Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft
File: o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft (raw, json)
Hash identifier: HJ+CRtWbkn5NeZXDXg05uX/ypRdPlUcMYnYexyMESZU=
Subject key identifier: 3A:F9:19:E0:DB:7A:9B:58:23:9E:71:7F:36:24:5A:79:14:B6:03:DE
Authority key identifier: A3:98:DB:08:BA:16:A3:73:90:D8:1D:A7:DE:63:25:E8:BE:A8:B1:0C
Certificate issuer: /CN=a398db08ba16a37390d81da7de6325e8bea8b10c
Certificate serial: 019D329A3409D4A8D5F5FE78BFB0372116D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5jbCLoWo3OQ2B2n3mMl6L6osQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft
Manifest number: 63
Signing time: Sat 28 Mar 2026 04:00:59 +0000
Manifest this update: Sat 28 Mar 2026 04:00:59 +0000
Manifest next update: Sun 29 Mar 2026 04:00:59 +0000
Files and hashes: 1: o5jbCLoWo3OQ2B2n3mMl6L6osQw.crl (hash: 3w1VcwCUdAFNBMqI1XSomS1NPmKiP+denENrTGadEN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5jbCLoWo3OQ2B2n3mMl6L6osQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:34:09:d4:a8:d5:f5:fe:78:bf:b0:37:21:16:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a398db08ba16a37390d81da7de6325e8bea8b10c
Validity
Not Before: Mar 28 04:00:59 2026 GMT
Not After : Mar 29 04:00:59 2026 GMT
Subject: CN=3af919e0db7a9b58239e717f36245a7914b603de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:bb:65:e6:6c:e3:83:8d:53:e7:f9:ce:0d:
05:4b:60:2b:88:ff:eb:8e:c2:9f:ae:d7:5f:46:2b:
cf:9a:a7:f2:91:97:70:1d:30:18:7f:06:57:7a:d8:
3f:10:fa:48:ef:5c:e9:18:19:f5:ad:6f:d0:2a:87:
78:fb:24:77:20:d8:63:1f:02:c9:ba:ea:34:2c:f2:
69:c2:05:10:11:c6:8b:ed:67:4e:ea:6b:0c:d1:f9:
dd:e8:a5:1e:37:05:ed:28:83:ef:15:ab:8c:1a:83:
d6:69:ca:90:df:e0:fa:37:74:23:ab:a3:1d:4c:eb:
7e:2d:8b:be:e5:a6:e6:24:77:87:d1:52:0d:0e:6e:
48:59:dc:8d:e5:7d:5e:a4:e8:31:bb:b2:31:9f:3f:
1e:61:88:f2:40:20:2a:d7:07:94:c8:72:dc:d1:aa:
f3:05:59:cd:ec:59:28:a4:d1:46:d9:32:0e:b4:3f:
1d:04:a4:a7:f1:f8:45:03:eb:ca:da:62:65:22:4f:
ac:c3:cf:13:e4:6b:8f:5f:17:97:aa:96:fd:2d:2e:
90:14:99:d0:f2:e7:5b:7a:90:6f:9e:68:e5:00:17:
52:8a:64:33:3d:2d:81:20:de:43:92:da:6e:57:09:
6d:65:9b:2a:b7:b6:4b:bc:b1:28:ca:d9:7b:c7:cb:
4e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F9:19:E0:DB:7A:9B:58:23:9E:71:7F:36:24:5A:79:14:B6:03:DE
X509v3 Authority Key Identifier:
keyid:A3:98:DB:08:BA:16:A3:73:90:D8:1D:A7:DE:63:25:E8:BE:A8:B1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5jbCLoWo3OQ2B2n3mMl6L6osQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4d:00:59:a1:cd:14:90:d3:f9:29:3f:7c:58:50:86:bd:11:
76:3e:80:8b:de:56:12:20:14:71:ef:9c:85:b3:a7:f8:bf:3c:
7a:d8:93:19:4f:53:7e:63:74:d0:4b:e8:e3:ff:1c:ec:43:bb:
77:2d:79:95:b1:d8:0d:04:09:4e:48:91:34:ef:7d:4c:f6:53:
60:03:8b:99:9d:db:ea:5c:83:c2:37:a4:31:a3:bd:69:e3:04:
28:59:ad:7e:19:02:be:59:8e:d5:56:e4:22:6f:b4:e6:ff:7f:
2a:60:af:bb:c2:e8:fc:3f:35:f0:6a:f6:15:6c:df:77:d9:37:
1a:64:86:48:35:3e:d5:24:a6:50:0c:12:05:4f:14:e1:0e:6c:
ec:84:26:7a:d1:1a:cf:9e:2b:dc:9d:d6:6c:36:79:a7:c1:90:
e3:7f:b4:e5:51:0b:db:28:6c:ef:b5:4d:81:58:f6:38:71:f1:
48:29:f0:d5:fc:8a:73:5a:6e:17:cd:b0:0f:72:79:46:1f:87:
00:b7:f5:93:7e:6a:96:78:72:d3:1d:da:7c:f1:e7:d6:31:30:
a2:f2:fc:7b:2c:bf:79:ac:e4:26:16:c2:2e:59:a4:80:7d:a0:
df:ec:cf:11:ff:16:01:c2:d8:2d:fc:be:8f:4e:3c:65:49:0b:
16:a8:b3:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ymjQJ1KjV9f54v7A3IRbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOThkYjA4YmExNmEzNzM5MGQ4MWRhN2RlNjMyNWU4YmVh
OGIxMGMwHhcNMjYwMzI4MDQwMDU5WhcNMjYwMzI5MDQwMDU5WjAzMTEwLwYDVQQD
EygzYWY5MTllMGRiN2E5YjU4MjM5ZTcxN2YzNjI0NWE3OTE0YjYwM2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+e7ZeZs44ONU+f5zg0FS2AriP/r
jsKfrtdfRivPmqfykZdwHTAYfwZXetg/EPpI71zpGBn1rW/QKod4+yR3INhjHwLJ
uuo0LPJpwgUQEcaL7WdO6msM0fnd6KUeNwXtKIPvFauMGoPWacqQ3+D6N3Qjq6Md
TOt+LYu+5abmJHeH0VINDm5IWdyN5X1epOgxu7Ixnz8eYYjyQCAq1weUyHLc0arz
BVnN7FkopNFG2TIOtD8dBKSn8fhFA+vK2mJlIk+sw88T5GuPXxeXqpb9LS6QFJnQ
8udbepBvnmjlABdSimQzPS2BIN5DktpuVwltZZsqt7ZLvLEoytl7x8tOZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDr5GeDbeptYI55xfzYkWnkUtgPeMB8GA1UdIwQY
MBaAFKOY2wi6FqNzkNgdp95jJei+qLEMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzVqYkNMb1dvM09RMkIybjNtTWw2TDZvc1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jOWM4ZjMtYzFjMy00MDg2LWExNzUt
ZGY1NDdlMWI0MWVhLzEvbzVqYkNMb1dvM09RMkIybjNtTWw2TDZvc1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9jOWM4ZjMtYzFjMy00MDg2LWExNzUtZGY1NDdlMWI0MWVh
LzEvbzVqYkNMb1dvM09RMkIybjNtTWw2TDZvc1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgk0AWaHN
FJDT+Sk/fFhQhr0Rdj6Ai95WEiAUce+chbOn+L88etiTGU9TfmN00Evo4/8c7EO7
dy15lbHYDQQJTkiRNO99TPZTYAOLmZ3b6lyDwjekMaO9aeMEKFmtfhkCvlmO1Vbk
Im+05v9/KmCvu8Lo/D818Gr2FWzfd9k3GmSGSDU+1SSmUAwSBU8U4Q5s7IQmetEa
z54r3J3WbDZ5p8GQ43+05VEL2yhs77VNgVj2OHHxSCnw1fyKc1puF82wD3J5Rh+H
ALf1k35qlnhy0x3afPHn1jEwovL8eyy/eazkJhbCLlmkgH2g3+zPEf8WAcLYLfy+
j048ZUkLFqizIA==
-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:47 2026 by rpki-client