Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: QFUtsjyQzZW2elcgzuxqsR2f4DcGc0qfRGDwcrueMoo=
Subject key identifier: 8F:01:DE:32:6B:FD:77:AB:E4:3E:18:0C:93:59:EB:7D:1B:DE:6D:D4
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 019D38D37DFCB6D537361D87AE7ABB5121BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 047B
Signing time: Sun 29 Mar 2026 09:01:17 +0000
Manifest this update: Sun 29 Mar 2026 09:01:17 +0000
Manifest next update: Mon 30 Mar 2026 09:01:17 +0000
Files and hashes: 1: 5KspkUlNT9BbAUaOg4XWjrocZnM.roa (hash: 1rw1PhJZEsHj02oRb/8duN7T9vEuiylU/SbsI5Ekwko=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: 6MA/F9H7+yFPacfh3w2zJjFwKnxG1/nZnlmuNzuZlF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7d:fc:b6:d5:37:36:1d:87:ae:7a:bb:51:21:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Mar 29 09:01:17 2026 GMT
Not After : Mar 30 09:01:17 2026 GMT
Subject: CN=8f01de326bfd77abe43e180c9359eb7d1bde6dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:10:09:ac:fd:c3:e7:e0:d7:17:d6:0c:fc:
e6:8f:3e:db:b6:13:a1:32:31:26:ee:ac:e2:b7:30:
2e:fc:68:db:35:1d:66:58:3d:9d:8a:17:a2:dd:4d:
db:a5:4d:d4:45:c4:ec:6a:af:b9:aa:06:be:d8:7a:
5d:a6:d0:2d:fc:fd:66:03:10:04:9b:9a:48:74:fe:
5b:24:c2:30:d1:f4:5d:a3:86:31:c4:6e:8f:5b:48:
8d:ea:31:62:93:7a:0c:ff:be:6d:e8:65:8b:fc:6f:
d9:1e:85:a1:8a:3c:07:ca:9e:c2:22:d8:ee:4d:ac:
7a:70:00:79:35:cb:50:ef:93:cf:c4:99:fb:62:6c:
d4:ea:ec:89:c8:9a:28:df:53:4a:2d:33:ea:bd:79:
70:1b:53:e0:99:54:66:6a:c6:3b:02:e9:cb:c7:e9:
57:e1:53:47:42:eb:c8:14:b8:64:be:51:2d:8d:e4:
cd:f8:65:d5:cd:af:33:51:7c:5c:90:2c:cf:b6:10:
07:48:79:e3:85:b0:52:3c:c9:2d:f4:5d:dc:80:55:
b7:50:2b:ff:a2:e7:ed:3c:bc:ee:b5:35:7e:bb:12:
d7:c2:c7:64:c0:04:52:0e:eb:d8:71:97:8a:2d:2a:
da:d6:ae:dd:dd:b7:aa:ac:c7:fb:3c:25:9f:4b:f7:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:DE:32:6B:FD:77:AB:E4:3E:18:0C:93:59:EB:7D:1B:DE:6D:D4
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4b:a9:bc:24:59:4b:6f:f4:9e:64:f1:fb:35:ef:c0:bf:e7:
fd:05:71:58:3a:c1:f3:c8:11:8d:06:7c:dc:02:25:2a:2c:c4:
e9:f2:ce:f9:40:ac:83:64:f0:2a:b9:9e:33:16:c9:86:84:51:
c7:52:21:dc:1e:3a:ca:8d:33:da:0a:3e:79:11:7a:a9:c4:a4:
b9:f0:1e:37:02:c0:f3:d8:fe:a6:48:ab:c9:89:37:e1:c9:84:
1d:3c:b0:1a:db:6c:fe:e4:de:02:d2:ee:d2:dd:85:99:dd:9c:
03:11:88:97:74:06:e0:d8:ad:ea:89:e9:30:61:a5:d7:41:fd:
ab:bc:b9:53:64:4e:b0:3d:86:08:91:61:cd:a2:69:79:8c:9e:
04:85:37:37:a3:80:63:c1:5d:ba:10:63:9e:be:d4:fa:82:57:
92:30:a0:c5:a2:33:59:1d:84:60:1b:19:0a:d4:d7:16:95:8f:
23:32:fa:5e:4a:b0:f5:1e:dc:9f:ee:1e:05:4a:3a:e5:19:64:
c7:0c:99:ce:01:9f:c6:f9:e7:2d:9a:4d:ed:6e:3e:59:65:68:
38:e4:69:85:90:99:e9:95:5c:67:b4:8f:87:31:c7:6f:a3:9b:
3c:7d:5b:9b:37:df:b2:3f:e3:a1:f4:b4:eb:aa:49:64:f5:ba:
9f:1b:3b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:13 2026 by rpki-client