Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier: fhuXT5xfTxbaSQD6gV4ymMupeaiIaN3F/8scLgjoFCI=
Subject key identifier: BF:D7:4D:2F:2E:87:BE:70:96:D5:44:0F:7F:B2:C2:23:CA:45:46:D5
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial: 019D3A53C0E011449630F92781C3A91B3760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number: 1101
Signing time: Sun 29 Mar 2026 16:01:00 +0000
Manifest this update: Sun 29 Mar 2026 16:01:00 +0000
Manifest next update: Mon 30 Mar 2026 16:01:00 +0000
Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: I1CyMsnoHBmlMBzK8OTHRLsADrb9KnH/87XVEeETXE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:c0:e0:11:44:96:30:f9:27:81:c3:a9:1b:37:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Validity
Not Before: Mar 29 16:01:00 2026 GMT
Not After : Mar 30 16:01:00 2026 GMT
Subject: CN=bfd74d2f2e87be7096d5440f7fb2c223ca4546d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:d1:a7:19:f6:1c:c5:f5:d9:95:f5:fd:5d:
9a:2c:8f:e2:8b:8b:ad:6d:27:9b:6c:05:e1:9a:1a:
07:29:13:2f:d0:76:2a:0d:46:57:fb:7f:96:a6:56:
c3:02:b6:b9:6c:55:5d:a7:c0:ed:c5:63:a6:2f:bb:
4d:72:42:e3:19:d7:d3:85:90:e1:26:ee:e5:f6:71:
7a:f8:e5:92:3b:4f:ad:31:84:26:74:d0:f4:86:cd:
9d:ac:7d:ae:6d:bb:08:44:a4:c4:55:3b:69:98:43:
3b:6f:06:b3:7b:40:de:35:72:db:8d:24:e9:5f:3d:
aa:5e:8a:58:fa:76:fc:91:6a:d7:2a:e2:b3:4b:24:
28:e0:56:e5:0d:a6:7d:7e:28:85:3b:6f:fc:fa:f6:
d7:0c:04:77:a4:fd:da:02:03:ff:aa:14:cf:d5:a9:
41:6b:95:8b:0e:ca:23:09:bf:93:8f:65:c9:96:4d:
0f:f4:e0:3b:28:01:f8:0d:c2:56:18:71:e6:e2:1a:
49:4e:02:be:d3:f3:d7:73:9a:e0:fc:7b:be:d8:e2:
12:df:d7:7f:1a:6a:5d:f0:0d:21:bf:d9:66:09:82:
5c:4e:54:41:f6:3d:d6:b6:dd:14:ee:99:cc:5a:c5:
4c:22:19:f0:89:fd:72:7a:81:b7:01:65:53:eb:f1:
6c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:4D:2F:2E:87:BE:70:96:D5:44:0F:7F:B2:C2:23:CA:45:46:D5
X509v3 Authority Key Identifier:
keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1e:1b:55:b6:31:82:10:0f:9e:2d:4d:31:78:6f:df:ff:b8:
eb:6a:53:6e:80:2a:a8:ae:76:cc:3e:fb:05:25:7f:4b:31:76:
6d:c7:17:00:80:b2:87:5b:75:ae:48:64:a5:68:74:79:08:69:
fa:c5:0c:9e:ce:20:63:a3:6a:11:b1:c3:0e:ea:3d:03:98:b9:
60:54:eb:e9:25:7d:f6:c6:ff:ba:d8:1b:67:7d:7e:40:da:94:
df:65:83:a2:5d:e1:24:a1:1a:ac:74:46:5d:04:26:ea:9b:4d:
c4:33:17:41:35:16:9f:75:4f:c1:c7:b4:7a:be:a8:61:85:42:
d6:09:e9:75:16:07:b0:9e:62:b3:50:d8:31:bd:1c:9a:06:a2:
fc:d9:aa:22:bc:72:07:54:d2:89:5a:97:cd:99:e9:92:98:9a:
88:da:84:77:9a:d0:e3:2d:d6:cd:34:89:03:13:69:3d:d2:15:
b0:75:c9:1e:97:81:84:f4:20:51:7d:72:18:7b:07:22:c5:d7:
f3:0e:1c:84:12:3c:b6:69:29:fc:86:28:25:7f:89:ce:d9:bf:
a5:12:f6:fc:bc:34:ee:a7:61:97:86:2f:13:f3:0e:ea:08:37:
2c:b7:31:46:9d:00:52:b7:5c:9e:0a:b7:46:86:18:e2:66:63:
e9:3b:1a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:54:04 2026 by rpki-client