Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft
File: o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft (raw, json)
Hash identifier: osnL3oAnUlfmeD3T+TAHN3axyw7v85I2IB8VPAH6i+w=
Subject key identifier: 3D:46:33:21:C6:75:B0:77:C0:13:61:F6:D9:E5:B2:5A:40:30:38:8F
Authority key identifier: A3:98:DB:08:BA:16:A3:73:90:D8:1D:A7:DE:63:25:E8:BE:A8:B1:0C
Certificate issuer: /CN=a398db08ba16a37390d81da7de6325e8bea8b10c
Certificate serial: 019D3865916861E8CFB86125F05C1366EF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5jbCLoWo3OQ2B2n3mMl6L6osQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft
Manifest number: 66
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: o5jbCLoWo3OQ2B2n3mMl6L6osQw.crl (hash: H0/ra0y4NCSyf/EyVSd4ZmXagbJQPkoAsoRPIFAwnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5jbCLoWo3OQ2B2n3mMl6L6osQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:91:68:61:e8:cf:b8:61:25:f0:5c:13:66:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a398db08ba16a37390d81da7de6325e8bea8b10c
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=3d463321c675b077c01361f6d9e5b25a4030388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:5f:39:00:91:54:5f:a7:90:e3:32:b1:f7:
4b:ad:8a:e6:2b:69:4a:42:39:fb:92:8e:9f:b8:66:
67:46:f4:d0:8b:93:61:51:4e:9d:84:fa:56:b0:17:
32:ab:0d:ab:15:22:9e:68:e7:e5:3d:a1:2b:e7:c5:
b6:41:c3:1b:c1:f0:0d:8b:42:8a:ac:c5:69:6e:16:
f2:0c:a8:99:4a:9e:1a:d7:73:b8:fd:94:df:9a:06:
31:c4:8b:85:99:8b:05:70:c2:97:cf:a5:eb:7e:2d:
4c:cf:4b:c7:22:38:cd:f2:79:99:33:ea:80:5c:7c:
b3:66:f3:23:3d:ba:07:bf:83:19:4a:88:aa:57:0b:
c8:59:a7:04:eb:ed:2f:b9:ce:a8:f3:51:95:73:92:
52:12:d8:1d:9c:cd:12:e4:29:2f:51:9a:0c:15:6e:
e1:f8:3e:ba:22:5c:60:ad:21:cf:4c:b0:bf:b7:9e:
56:7c:aa:06:cc:a3:2a:22:93:ed:c3:78:d2:4e:cd:
22:d6:5b:79:03:4e:1c:51:47:40:42:c0:10:b0:1d:
07:b4:04:44:df:18:80:ad:bb:ae:ee:4a:2b:bc:66:
f1:c0:b6:7a:09:87:6f:9a:8c:e9:74:d5:84:42:d5:
0c:d8:fc:50:de:6e:75:bf:34:68:f1:6d:7b:cf:77:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:46:33:21:C6:75:B0:77:C0:13:61:F6:D9:E5:B2:5A:40:30:38:8F
X509v3 Authority Key Identifier:
keyid:A3:98:DB:08:BA:16:A3:73:90:D8:1D:A7:DE:63:25:E8:BE:A8:B1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5jbCLoWo3OQ2B2n3mMl6L6osQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c9c8f3-c1c3-4086-a175-df547e1b41ea/1/o5jbCLoWo3OQ2B2n3mMl6L6osQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:38:2d:2f:09:90:e0:27:f1:c9:10:c8:4b:1b:e4:17:30:d4:
68:72:83:97:86:f7:91:13:0d:53:32:6b:a7:1c:e5:e1:da:1f:
a7:c4:5c:44:86:02:f7:21:0f:88:7a:b2:cc:e1:7a:0d:81:e5:
a8:1b:6b:43:49:31:db:a3:4b:fd:d1:11:07:a1:78:ab:40:30:
e1:45:1e:2e:77:90:74:90:5f:6a:b9:86:4e:7d:b2:5e:4f:83:
45:4c:ce:da:9f:86:35:b4:ab:e8:6e:bc:3e:cc:99:c5:1f:cd:
b6:40:88:33:42:35:4a:4e:06:23:71:1b:24:ac:a0:84:77:fc:
d5:13:74:29:2d:5d:fb:16:77:9b:f3:8c:07:8a:81:d0:f0:14:
dc:12:8f:cf:8d:e0:13:a1:47:2d:d6:43:62:b8:8b:b0:b3:c5:
ce:d2:a9:23:0c:7e:e0:7c:4e:51:5b:d0:c9:8a:82:39:1f:f8:
b0:8a:c8:84:4d:e1:b0:4b:25:48:cc:9d:fb:38:81:b2:1d:bd:
05:0c:bb:a4:aa:af:87:ff:37:bc:f7:eb:0c:a6:bc:10:b2:93:
7e:f2:5d:1d:f3:a6:f1:2f:b2:df:8e:85:73:4e:97:ac:ff:aa:
85:42:98:73:9b:7d:5c:2c:4f:8d:9c:23:cd:9b:d0:5d:b8:5c:
2a:47:aa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:51 2026 by rpki-client