Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier: gAFgklxHM7ncKsUwGeKWmRotZEZaZTfk4GegsZBAdVA=
Subject key identifier: 94:B1:3E:12:A0:35:AB:82:20:7F:95:12:53:57:06:3A:D3:0C:6A:E4
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial: 019D2703EE11C079ECD8627691076F6C97E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 22:01:02 +0000
Manifest this update: Wed 25 Mar 2026 22:01:02 +0000
Manifest next update: Thu 26 Mar 2026 22:01:02 +0000
Files and hashes: 1: 0xOSlFF4qEJ0-V611FUixhfdX0Q.roa (hash: 2cl0zm8Cn1RFnkSxPtYibLq9wI+6x0kOdV+BL5DuDG4=)
2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: 04OiIuiyLe9shc1CboRci4XehFYlEAgpXieqvcPjED8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ee:11:c0:79:ec:d8:62:76:91:07:6f:6c:97:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Validity
Not Before: Mar 25 22:01:02 2026 GMT
Not After : Mar 26 22:01:02 2026 GMT
Subject: CN=94b13e12a035ab82207f95125357063ad30c6ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:23:b3:0a:b7:bc:8c:25:82:69:fe:4c:b2:
2f:ba:b8:da:67:d9:8e:d5:73:b2:5c:33:9a:d7:f3:
d1:6b:51:86:ae:c2:dd:89:0e:fa:8f:6e:1e:19:95:
4e:e4:9b:b9:75:4f:21:13:00:a7:a5:69:db:21:40:
87:7e:c6:c2:e8:f9:6a:a2:86:8a:ba:a6:a6:0b:b3:
2f:93:53:02:b4:55:68:ff:b6:79:c6:42:3d:50:71:
38:f8:a2:c3:39:e4:a2:d7:b5:11:da:e3:2d:94:10:
a7:e1:ec:e2:a9:ad:3b:fe:42:f1:52:31:a3:a5:35:
0d:00:d1:6b:53:c7:a5:a8:2f:f9:7e:79:a7:7e:e4:
05:6e:02:c5:e0:8f:d2:20:ec:1a:8e:14:7f:78:58:
45:42:bd:8c:0c:88:83:18:05:cc:0f:06:1d:8f:31:
35:30:37:63:d4:82:a1:1c:c3:3b:48:88:86:bb:6d:
b8:ca:12:b1:1b:8c:38:28:74:6b:b3:07:90:3b:2d:
dd:d6:59:c0:b5:9e:46:63:37:51:99:99:9d:5d:f1:
27:75:4d:c0:65:9c:45:94:ea:3d:92:98:bf:6f:ae:
9d:0f:c5:3b:9c:84:64:21:44:be:03:75:56:e6:96:
f9:9c:64:e1:02:65:61:2b:f6:97:d7:96:4e:e1:96:
89:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B1:3E:12:A0:35:AB:82:20:7F:95:12:53:57:06:3A:D3:0C:6A:E4
X509v3 Authority Key Identifier:
keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:40:f5:ff:55:44:e3:43:e3:81:9c:34:0f:ab:a1:5a:78:ac:
57:ab:b1:0c:14:76:9c:50:ef:93:9c:fc:3f:40:12:c5:89:3d:
e0:6b:da:e2:2f:c5:68:d6:8b:95:24:a5:59:2b:46:0b:c3:9a:
2e:2f:6d:d8:97:88:bd:0b:6f:b6:cb:e2:66:f6:a9:2f:5a:5b:
30:b4:c8:dd:62:e3:54:1d:d2:8e:f7:fc:5d:16:7c:6e:0b:f8:
d5:23:c5:60:2c:f2:be:08:53:d4:16:78:39:8f:01:6c:f8:2f:
e4:2d:f3:d7:35:fd:64:07:86:6f:c7:48:d1:c8:3d:e9:60:cb:
49:fe:9e:d1:08:33:a1:99:a1:0c:f6:36:78:7f:33:a2:66:0c:
49:67:ef:a2:cc:8f:a1:ec:54:14:30:da:59:bc:6b:33:e6:b7:
66:07:0d:fd:c5:e1:a8:a4:4f:85:25:3f:07:7e:62:18:75:98:
3c:a9:fc:bb:27:9f:15:96:55:03:0b:2f:5b:e1:f9:00:6c:d5:
1c:eb:f9:5a:24:a1:7f:f9:ac:83:2f:ad:d7:6a:ea:10:7c:ad:
ce:9f:65:0d:02:d0:74:09:1a:48:69:03:dc:27:0b:37:66:81:
3f:2a:95:d1:07:06:1e:e6:3d:10:f0:95:51:d5:44:62:57:8b:
7e:a8:6f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:07 2026 by rpki-client