Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier: xQBG5MoVSODhahu+5KzhXuxdJZqjrsr6kSi1eCoORZ0=
Subject key identifier: F5:A2:DD:CE:0D:0D:56:CF:AB:4F:1C:27:03:C7:57:2E:CB:5E:02:E4
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial: 01A08A1E30DE439213B9F26A5044D3C6798D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number: 12B8
Signing time: Thu 10 Sep 2026 07:00:29 +0000
Manifest this update: Thu 10 Sep 2026 07:00:29 +0000
Manifest next update: Fri 11 Sep 2026 07:00:29 +0000
Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: sBQ9MaYxPK2XvomgfYLLfkhRqLrGKXFLgxduHrQc9Iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:30:de:43:92:13:b9:f2:6a:50:44:d3:c6:79:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Validity
Not Before: Sep 10 07:00:29 2026 GMT
Not After : Sep 11 07:00:29 2026 GMT
Subject: CN=f5a2ddce0d0d56cfab4f1c2703c7572ecb5e02e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:5a:cb:36:d8:fc:f6:15:f4:cc:cd:dc:25:
a0:2a:d5:e3:fd:d9:3f:74:13:f3:ae:85:23:8f:fa:
b5:c9:b8:b8:f2:90:52:59:8f:a7:a1:de:51:4c:a7:
6c:7b:9c:75:a7:fc:31:7c:e4:be:97:c7:db:8d:23:
4e:a3:67:75:5b:c9:f5:36:1d:15:39:eb:d7:b5:3b:
00:9c:db:b5:fe:a8:e8:70:36:b6:4b:72:5c:fd:b5:
e4:fe:57:64:aa:75:cb:3f:ee:9a:3e:f3:e9:ae:98:
82:2c:64:46:cd:11:17:80:12:c1:ee:a0:e6:25:65:
c6:bc:6b:9d:f4:c2:a5:4b:87:5e:47:3d:97:d3:0f:
2b:33:f0:3f:9a:59:b1:f3:0e:f7:7f:a7:b8:8a:f8:
12:fb:aa:2c:09:2b:36:05:b2:0a:e0:2b:00:fd:5e:
96:2a:10:88:6c:9c:db:af:18:7c:ad:75:b6:72:fd:
f6:53:4a:46:13:31:00:db:71:b3:c7:7e:1f:82:c0:
6e:f5:4c:c7:2d:6c:d9:e2:ed:a8:b2:03:e4:3b:eb:
c2:b0:40:ab:6d:08:ad:11:2e:8c:83:ff:d0:c9:d8:
2e:69:d3:a6:37:09:6f:fc:67:17:7d:8c:11:1f:c3:
f4:69:96:3c:79:b5:e4:ad:50:f8:35:0a:90:5c:3e:
77:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:DD:CE:0D:0D:56:CF:AB:4F:1C:27:03:C7:57:2E:CB:5E:02:E4
X509v3 Authority Key Identifier:
keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:34:31:f5:a3:c8:a0:54:97:b1:ae:d4:34:9e:fc:9a:03:f7:
5a:56:5f:f4:c3:d5:a8:d4:f3:ae:12:6a:a6:9e:1a:d8:29:29:
cd:64:12:0d:9d:e7:07:93:0c:bc:b8:5f:b9:dd:3e:13:14:26:
a2:fc:35:a3:19:8b:2a:e9:14:11:47:79:05:77:04:42:4a:bd:
ef:86:b8:6d:fa:73:2d:43:47:b5:3b:3e:1a:4d:64:35:4d:ae:
77:80:e5:25:62:dd:93:70:60:bc:fd:3d:56:5e:b6:d9:97:11:
35:e6:e0:1c:71:5d:a3:c7:4f:0e:c1:3d:6d:e4:36:16:13:8b:
e3:cc:f7:1d:d9:fb:3f:54:5e:d1:8a:3b:4f:11:ab:5f:79:13:
d7:9c:b2:20:22:30:9a:be:99:0a:cd:73:d7:25:1c:0d:0e:9b:
eb:ba:e6:24:83:e4:9b:d6:4f:b8:67:d4:77:bf:d5:63:7e:a1:
e8:5c:48:63:91:8f:d1:9d:c8:0f:38:d4:89:d4:8b:90:dd:15:
3c:90:60:d9:e6:3c:86:61:e6:ac:d4:97:8b:62:dc:53:c5:45:
69:09:04:3d:95:02:de:58:c2:ef:64:b3:ad:9a:b9:28:c0:de:
f8:38:38:53:15:84:c8:29:7e:3d:96:d9:c5:32:5c:f4:81:a8:
53:e2:67:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:53 2026 by rpki-client