Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: AxSKAycjIAMkOR7BGR3kYdvd8NyeptkH7NW7FIY2aWQ=
Subject key identifier: F7:82:F0:07:AD:50:94:2D:65:81:45:FF:52:45:B3:D9:5D:32:60:B0
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 019E6BE246EEE6EC46A9D291596BDA48BC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 192B
Signing time: Thu 28 May 2026 00:00:51 +0000
Manifest this update: Thu 28 May 2026 00:00:51 +0000
Manifest next update: Fri 29 May 2026 00:00:51 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: /K8H4bwPwDcI1+5KPfp9kQQpKfV5jXrzIwsB6lNiWfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:e2:46:ee:e6:ec:46:a9:d2:91:59:6b:da:48:bc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: May 28 00:00:51 2026 GMT
Not After : May 29 00:00:51 2026 GMT
Subject: CN=f782f007ad50942d658145ff5245b3d95d3260b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:4a:27:59:c8:a3:d0:4c:79:fb:89:58:95:
e7:c4:3e:2b:64:b4:aa:9e:c6:a6:2c:f1:44:27:a5:
f7:15:6d:cb:04:c7:ac:26:65:cd:96:42:1a:91:54:
e3:bf:1c:65:c6:c7:4c:3a:7e:45:d2:f1:b2:3c:30:
95:09:c4:d9:25:e8:3c:1e:58:04:43:84:cf:8b:05:
b5:44:9c:d6:dd:8d:39:a2:a2:b1:03:53:a1:84:0d:
c2:6b:ec:ab:cd:6f:b1:55:fc:2b:9d:92:48:23:e2:
d1:87:cc:94:38:4b:73:61:0d:89:f7:0a:88:da:a8:
24:13:43:ae:d0:bf:5d:96:11:f4:2d:ee:81:eb:6a:
2c:bf:0f:9b:89:78:ae:eb:73:3a:9d:78:76:8a:b8:
3d:69:80:94:20:75:db:bc:8c:36:bc:cc:1e:a6:6f:
99:ee:2d:2f:9e:e6:dd:c5:21:6d:d8:85:e1:2f:c9:
a4:c9:c9:04:49:8f:c3:1e:5a:7a:cf:34:67:03:ad:
1c:76:bd:b3:bb:20:b7:12:e2:2e:11:63:fc:fd:e1:
44:01:74:94:ce:12:26:2e:d3:53:81:cc:64:3c:86:
a0:c6:3f:87:49:79:5a:01:24:de:73:3b:68:c6:52:
5d:cc:7c:1a:80:9f:0c:5f:2e:87:de:1e:67:18:5d:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:F0:07:AD:50:94:2D:65:81:45:FF:52:45:B3:D9:5D:32:60:B0
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0b:2c:cc:cf:a6:3f:40:38:c4:12:1f:60:ef:6e:2b:5e:78:
7f:46:d5:f2:42:90:58:d5:4e:4d:f3:6c:80:cb:96:46:2c:a2:
b5:ad:6a:f0:99:d3:f5:56:a9:d7:cc:04:86:b6:1c:a2:1f:90:
a2:da:ac:8a:08:a6:4f:93:09:e6:8f:5d:0b:0c:b6:c0:86:cd:
bd:17:75:af:b2:97:77:18:f9:e3:e8:e2:40:3d:16:8e:c2:10:
d8:57:9e:11:dd:2d:6b:5a:c1:61:63:b0:e4:bf:d6:7f:2d:7c:
20:36:09:b9:64:04:42:b3:f9:49:af:9b:29:da:9c:1c:0b:ed:
75:61:b5:ef:a1:a1:a8:45:06:ae:cb:37:32:8a:e6:7d:65:e6:
9f:1a:4f:15:c0:8f:71:8f:86:b1:55:48:d8:8b:d0:5f:9c:01:
01:a3:05:ad:be:70:6c:e2:02:6e:d8:7e:e5:5a:36:ee:fe:f3:
57:db:8f:3b:a0:ff:a8:4b:a1:95:b9:b5:79:89:ef:d5:6f:f7:
a3:3e:69:82:91:d8:2b:c0:20:5a:18:48:2f:ec:8a:05:ae:a3:
a5:f1:f3:9c:59:58:03:5f:ae:1d:77:d3:b7:75:27:e9:91:1c:
b5:b6:18:69:36:38:b6:d5:c4:9c:29:4e:57:65:38:2c:be:87:
51:ca:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 10:24:16 2026 by rpki-client