Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
File: oso33tG3DIG3SkMPm016zGKAXtg.mft (raw, json)
Hash identifier: rqRdk9iyBUD4/98VTeuf86f/V0duURlm38x1IhAGIW4=
Subject key identifier: 6C:B6:5D:91:B3:80:33:97:3F:8B:5E:0B:5A:2E:C3:B3:83:F7:7C:5E
Authority key identifier: A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
Certificate issuer: /CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Certificate serial: 019D37C112ABB43DAF826EB9BD3673BAF7AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
Manifest number: 06CC
Signing time: Sun 29 Mar 2026 04:01:33 +0000
Manifest this update: Sun 29 Mar 2026 04:01:33 +0000
Manifest next update: Mon 30 Mar 2026 04:01:33 +0000
Files and hashes: 1: 8y7GNNa3VSZ0w99_9ipLylxWc2w.roa (hash: 5mPkRAu5BGZlM5kj1fiinENXANd4dMpIzIY3DWFLsx0=)
2: oso33tG3DIG3SkMPm016zGKAXtg.crl (hash: g+AhCGmwV4j+0+++0q/7wNwS4DyMIA7MuInEh8kZyEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:12:ab:b4:3d:af:82:6e:b9:bd:36:73:ba:f7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ca37ded1b70c81b74a430f9b4d7acc62805ed8
Validity
Not Before: Mar 29 04:01:33 2026 GMT
Not After : Mar 30 04:01:33 2026 GMT
Subject: CN=6cb65d91b38033973f8b5e0b5a2ec3b383f77c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4e:94:75:92:4b:93:80:48:07:e9:6a:9e:84:
5c:e7:34:32:8d:cc:d0:73:b4:3f:47:5a:eb:fb:38:
e9:9b:ce:85:04:61:a6:6a:54:d9:47:e1:62:a3:c0:
35:19:ab:5e:a4:ad:a5:c2:ca:4a:2d:af:d1:63:02:
e1:d9:8b:30:5f:6e:0e:8c:bd:6e:ec:b7:6e:14:9a:
95:b1:37:17:dc:d2:61:3c:a2:14:d3:91:00:7b:b6:
af:2f:2c:e1:8a:ac:61:93:c7:2c:36:fe:ad:c8:a6:
dd:17:45:e7:cf:3a:7b:4b:5d:6f:4f:75:25:76:a3:
05:3f:d6:f7:f3:68:76:32:5b:18:2b:84:f9:b3:44:
32:75:30:90:43:b5:73:bd:0f:f3:07:cf:4d:76:35:
d2:31:8e:9a:3d:7b:a8:4d:13:a5:61:47:46:89:71:
77:38:5f:58:1f:dc:04:46:41:4b:89:cc:6b:84:06:
9f:b0:65:ab:8c:59:ae:51:77:37:d7:72:5f:b5:69:
48:75:e9:75:25:f4:bf:b0:47:21:33:d2:2c:23:71:
cc:ed:40:35:87:e3:b4:97:13:a4:a1:1e:58:68:ab:
5e:5e:9d:8c:2a:c3:b7:c4:68:1d:02:71:c3:9c:e3:
9d:30:5b:24:4f:d5:03:11:a1:32:9e:e1:c4:8a:75:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B6:5D:91:B3:80:33:97:3F:8B:5E:0B:5A:2E:C3:B3:83:F7:7C:5E
X509v3 Authority Key Identifier:
keyid:A2:CA:37:DE:D1:B7:0C:81:B7:4A:43:0F:9B:4D:7A:CC:62:80:5E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oso33tG3DIG3SkMPm016zGKAXtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b2ace7-48db-4f7d-917f-306189d5c049/1/oso33tG3DIG3SkMPm016zGKAXtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:19:99:8d:8d:a8:24:0a:51:72:9f:ea:cd:28:57:c1:bf:23:
49:97:e5:b8:ac:34:3e:bb:76:d6:85:87:07:3a:af:f2:0d:d4:
65:d9:f6:2e:45:4f:0a:bc:85:53:01:a5:9c:bc:c8:45:8c:b2:
42:98:0d:7d:07:5e:bb:20:32:21:b9:10:cd:ae:bd:fd:e1:06:
a0:9b:a4:18:97:8f:3b:f1:86:e2:ea:5e:88:a5:b2:69:76:2a:
cd:77:64:91:63:e4:c8:ba:44:f6:0d:f2:72:f3:50:8a:22:1d:
ea:8a:a9:a6:25:e7:94:2b:47:3d:6e:0f:50:e2:07:45:b5:ba:
b4:3a:c9:f6:c7:62:c9:3a:12:d0:0e:2b:37:b6:75:a8:0a:2f:
23:33:58:48:cd:80:0d:41:01:ca:dd:4f:85:3b:02:8e:6b:a2:
21:a3:6d:45:34:0b:e6:ab:72:1d:d5:67:96:75:9d:ab:d6:94:
0a:c4:a2:a7:4e:cf:a1:90:3a:d4:14:b2:21:bc:a9:d1:9d:ad:
a3:08:a5:1c:d3:a0:cd:6e:46:8e:fa:39:8f:f2:b5:3b:63:69:
06:be:37:46:b5:cb:8d:b1:c6:39:87:3f:f7:a1:4e:4a:ea:35:
f9:6c:c9:b3:59:76:32:57:76:67:21:cf:c0:4d:83:aa:20:96:
98:64:ed:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wRKrtD2vgm65vTZzuverMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyY2EzN2RlZDFiNzBjODFiNzRhNDMwZjliNGQ3YWNjNjI4
MDVlZDgwHhcNMjYwMzI5MDQwMTMzWhcNMjYwMzMwMDQwMTMzWjAzMTEwLwYDVQQD
Eyg2Y2I2NWQ5MWIzODAzMzk3M2Y4YjVlMGI1YTJlYzNiMzgzZjc3YzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzk6UdZJLk4BIB+lqnoRc5zQyjczQ
c7Q/R1rr+zjpm86FBGGmalTZR+Fio8A1GatepK2lwspKLa/RYwLh2YswX24OjL1u
7LduFJqVsTcX3NJhPKIU05EAe7avLyzhiqxhk8csNv6tyKbdF0Xnzzp7S11vT3Ul
dqMFP9b382h2MlsYK4T5s0QydTCQQ7VzvQ/zB89NdjXSMY6aPXuoTROlYUdGiXF3
OF9YH9wERkFLicxrhAafsGWrjFmuUXc313JftWlIdel1JfS/sEchM9IsI3HM7UA1
h+O0lxOkoR5YaKteXp2MKsO3xGgdAnHDnOOdMFskT9UDEaEynuHEinXQ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy2XZGzgDOXP4teC1ouw7OD93xeMB8GA1UdIwQY
MBaAFKLKN97RtwyBt0pDD5tNesxigF7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2Yt
MzA2MTg5ZDVjMDQ5LzEvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMmFjZTctNDhkYi00ZjdkLTkxN2YtMzA2MTg5ZDVjMDQ5
LzEvb3NvMzN0RzNESUczU2tNUG0wMTZ6R0tBWHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRmZjY2o
JApRcp/qzShXwb8jSZfluKw0Prt21oWHBzqv8g3UZdn2LkVPCryFUwGlnLzIRYyy
QpgNfQdeuyAyIbkQza69/eEGoJukGJePO/GG4upeiKWyaXYqzXdkkWPkyLpE9g3y
cvNQiiId6oqppiXnlCtHPW4PUOIHRbW6tDrJ9sdiyToS0A4rN7Z1qAovIzNYSM2A
DUEByt1PhTsCjmuiIaNtRTQL5qtyHdVnlnWdq9aUCsSip07PoZA61BSyIbyp0Z2t
owilHNOgzW5Gjvo5j/K1O2NpBr43RrXLjbHGOYc/96FOSuo1+WzJs1l2Mld2ZyHP
wE2DqiCWmGTtIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:51 2026 by rpki-client