Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: LeGBstlM4u4GNCyU6aEkcwz4zAY0P+hEEZV5z4260Gc=
Subject key identifier: 05:D1:A6:F7:75:0E:0E:96:BF:B2:86:9B:8D:AA:04:BB:25:A2:0E:5D
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 019D273AF5CDEBA9E320387BAAA73779ECAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 1123
Signing time: Wed 25 Mar 2026 23:01:08 +0000
Manifest this update: Wed 25 Mar 2026 23:01:08 +0000
Manifest next update: Thu 26 Mar 2026 23:01:08 +0000
Files and hashes: 1: l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa (hash: mR/Sx8Gef6jaLXJaUX0OcwA84CHIBBS3pL7jXOr7b50=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: T71QUfoGBbEC5Nmc4qPrqiGmi+EvT+847cwxc284d5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f5:cd:eb:a9:e3:20:38:7b:aa:a7:37:79:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Mar 25 23:01:08 2026 GMT
Not After : Mar 26 23:01:08 2026 GMT
Subject: CN=05d1a6f7750e0e96bfb2869b8daa04bb25a20e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:67:68:c6:a9:71:53:2a:4c:97:51:b7:fb:37:
2c:c7:c6:62:0f:48:5e:e3:31:22:a5:b1:2b:fe:3e:
0f:b8:44:cf:5c:89:4d:ba:b9:cc:21:91:91:71:1f:
ff:b2:f4:57:fb:31:49:12:f8:21:96:37:1f:e5:52:
c5:95:58:5b:00:cd:89:4f:41:6f:00:e5:ec:89:d8:
ff:cf:8f:6c:2f:d1:a2:dc:4d:10:d2:eb:dc:d3:2f:
cd:98:93:2b:c4:f1:81:24:32:95:42:8a:67:38:de:
cd:75:50:a5:e0:22:e3:1d:32:de:08:0b:98:86:20:
4a:cc:45:a8:a0:1f:ed:7c:fa:ed:3c:3a:2b:36:d4:
f9:ba:38:91:76:31:26:4c:46:0a:d6:4e:4e:2b:ff:
b1:ed:7e:08:c8:8f:3f:38:93:f5:5b:fe:95:cb:25:
0c:09:6e:53:59:f7:e6:07:96:d7:fb:a7:ff:aa:9c:
96:a6:df:07:53:79:ad:10:0d:37:46:57:86:d9:27:
45:70:a1:1f:68:52:bf:a0:f2:01:8d:9d:da:a1:25:
80:c7:ca:6e:6c:65:28:28:c3:d3:b7:4e:2a:cd:8c:
0d:db:44:33:06:43:84:0c:f4:08:c2:35:9d:13:81:
98:0e:88:18:38:aa:8e:7e:bf:80:1c:1e:e8:d9:58:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D1:A6:F7:75:0E:0E:96:BF:B2:86:9B:8D:AA:04:BB:25:A2:0E:5D
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:28:d0:f2:6b:f0:a1:22:c7:0c:f2:95:2d:ac:72:cf:bf:ad:
c9:ab:b0:c1:d0:b3:83:3a:33:79:8e:22:50:a1:3e:d5:91:ba:
02:44:a7:b4:62:b3:13:b2:32:42:2e:e7:85:fc:2d:a3:b3:ec:
60:20:5b:6e:48:fb:24:af:ed:ca:fa:5a:95:c4:82:67:b6:c6:
7c:15:2f:39:53:f2:02:fc:2e:74:34:96:f6:58:31:9b:8a:2a:
b1:ea:d9:ef:e9:75:fd:26:61:9b:f7:70:26:e9:c2:26:c1:23:
05:d1:57:95:f6:98:94:6b:2e:f9:c7:d0:68:91:0b:2a:37:c2:
95:3f:f4:f2:5c:be:37:40:52:bc:cd:f6:c2:0d:01:17:47:0c:
35:1d:81:9f:8b:aa:96:1a:2c:9a:41:4a:6c:c9:cb:6e:38:d5:
29:e7:81:2d:2d:8a:63:11:42:9e:26:90:e8:59:49:e3:30:ca:
56:1a:a3:02:53:12:dc:6e:1d:0a:16:a1:41:8c:8e:45:62:f5:
df:1c:98:ed:35:cf:3b:ce:f0:93:63:98:91:e7:07:f5:d7:a5:
15:a7:81:b3:ee:6c:bd:9b:fd:7d:e6:da:21:de:17:ca:f8:9c:
2e:c4:8e:fc:65:f0:b9:d5:e9:84:84:12:da:b3:32:d8:53:57:
e2:ff:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:21 2026 by rpki-client