Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: fdrakD1e61UVR0NHNR3raJ1LJvJ4zXoWIJmUjIZG3Iw=
Subject key identifier: 54:7C:7C:B5:6F:44:3E:B3:4C:4F:3A:FE:A7:9D:F6:CA:93:F2:BA:13
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 019D25F200AEAF7602B78234D0B3096146DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 05DC
Signing time: Wed 25 Mar 2026 17:01:49 +0000
Manifest this update: Wed 25 Mar 2026 17:01:49 +0000
Manifest next update: Thu 26 Mar 2026 17:01:49 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: N1mU90rrDQWPZ9q27UbIBwCMDMMVFtm8IqgyLzzhHqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:00:ae:af:76:02:b7:82:34:d0:b3:09:61:46:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: Mar 25 17:01:49 2026 GMT
Not After : Mar 26 17:01:49 2026 GMT
Subject: CN=547c7cb56f443eb34c4f3afea79df6ca93f2ba13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:e3:3c:fb:00:0a:24:2f:b1:74:d4:66:d5:
45:7d:a0:9b:6c:2d:45:27:f0:42:0c:60:0b:54:2d:
81:9c:11:ca:a2:d2:c4:2e:06:c4:f8:6f:c8:54:80:
03:bf:5c:5a:b1:15:bd:1a:d8:00:b3:74:19:df:46:
52:ca:3c:08:79:98:75:91:35:53:06:19:c2:0e:c8:
01:f3:15:a3:f1:13:d0:3d:41:e9:da:ca:ac:d1:4e:
3c:cf:64:5f:57:af:e5:60:25:5d:51:7a:79:0e:07:
96:91:fb:bd:4e:14:12:b2:60:65:38:b4:5c:b5:b7:
84:50:37:66:0c:93:43:79:57:7a:cb:8b:c2:b3:07:
7c:a1:58:dc:22:e7:da:ba:b4:3d:fc:01:b1:e9:44:
c8:1b:15:cd:45:01:23:47:86:4c:a9:17:ad:9e:57:
21:ed:8e:1c:3b:7f:1c:e0:a7:8e:0e:12:e4:e9:a5:
fd:90:05:9d:6b:ec:bd:0a:ae:9e:9a:7a:90:9f:7e:
53:e3:a3:b2:d9:6d:eb:6d:05:85:92:ec:36:08:06:
53:3f:79:75:10:2f:d8:e5:4e:76:0b:30:ee:22:e4:
8e:49:f2:83:f8:5d:4f:49:dd:04:33:07:09:b6:86:
fa:33:b9:c2:fe:86:da:73:8d:df:ff:8c:44:cf:e9:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7C:7C:B5:6F:44:3E:B3:4C:4F:3A:FE:A7:9D:F6:CA:93:F2:BA:13
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:94:e7:12:2e:9b:df:e2:09:40:04:ee:19:8b:72:8b:7d:88:
9d:fa:c0:62:af:90:aa:c4:fa:10:08:f0:d6:5a:c5:0d:24:f6:
1c:bf:fe:06:53:8b:d7:2b:36:47:4e:58:da:fe:60:54:c6:de:
63:fe:d4:fc:92:1b:56:49:7f:88:58:7d:5e:bb:4e:ac:51:1d:
3f:1a:68:25:28:cc:70:1f:65:5c:63:ef:b8:7c:8a:19:15:d6:
59:f8:0f:2a:6b:28:fd:de:66:7b:85:3b:81:79:f4:7d:20:d0:
5b:59:74:7f:79:3c:83:1e:71:8f:81:94:5c:8c:17:01:52:f8:
42:48:7b:97:de:c3:a4:4a:dc:bd:e9:4b:8f:9a:93:75:e8:79:
d5:7f:4d:76:22:4a:24:ca:f5:4f:6c:8f:2b:42:a4:a6:37:1e:
81:ad:13:5b:19:22:77:33:e0:2e:2d:d3:66:56:23:12:56:de:
05:b9:e0:16:06:24:40:20:71:53:6c:95:4d:c1:c9:43:74:89:
ae:65:eb:d1:39:e4:f3:d2:4a:48:9b:97:a0:67:b8:ec:05:00:
ab:9d:50:41:af:ef:4f:ca:ef:0d:31:77:a6:0c:2a:ae:f3:e7:
09:b4:66:a4:e8:b7:d2:fa:52:11:39:05:11:f8:6d:10:f0:bb:
5f:8e:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:24 2026 by rpki-client