Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: pVSpouF/o0ywH9L4D5CN9SAiXlSsqd+j5QwxSz6s4qw=
Subject key identifier: 8C:6D:9B:34:D8:E8:82:6F:24:2E:EA:7B:AE:78:21:92:CA:56:7E:89
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 019D2BBCB15F3B67BEF296E865D7A34B08E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 20:01:19 +0000
Manifest this update: Thu 26 Mar 2026 20:01:19 +0000
Manifest next update: Fri 27 Mar 2026 20:01:19 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: yJwMKl4LEz7kWC4do0klTwWJSnOR8UI4klymOyMQFBk=)
2: mKOuhDb0lNg_dJ83TTrmFYMNIeA.roa (hash: Om4b1zrUyorfRjmzpKplEidWPKteQvqXZcg+Z0i4g3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:b1:5f:3b:67:be:f2:96:e8:65:d7:a3:4b:08:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Mar 26 20:01:19 2026 GMT
Not After : Mar 27 20:01:19 2026 GMT
Subject: CN=8c6d9b34d8e8826f242eea7bae782192ca567e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bf:62:3b:d1:12:d1:99:cd:08:4e:85:0a:a6:
88:be:a7:b8:1b:d0:1f:d6:4d:f8:1e:08:ec:23:ca:
a1:ec:2d:d9:36:cc:03:05:ff:33:11:4d:23:42:5c:
38:e7:89:f2:8d:a8:09:c1:0e:e1:02:c3:23:38:d5:
4a:e9:10:89:ba:a5:c2:28:d9:08:52:f5:41:6b:48:
76:77:9e:44:69:24:35:1c:34:1f:4a:c8:66:c4:1a:
82:ca:6b:3e:e2:46:dc:24:ab:ad:45:fc:24:48:30:
a2:0c:f8:10:0d:56:e0:ee:47:0c:1f:90:1e:8e:b5:
c3:23:17:b5:8f:bb:24:7d:59:8b:c0:a5:3a:ca:25:
fa:1e:29:22:a7:c7:38:d9:51:7e:50:60:54:df:c6:
53:e5:77:5f:c7:db:54:45:39:9d:56:cc:05:db:13:
a6:6b:da:25:eb:db:a5:2e:2c:85:9a:a0:62:ac:b5:
2f:f4:56:b4:92:c9:79:cc:39:b1:db:3c:3a:7c:e2:
e7:69:78:cb:ee:7a:a5:bc:49:74:04:52:0c:33:24:
73:a0:c5:d1:dd:68:89:9f:b8:43:94:c8:1d:41:ae:
5b:fe:32:26:55:be:d8:63:8f:cd:69:7c:fb:63:03:
c3:7f:e5:5f:c1:c4:03:a3:6d:69:fe:05:63:6e:d9:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6D:9B:34:D8:E8:82:6F:24:2E:EA:7B:AE:78:21:92:CA:56:7E:89
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:32:35:6a:78:c7:66:a6:82:db:ca:0c:67:4c:56:21:e6:f3:
03:08:d3:43:00:d6:63:40:d8:ad:bf:72:51:b9:fc:8e:1f:d4:
1d:3d:79:fd:04:58:2c:c3:89:9a:fe:6e:14:3a:c9:ae:04:a6:
1e:aa:e5:cc:c9:bb:41:70:20:9c:2f:be:0e:48:fa:5c:33:76:
16:47:8c:2a:f1:3c:cf:e1:cb:3f:31:3f:2c:40:4e:ba:79:ff:
67:c9:bc:47:c2:42:09:f6:a1:21:62:0d:ff:37:af:d4:bd:1c:
b8:ea:fd:3e:de:a0:33:d8:9d:93:d5:2d:88:55:22:f7:a7:d4:
d9:73:95:08:8d:61:59:8c:5c:2a:40:32:90:bb:3f:0b:ce:41:
9f:ad:72:23:94:f2:41:2d:48:1e:a4:40:fa:e5:df:71:fe:57:
54:bb:5f:37:81:ca:7d:4a:f6:77:b8:d4:85:2e:a8:e4:4f:bb:
b0:ce:c2:a0:6d:73:94:fb:d0:58:ba:11:51:09:f7:a7:dc:f9:
88:08:c2:3e:76:8e:88:f2:83:67:6f:19:ed:18:a0:40:44:7d:
11:89:2d:1c:82:b9:55:7d:5c:39:e5:e3:ce:10:3c:bc:cc:3e:
aa:00:be:fd:0d:0c:64:81:8f:64:37:4c:63:cb:33:4a:e5:4a:
a9:f4:a9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:05:01 2026 by rpki-client