Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
File: mAO6qFdULHWMJI0xHmOX_OSDgBo.mft (raw, json)
Hash identifier: Ukc0mPcksIzliCcY5Lynl9i9G08pPdglM9y3fjHC1V8=
Subject key identifier: 8E:97:6B:AE:AC:C6:CE:36:8D:C5:F4:94:42:7B:40:0A:CD:A2:2E:5B
Authority key identifier: 98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A
Certificate issuer: /CN=9803baa857542c758c248d311e6397fce483801a
Certificate serial: 019D3789462F89AD1F3C9A5FDF246932B2D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
Manifest number: 0366
Signing time: Sun 29 Mar 2026 03:00:36 +0000
Manifest this update: Sun 29 Mar 2026 03:00:36 +0000
Manifest next update: Mon 30 Mar 2026 03:00:36 +0000
Files and hashes: 1: mAO6qFdULHWMJI0xHmOX_OSDgBo.crl (hash: uPVKGnWL9nQ2TZDWcsNmzMJmr09W+Ddn8kA4tmfE8mA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:46:2f:89:ad:1f:3c:9a:5f:df:24:69:32:b2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9803baa857542c758c248d311e6397fce483801a
Validity
Not Before: Mar 29 03:00:36 2026 GMT
Not After : Mar 30 03:00:36 2026 GMT
Subject: CN=8e976baeacc6ce368dc5f494427b400acda22e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:fd:74:34:03:02:84:5e:49:e2:e5:ef:31:
5e:e9:55:ef:ed:12:64:e2:a7:86:85:b2:dd:ee:e9:
af:8a:9b:cc:34:fe:08:b0:b1:e0:28:ba:ee:42:d1:
e8:2d:dc:1f:cd:29:50:14:f0:cb:58:45:f7:89:6e:
36:56:41:b5:89:aa:c4:35:97:1c:68:64:68:a5:35:
dd:74:45:86:e8:63:2b:53:4c:62:ec:f0:f3:de:32:
d1:10:16:22:4a:d3:5e:d6:20:00:3f:a2:30:e3:4d:
65:6b:ef:10:80:5c:04:a9:72:bd:13:8a:db:4b:cf:
4c:1a:f7:91:b4:a8:8f:7c:7a:68:16:4f:ad:0e:74:
f3:2a:ea:dd:eb:d5:17:df:3f:01:ea:25:be:15:0f:
fb:42:01:11:ac:08:35:f8:38:99:69:47:2e:2e:a4:
f8:95:07:a6:c4:e1:91:81:12:b9:1d:02:58:3b:de:
1b:63:4e:69:f0:1c:67:d6:76:17:3d:d7:51:1b:99:
75:6a:bb:fd:d9:ad:1f:26:33:59:91:c7:15:16:81:
49:e0:77:b0:50:1c:dd:f8:3e:bb:24:13:21:e0:7d:
1d:88:5f:2a:66:1b:55:1d:aa:ac:2f:99:ef:13:9e:
d4:32:da:68:c7:bc:51:60:41:e7:07:c2:b1:f3:c6:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:97:6B:AE:AC:C6:CE:36:8D:C5:F4:94:42:7B:40:0A:CD:A2:2E:5B
X509v3 Authority Key Identifier:
keyid:98:03:BA:A8:57:54:2C:75:8C:24:8D:31:1E:63:97:FC:E4:83:80:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAO6qFdULHWMJI0xHmOX_OSDgBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bb7d83-a3df-4b75-8569-bd9b355d32e8/1/mAO6qFdULHWMJI0xHmOX_OSDgBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:76:64:93:4f:df:90:cc:07:fe:77:7c:7a:7e:a8:09:48:ab:
fb:2d:9d:84:fc:47:2a:e8:6e:ac:6d:f8:4e:5a:ee:ce:8f:51:
f4:47:6d:77:e2:6c:53:30:1b:18:34:3d:50:42:f4:93:c4:4d:
8f:d3:cc:90:14:e2:8f:eb:3f:75:7f:a2:d9:af:d2:f8:e3:43:
5f:d9:e6:9e:03:39:93:01:11:c5:f1:bc:70:19:ca:6d:a6:99:
8a:56:58:df:c1:3e:f1:18:e3:bd:75:61:a4:88:16:7c:c2:7d:
a2:e1:02:b5:3c:d7:42:7f:0b:28:64:e3:83:88:20:69:76:e2:
b8:9a:df:de:2f:df:e8:ba:63:94:ae:77:44:da:07:12:77:f9:
d5:73:fe:30:88:76:9e:26:43:05:76:e8:a5:f7:25:28:4e:6f:
69:76:b6:a5:49:26:ad:01:c4:e1:9c:e1:36:0c:56:5a:d7:3d:
c1:d6:ed:98:14:ef:c9:de:7d:a7:fd:7c:2d:5d:ed:36:31:ad:
73:c7:50:f1:c3:9e:59:92:9d:07:16:c5:36:5b:9e:cf:15:3b:
52:56:01:b4:bc:ee:ac:0c:95:21:df:6c:ef:4f:e7:31:1d:ca:
0f:96:1c:dc:aa:4b:81:02:ad:26:1a:f8:6e:01:f8:83:d5:a8:
27:d9:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:36 2026 by rpki-client