Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: /qA+v38dVB9Vxcg0P63tsFTLno1vggGYk4jshI+kHgs=
Subject key identifier: 92:43:EB:41:6C:BE:B0:34:4C:E5:77:BA:7F:7F:AE:AF:5E:4D:EB:11
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 019D277292B954FF1527631BCAA7CB2A129A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 0CFC
Signing time: Thu 26 Mar 2026 00:01:53 +0000
Manifest this update: Thu 26 Mar 2026 00:01:53 +0000
Manifest next update: Fri 27 Mar 2026 00:01:53 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: F/7qg30N75J8e1KN9nWCtborcvPewspbBA6cMK4sRSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:92:b9:54:ff:15:27:63:1b:ca:a7:cb:2a:12:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Mar 26 00:01:53 2026 GMT
Not After : Mar 27 00:01:53 2026 GMT
Subject: CN=9243eb416cbeb0344ce577ba7f7faeaf5e4deb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:01:72:16:76:03:02:cd:e5:6c:53:7c:8d:
e6:ce:8c:25:bc:3a:3e:ca:29:8b:6d:04:de:b3:3b:
68:70:1a:6e:17:69:fe:08:eb:80:68:67:77:ae:01:
05:9d:3e:c5:13:0d:8c:74:79:40:85:11:be:b0:01:
8d:51:89:97:f3:0c:83:6c:0a:c0:36:b9:92:4e:34:
fd:32:42:38:92:da:96:35:31:e0:a9:27:09:4a:45:
2a:2b:bf:b8:82:ce:ab:d7:5f:56:17:31:2b:f6:df:
d6:5f:15:6b:3a:eb:20:d7:ff:08:bd:90:65:31:fe:
25:1a:70:56:9b:33:48:77:86:1f:4c:1c:13:4a:34:
cc:11:c4:3e:b9:ab:83:05:6d:ec:39:63:45:69:21:
12:07:e5:a6:13:49:b2:0f:2c:50:d4:f9:dc:1c:f4:
56:cf:2e:ee:06:94:16:bc:18:09:b9:e2:f7:21:59:
b4:63:fd:58:b0:3e:ef:bf:94:f3:74:98:d2:da:bd:
b6:29:d5:60:6b:8f:65:a6:c3:ca:e4:65:c5:4d:7c:
32:e8:f4:89:9f:bd:76:fd:3d:e0:2e:e7:e2:4c:b4:
ca:b6:3f:54:20:4f:60:eb:45:01:98:3c:2d:3b:a5:
98:6f:a9:3d:67:b9:50:ff:e3:56:4b:0d:01:35:f1:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:43:EB:41:6C:BE:B0:34:4C:E5:77:BA:7F:7F:AE:AF:5E:4D:EB:11
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3c:2f:71:e9:cb:4d:d7:cf:a8:c3:32:c3:fb:aa:60:6c:06:
8a:c0:d2:aa:ce:5f:8c:7c:4e:71:c8:e5:9f:90:77:6e:a5:a8:
d4:ed:7b:4e:1b:52:de:52:59:bf:d2:bd:b0:5f:09:3a:94:65:
b6:31:eb:a2:10:57:18:cd:f1:fe:6c:1e:69:d1:01:82:4a:50:
9e:c4:6c:a4:ed:e6:e4:c3:24:3d:38:e8:f0:3c:32:a9:9f:28:
96:2b:48:69:b2:8c:6c:0f:ef:4a:1b:87:7b:fc:64:05:f3:85:
68:d9:1f:ae:4d:0f:3c:8e:af:c0:01:3a:49:a4:10:b1:d9:fd:
8f:6a:46:df:38:73:55:4a:b1:b1:67:4c:63:06:7e:52:70:67:
02:9d:a6:bd:a1:42:d8:db:47:64:72:6a:69:cb:53:ce:81:fd:
c9:11:b7:12:c8:b2:7b:3b:34:e4:ca:2b:ee:17:04:b2:c0:db:
81:12:04:4d:9c:e8:1b:1e:18:2c:d5:49:ba:b9:a4:5f:58:53:
f4:9a:79:2f:24:59:27:15:79:c7:d8:f9:9c:3f:40:57:db:57:
a3:94:e2:4f:cb:ef:5b:f7:7d:db:37:3e:28:4e:85:cb:73:c9:
67:94:b1:99:c1:8b:d0:f7:31:cf:f2:88:92:f2:a2:a0:b8:c0:
9d:24:4e:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncpK5VP8VJ2MbyqfLKhKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOTJmYzk2YTQ4Nzg5NTE0ZWIwOWY1Njc0YjU5ZGE1MmM5
MTE0ODMwHhcNMjYwMzI2MDAwMTUzWhcNMjYwMzI3MDAwMTUzWjAzMTEwLwYDVQQD
Eyg5MjQzZWI0MTZjYmViMDM0NGNlNTc3YmE3ZjdmYWVhZjVlNGRlYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAEBchZ2AwLN5WxTfI3mzowlvDo+
yimLbQTesztocBpuF2n+COuAaGd3rgEFnT7FEw2MdHlAhRG+sAGNUYmX8wyDbArA
NrmSTjT9MkI4ktqWNTHgqScJSkUqK7+4gs6r119WFzEr9t/WXxVrOusg1/8IvZBl
Mf4lGnBWmzNId4YfTBwTSjTMEcQ+uauDBW3sOWNFaSESB+WmE0myDyxQ1PncHPRW
zy7uBpQWvBgJueL3IVm0Y/1YsD7vv5TzdJjS2r22KdVga49lpsPK5GXFTXwy6PSJ
n712/T3gLufiTLTKtj9UIE9g60UBmDwtO6WYb6k9Z7lQ/+NWSw0BNfE8TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJD60FsvrA0TOV3un9/rq9eTesRMB8GA1UdIwQY
MBaAFKOS/Jakh4lRTrCfVnS1naUskRSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzVMOGxxU0hpVkZPc0o5V2RMV2RwU3lSRklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNzhmODMtNTM4NC00YzM2LThmNTEt
ODgzZjJmNmNiZjA0LzEvbzVMOGxxU0hpVkZPc0o5V2RMV2RwU3lSRklNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNzhmODMtNTM4NC00YzM2LThmNTEtODgzZjJmNmNiZjA0
LzEvbzVMOGxxU0hpVkZPc0o5V2RMV2RwU3lSRklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzwvcenL
TdfPqMMyw/uqYGwGisDSqs5fjHxOccjln5B3bqWo1O17ThtS3lJZv9K9sF8JOpRl
tjHrohBXGM3x/mweadEBgkpQnsRspO3m5MMkPTjo8DwyqZ8olitIabKMbA/vShuH
e/xkBfOFaNkfrk0PPI6vwAE6SaQQsdn9j2pG3zhzVUqxsWdMYwZ+UnBnAp2mvaFC
2NtHZHJqactTzoH9yRG3Esiyezs05Mor7hcEssDbgRIETZzoGx4YLNVJurmkX1hT
9Jp5LyRZJxV5x9j5nD9AV9tXo5TiT8vvW/d92zc+KE6Fy3PJZ5SxmcGL0Pcxz/KI
kvKioLjAnSROrA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:24 2026 by rpki-client