Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: i4dC4Z4xtCw1EbuIQOTVaYNy3w+ruoanBdiPBw0FCJ4=
Subject key identifier: BE:57:D7:08:2B:3F:76:8E:16:15:B2:2B:57:CC:18:7E:3F:10:E1:D0
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 019D2B4E664045BB83A47F7A7B02AABBFB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 0474
Signing time: Thu 26 Mar 2026 18:00:51 +0000
Manifest this update: Thu 26 Mar 2026 18:00:51 +0000
Manifest next update: Fri 27 Mar 2026 18:00:51 +0000
Files and hashes: 1: 5KspkUlNT9BbAUaOg4XWjrocZnM.roa (hash: 1rw1PhJZEsHj02oRb/8duN7T9vEuiylU/SbsI5Ekwko=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: 7OFf9Df9Xz7gXgjU8VBNEmN2H7rqXu28lD1ioqiFx1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:66:40:45:bb:83:a4:7f:7a:7b:02:aa:bb:fb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Mar 26 18:00:51 2026 GMT
Not After : Mar 27 18:00:51 2026 GMT
Subject: CN=be57d7082b3f768e1615b22b57cc187e3f10e1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:a9:40:66:7c:7e:38:77:26:76:52:47:d4:
09:09:4a:fb:07:a4:01:fc:23:e2:f2:c8:ff:f0:b8:
eb:32:18:0e:78:63:a4:ed:b2:d2:da:cd:77:ab:05:
38:15:c6:0f:db:f1:4a:64:73:72:ec:7a:66:ba:40:
69:7c:33:c2:ec:45:b5:2f:41:b9:ee:c9:e9:21:98:
76:05:0a:00:5d:3d:8c:01:cc:42:77:dc:dc:aa:c4:
e6:c1:b1:97:92:54:ea:83:b8:f4:25:df:ca:74:f0:
44:e8:67:01:e0:d9:17:5e:f8:36:53:4d:88:f9:84:
e2:66:6c:73:14:6c:4b:83:3f:0b:8f:6a:ae:db:7a:
34:66:9c:2d:4a:c1:a2:66:ff:c2:d0:8c:c8:8e:62:
94:b6:a4:56:d6:18:33:1f:8b:07:02:24:0f:7a:7a:
e4:05:a1:f6:bf:cf:f2:f1:2f:33:ab:52:84:3a:e8:
60:6a:bf:db:2a:d4:38:6b:ec:d7:f2:6e:cc:d4:c0:
42:34:f4:6c:b5:12:04:48:f3:e4:f0:43:ab:ce:d4:
1b:11:f0:62:78:d3:72:fc:6e:85:24:f9:0a:07:1a:
23:0f:5b:db:a3:fb:95:93:19:53:58:e6:4f:31:82:
2c:fd:4e:af:61:9d:f5:6f:9c:a5:0b:ca:2b:a4:1e:
54:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:D7:08:2B:3F:76:8E:16:15:B2:2B:57:CC:18:7E:3F:10:E1:D0
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:48:9d:ee:5e:f7:74:37:3a:ee:aa:b7:ba:25:e6:28:9e:4c:
51:3e:4c:eb:c9:ff:c4:9f:86:69:84:e2:ec:b4:9b:18:ba:51:
e9:38:cc:59:fe:6e:4d:fe:47:4f:5d:8d:2e:ca:2c:ca:0f:c9:
38:28:2d:8f:05:c7:90:bf:82:54:9a:70:8f:a5:eb:3a:02:db:
38:6b:36:f8:93:0f:d7:b5:c5:96:9e:64:04:45:1f:33:1a:e5:
01:fd:ff:03:a4:c5:41:aa:23:5b:4b:dc:49:84:a0:2c:71:51:
88:54:9f:c5:73:eb:b7:72:6f:48:4d:2b:7b:65:1d:84:e2:7b:
18:7e:b9:c3:e1:b1:63:fc:8e:ca:50:56:7b:b7:30:1d:00:80:
0c:0b:81:4d:f6:9f:62:f4:a5:4b:6a:4c:06:be:1a:a9:a6:ae:
b3:49:6e:90:9e:18:a5:84:0b:1c:3a:49:f7:e8:0f:96:28:05:
88:eb:d8:86:9c:e8:7a:af:6f:df:d2:24:2d:da:85:e5:8d:1e:
84:23:04:c8:29:a7:3a:a6:cb:e2:93:ca:f1:47:98:02:34:3e:
86:6c:18:d2:56:6a:96:b7:fa:e9:0f:b6:d9:c8:58:16:fa:9c:
a0:5a:d6:1c:a3:00:e9:24:85:25:8b:14:d1:53:fb:11:45:0c:
0b:8f:f0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:20 2026 by rpki-client