Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json)
Hash identifier: 5lfwCGufcJmbm+vajcZ/EPreGtdCYnGTe5T/njkn/sM=
Subject key identifier: 47:F6:16:AB:2B:14:C8:49:6B:DE:3C:1B:24:6A:50:40:15:85:D8:F0
Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Certificate serial: 019D2AE1226B312FFA7E7891E0B6FD59A466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 16:01:30 +0000
Manifest this update: Thu 26 Mar 2026 16:01:30 +0000
Manifest next update: Fri 27 Mar 2026 16:01:30 +0000
Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: yj19w/4LbgLEsLaDPD7n12cMBfjq/bXbfNM3yZlgNes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:22:6b:31:2f:fa:7e:78:91:e0:b6:fd:59:a4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Validity
Not Before: Mar 26 16:01:30 2026 GMT
Not After : Mar 27 16:01:30 2026 GMT
Subject: CN=47f616ab2b14c8496bde3c1b246a50401585d8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:bb:f3:71:70:0d:c9:c5:32:68:89:97:74:
79:9c:0f:d5:f6:e6:7b:ba:03:14:18:34:66:90:f5:
16:86:63:ad:bf:3c:98:a7:28:b2:15:26:b0:5c:f0:
aa:4c:4a:fe:72:a9:3d:c0:e1:d5:ab:48:a7:72:6d:
3f:ed:d2:dd:ed:f8:b4:0c:a5:13:da:45:3b:f1:09:
5b:44:32:d0:86:6c:22:b3:53:91:4a:4e:b4:ad:bf:
20:a4:a8:d8:da:2e:5d:b7:a7:7e:70:12:ee:da:58:
0e:09:f7:51:8e:00:af:f0:0b:80:75:33:c0:78:46:
20:d2:c6:b0:a3:38:1b:17:fc:b5:31:8c:ad:8a:ec:
fb:e7:8e:08:19:80:7c:76:03:8a:ea:71:4f:60:21:
7b:7b:2e:7b:66:da:9b:d0:e6:1a:df:d1:f0:e8:cf:
3b:6c:a7:d6:06:0c:bf:78:71:18:19:03:8a:ae:62:
f0:83:96:f2:ee:81:c0:a5:91:ba:0b:21:08:fc:42:
d1:48:28:18:23:16:f7:46:a4:10:c0:fb:72:62:4d:
e3:00:48:50:8c:6b:a4:89:cb:22:28:e8:1b:e2:54:
b5:d2:99:43:c1:58:d5:93:5e:23:db:58:b1:d8:c3:
80:46:be:e6:8f:a0:a9:e6:b7:01:70:9d:95:76:a1:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:16:AB:2B:14:C8:49:6B:DE:3C:1B:24:6A:50:40:15:85:D8:F0
X509v3 Authority Key Identifier:
keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:84:67:ff:7f:d9:43:c6:64:66:40:77:65:85:51:f8:c4:c3:
66:f6:1a:a4:ef:a0:aa:cb:b4:c6:59:1a:d8:78:af:87:4e:6c:
ef:4b:ef:77:3e:2b:81:3a:a5:28:d0:b2:76:c8:c4:e9:15:42:
5a:3d:45:a8:fc:70:fb:1b:fd:01:96:6f:7a:13:88:ef:85:4a:
b5:83:a8:d0:66:b3:92:f5:f0:a3:0f:03:a5:ec:ae:db:21:10:
4b:cb:77:60:c4:b5:b5:ec:b6:9c:ea:ed:7f:5b:9a:db:e7:1a:
2f:47:9d:08:57:b1:17:40:5c:5b:ca:7b:48:d1:a8:1f:a6:a5:
16:6c:02:a6:5b:67:bf:13:ce:e4:ff:73:5c:10:e1:87:38:07:
ee:ee:a6:21:2e:6e:86:20:d0:bd:0c:c3:1c:27:20:58:a0:22:
35:9f:ef:3e:dc:82:db:46:dc:d9:46:19:47:a4:97:19:4e:ee:
72:e8:81:ed:1f:e7:5d:93:e3:0f:30:f5:13:14:3c:bc:23:c6:
bc:81:69:aa:74:4c:1e:d3:c0:d1:61:ae:37:21:f7:f9:8a:e9:
82:4d:3a:33:c7:a4:2b:7f:40:2b:bb:c0:1d:2f:ba:23:27:31:
1e:e9:4e:ed:9f:9d:a9:e0:f1:7a:5b:e2:bb:68:92:ac:cf:39:
f5:cc:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:25 2026 by rpki-client