:64:39:69:
6b:d3:12:21:a8:1f:61:50:a0:44:b1:65:34:aa:7b:
67:98:08:37:43:4d:f5:73:e2:70:59:cb:64:38:aa:
fe:45:75:b6:53:a1:fb:f0:57:68:db:18:c5:5e:d2:
ed:3c:bd:e1:f7:15:f4:d7:56:2e:37:d5:ea:13:9a:
66:66:74:c4:8a:2c:5b:9c:88:55:ce:4f:61:74:75:
f4:33:1e:29:33:df:62:ab:9e:18:7d:41:2c:9c:24:
81:7e:a0:74:6f:b7:e0:46:fc:fe:a0:24:a7:cf:b0:
1b:d9:db:63:5d:b3:e2:8b:70:40:77:ac:f3:e5:be:
c1:f1:c7:4a:c8:7e:f3:32:da:66:8e:df:46:f8:d3:
d1:64:b1:84:ef:58:c5:ef:be:26:da:38:82:32:39:
63:f8:9b:02:c0:b6:bb:ef:84:90:d7:82:7f:74:c2:
57:b9:71:d4:c0:46:96:55:2a:bb:84:bf:b9:c2:02:
89:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4A:FD:73:46:BE:57:CA:D6:BF:7A:E0:DE:8B:BF:B1:11:E4:1D:AE
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fc:aa:54:4c:07:f9:cf:3c:23:35:b9:18:ca:33:ef:ed:4e:
48:b6:1a:5c:63:e3:f0:39:ae:98:68:81:1a:8a:1f:22:6d:55:
9b:df:dc:2d:61:53:be:20:9a:17:45:96:d4:34:5f:e2:fe:04:
dd:21:06:4a:7a:b2:f6:01:ce:1c:dc:3a:85:e0:0e:e5:87:bd:
fe:d9:b6:6d:da:10:36:22:12:40:a5:a2:36:89:b0:ea:11:e6:
8f:b0:de:e4:d6:b0:7d:20:a9:8d:f3:d1:f1:98:aa:00:3f:5d:
00:d1:35:e6:31:56:f7:bc:48:c5:d9:0b:67:eb:a3:ff:dd:23:
ff:a0:33:51:9c:5d:60:37:6b:2a:5c:68:f1:c5:00:ca:3c:89:
ca:33:fb:b2:c0:6d:f0:d1:a3:96:43:85:58:30:28:55:f3:54:
8c:c5:7c:1c:ba:18:51:b9:cb:d2:1c:1b:5c:49:35:90:ae:33:
d2:ff:ed:80:60:49:f5:4e:10:3e:8c:d2:2f:a3:0e:6d:cb:d0:
be:fe:fc:c4:2e:00:ea:2c:05:29:8d:50:fc:b2:31:40:08:5a:
c9:9c:cd:be:d8:7f:8d:98:7d:c3:5a:5d:da:f5:2d:12:5c:65:
45:40:f0:b2:92:d8:aa:34:a7:bc:d8:1d:1f:64:84:2b:1b:e8:
6a:e2:ed:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:25 2026 by rpki-client