Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: kmVxfaS1qlpJfN4V0Eb1d55pmlDJ+6q566jLzy3T9TM=
Subject key identifier: F5:44:E9:49:74:F2:B6:D0:22:B5:2D:23:DF:28:EE:99:E8:8C:20:EC
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 019D389BFF55E8D5FC38A68220D04749132D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 112C
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa (hash: mR/Sx8Gef6jaLXJaUX0OcwA84CHIBBS3pL7jXOr7b50=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: DN1V1u1076M561lwDSkcn3ILawqQIA4AiDIIkt3c6PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ff:55:e8:d5:fc:38:a6:82:20:d0:47:49:13:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=f544e94974f2b6d022b52d23df28ee99e88c20ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:c3:53:49:9d:1a:a2:55:fa:a3:f0:ae:e1:
67:67:1b:ad:df:0b:0d:11:10:6d:8d:58:a1:df:b2:
a9:ce:61:3e:28:b8:0a:ec:0e:77:6e:82:38:06:4d:
0c:63:bf:e1:40:5f:a1:6a:4f:33:bf:14:b1:05:19:
a8:00:42:c1:e1:6f:7e:64:c6:c8:3b:fd:c8:4a:74:
25:94:46:85:5e:62:cc:e6:8f:38:20:bc:7f:58:1f:
36:c1:c7:2a:1a:85:69:b4:3b:66:f7:95:af:1b:5c:
f9:5f:5e:46:2b:82:47:99:23:0c:7e:3f:96:13:81:
4f:e2:c7:68:40:f7:40:ca:1d:7c:71:3e:c7:80:1a:
1a:3a:01:87:7c:b2:23:23:11:ff:d7:76:0c:71:d6:
86:47:09:2a:f9:c5:2f:e3:02:14:ab:39:fd:c3:90:
4a:ab:45:43:08:33:6c:bf:f4:03:78:ac:f2:f0:d7:
06:da:9f:66:7b:f9:93:3b:44:69:63:3a:55:e1:e1:
1c:12:09:67:b0:a5:58:ec:71:60:84:c0:f2:8e:bd:
93:4f:d8:b7:7f:d8:5b:60:7c:df:8a:ae:19:f9:cc:
41:8e:0f:0a:5f:9c:8c:c9:d8:a6:a5:a5:2e:9f:e8:
5f:55:a5:cf:bd:05:29:be:d1:50:ba:1a:94:79:a7:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:E9:49:74:F2:B6:D0:22:B5:2D:23:DF:28:EE:99:E8:8C:20:EC
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8d:64:74:34:1a:04:0f:3a:ad:cb:6d:e7:6a:80:86:30:9a:
c2:fe:86:0e:2a:7a:d1:f8:0b:ba:ab:91:6d:10:54:85:36:5f:
4c:50:4b:88:bb:b3:fe:8f:9c:d5:87:6d:ee:1f:42:7d:d6:ee:
e2:75:a2:db:b3:75:93:1c:08:92:42:a2:97:07:4f:e7:61:e4:
bb:a5:0f:a2:5d:df:90:7d:d9:12:5c:a5:ec:a2:ea:0a:05:fb:
29:74:fa:88:72:9d:c3:87:55:d2:78:41:f2:c7:c1:7c:29:cd:
2a:15:85:7c:37:0c:1f:4a:0d:71:6e:f9:93:5d:75:35:2d:96:
d1:b5:04:ba:78:d2:8a:86:08:58:8b:af:3f:85:f8:6b:54:3c:
5b:e9:75:4a:e5:9c:c9:60:62:10:c9:83:24:73:bd:b8:83:51:
35:0b:c3:b5:f8:02:81:2a:6e:b7:50:b7:8d:ea:82:f6:50:72:
18:8e:9e:fa:a4:7f:01:74:47:97:8f:0e:6e:5b:36:cd:04:77:
97:1d:98:d2:dc:23:14:68:e1:78:67:df:ba:a4:12:82:97:98:
f1:c9:5d:eb:43:6f:4b:52:49:c4:dd:08:1c:39:c5:51:40:62:
ae:f4:e3:3a:c0:eb:67:b5:de:d4:f4:45:fd:d0:ff:24:db:2f:
a2:c9:64:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:59 2026 by rpki-client