Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: 1+KY5j7tzP41pcPZN2TqZFBOD9mmbMw76s1l1tnr4fk=
Subject key identifier: 38:D2:C8:B1:D0:68:66:2F:E7:7B:49:EE:DD:7F:E5:2F:40:A3:AA:0D
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 019D38D2960222BEE64A820D7F84EB0AD7BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: snT6SfsEDUHvE2ANkCPZT8zB1A3t9e3+U2W6Dk66v14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:96:02:22:be:e6:4a:82:0d:7f:84:eb:0a:d7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=38d2c8b1d068662fe77b49eedd7fe52f40a3aa0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:69:c2:0d:01:d2:84:7f:00:f7:6d:fd:eb:
83:db:b5:47:d8:e9:18:e1:39:ed:bd:9a:a2:27:41:
5f:79:42:0d:4e:2f:76:8b:47:d3:ba:62:58:18:aa:
50:f8:f1:fa:5c:70:ea:51:18:e7:f6:73:86:ef:77:
dc:a7:f4:72:6a:fb:34:22:76:c6:7a:56:7d:ae:97:
45:ef:c6:ce:db:fd:31:af:98:4a:f9:b5:56:b9:ab:
67:73:a0:8c:38:72:2c:f1:f5:b6:88:34:96:b2:61:
cc:bf:a2:cb:6c:d8:b2:87:6d:f2:43:ff:6f:0a:d0:
3d:08:2f:6c:ad:cd:d8:3d:66:1c:4e:d9:36:42:0e:
1c:60:4d:d5:78:30:1b:bf:cb:c7:7c:6b:e6:58:af:
70:2c:47:a7:0c:0f:03:99:72:0e:1c:b1:cd:f6:a4:
5e:fb:cf:1e:36:c4:ce:72:54:89:8f:ea:52:d7:fd:
e9:82:df:fd:fc:00:71:e6:d5:f4:7d:e7:89:0d:12:
62:3e:ca:a7:a1:0d:04:63:b6:a8:48:12:ca:f4:a3:
b6:ef:39:17:b2:2f:2e:b3:82:05:eb:58:bb:a3:6d:
88:b9:e6:bd:3b:9b:14:4e:ad:dc:27:81:62:86:d6:
94:14:48:8d:a3:3b:37:ee:c6:60:33:7d:fe:b2:5a:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D2:C8:B1:D0:68:66:2F:E7:7B:49:EE:DD:7F:E5:2F:40:A3:AA:0D
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4b:2a:11:cd:ae:96:5c:57:68:aa:47:26:01:e4:05:a2:eb:
8a:01:bc:5c:19:e5:b8:25:51:b5:e7:fb:d6:0d:d6:69:6f:0d:
5f:1f:f5:8b:9a:12:62:67:14:32:a0:2c:09:a5:18:6f:25:c4:
c4:e6:e1:c2:90:4b:cf:d9:d2:1a:3c:e8:d6:55:83:6a:0d:5b:
51:e5:eb:ea:2b:31:4a:4a:af:f8:1e:b3:00:54:16:d7:de:c0:
f2:e2:b5:bc:93:b1:ba:e8:28:dd:a8:5a:79:28:d8:b1:70:a2:
6b:76:c0:5c:0a:fa:76:57:39:2f:89:82:79:46:17:2d:cd:dd:
04:65:0f:6e:89:cd:6e:55:d9:91:d1:f4:d2:34:79:de:67:97:
60:2f:d7:66:10:23:33:13:51:fe:14:c9:78:1c:4c:4f:96:0c:
15:1b:f1:ba:a5:a5:4f:ac:3e:06:d6:56:78:13:c0:a3:ec:a2:
a4:1a:c1:0a:8e:1a:bb:25:f1:ca:ec:38:e6:84:48:be:e6:0e:
0c:2b:84:8f:55:23:0a:e7:58:c3:e5:aa:98:76:25:76:38:82:
7e:73:73:ce:66:b0:9a:17:5b:81:ad:a4:e1:2c:18:33:c1:25:
2f:f1:f4:ba:d3:5f:58:75:31:02:c6:b2:64:13:68:be:cc:bb:
a5:2b:71:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:49 2026 by rpki-client