Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: iUu4yR9cM0vdvja9pUg7nsSXKIVzSAxC2d9n5BbFCHI=
Subject key identifier: 92:B2:BF:F5:A3:DF:49:EF:E8:CD:C7:D7:59:34:AE:41:3F:CA:8A:74
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 019D39AEA5D6BD2FFE47270D7BA3F4355451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 13F5
Signing time: Sun 29 Mar 2026 13:00:40 +0000
Manifest this update: Sun 29 Mar 2026 13:00:40 +0000
Manifest next update: Mon 30 Mar 2026 13:00:40 +0000
Files and hashes: 1: 1yJjuTyf2ztvnkdUcqNAvBEgaSg.roa (hash: nfIlAhagUA3pYoE5LuKLJK3yVXO0M1iaR7XMEzKKagA=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: YmFV/zf+o0LFFarYWlGoXykxMQP5p/PkRraRSdLtqPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a5:d6:bd:2f:fe:47:27:0d:7b:a3:f4:35:54:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Mar 29 13:00:40 2026 GMT
Not After : Mar 30 13:00:40 2026 GMT
Subject: CN=92b2bff5a3df49efe8cdc7d75934ae413fca8a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:10:1c:91:58:82:e7:2c:d9:16:cb:d6:0a:78:
64:1c:a1:c0:42:aa:ff:1d:3d:2c:ed:00:72:49:eb:
cc:29:79:0a:c2:f9:22:63:77:e8:2e:5f:c1:2e:94:
6e:af:5c:f9:0b:02:b9:96:83:bf:5f:78:2a:21:a2:
b2:d1:c6:5a:41:8d:9c:5d:f6:05:56:6a:64:0a:a4:
07:df:cf:82:e2:c0:b4:2d:4b:65:06:ac:5b:e3:50:
0b:7c:19:af:db:aa:09:03:a7:68:84:07:8a:cd:96:
75:65:50:3f:7c:ed:1a:e1:dd:f6:89:a9:3e:d5:29:
8d:bc:a6:58:13:28:5e:3b:30:4f:b1:d5:d1:fd:9d:
26:82:fb:c1:aa:ef:34:0d:2c:65:90:6a:50:2f:97:
e2:80:3c:be:26:6b:c0:f6:fc:f3:78:0a:f8:a0:f8:
9a:bf:90:62:08:f1:ae:fd:a0:04:71:0e:8c:e1:91:
ba:51:ff:c5:4e:61:ab:7d:b1:cd:c6:d5:b2:ff:8c:
82:fc:ed:02:0e:ee:2c:df:ab:55:b9:be:ed:0f:af:
16:b1:95:77:4b:0d:5c:91:04:4b:e4:e4:5f:6e:60:
5d:19:a5:b5:19:29:e3:d5:e6:9e:91:b7:71:dc:59:
00:d1:52:44:e8:24:5c:bc:2e:c1:18:02:02:86:ba:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B2:BF:F5:A3:DF:49:EF:E8:CD:C7:D7:59:34:AE:41:3F:CA:8A:74
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d0:4b:0f:85:df:f3:4b:a5:74:4e:e4:0f:65:5b:70:49:23:
62:2b:ff:19:cb:78:c7:6e:7d:fb:16:d9:f1:31:b7:69:2c:82:
ec:2a:87:64:bd:9b:29:a4:74:59:14:72:3f:e5:1b:ed:1e:63:
42:d8:af:03:5e:c3:23:bb:61:09:04:6f:67:55:b1:e2:fe:ea:
87:a7:97:f1:6c:32:bb:19:d1:2d:5b:1c:94:bc:6d:10:94:9b:
ac:76:c7:48:f8:db:70:15:16:45:63:f8:3b:47:3a:79:84:27:
eb:56:00:16:69:19:46:3c:7c:1e:3e:cc:b9:30:a6:a8:e2:e8:
68:ef:27:e5:e9:a5:ce:98:5a:92:16:f5:1c:0a:9e:dc:ad:7a:
ff:13:f1:3b:a9:93:3a:60:b9:14:5a:45:88:72:e1:f0:e6:c6:
b5:c7:78:61:33:ac:97:3b:a5:e5:d0:37:ea:bc:05:f1:4f:70:
17:6c:6a:69:8f:a0:19:3b:0a:a8:0c:3d:8e:38:8e:8b:d6:bc:
40:02:b6:3d:65:db:a7:a5:49:63:06:6e:a0:65:14:c4:b6:05:
46:c9:b7:08:c6:97:3c:27:1b:69:e3:16:e7:df:68:20:8a:0c:
44:dd:64:c7:56:5b:0e:93:54:22:6e:e4:3a:bf:5a:21:e8:15:
47:55:73:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:13 2026 by rpki-client