Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json)
Hash identifier: H1Fy2xPtnPW0VP9AZYKOic0VbIeOHC03k7pqEC7jbN0=
Subject key identifier: D3:F3:1B:4B:ED:BB:F6:CD:DF:21:9F:BB:96:10:33:BA:A8:2B:26:A8
Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Certificate serial: 019D3865C396989A3DE61BE92F7D943075A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: RSEoSZlLEJNkAqbKewfKxdEch7W9+Mk+nWexQE7pPYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c3:96:98:9a:3d:e6:1b:e9:2f:7d:94:30:75:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=d3f31b4bedbbf6cddf219fbb961033baa82b26a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:c2:65:75:5f:9b:4f:34:b2:e4:97:09:25:
9d:bb:b3:7f:50:47:1d:3a:f3:02:2f:ee:38:d1:09:
64:27:8d:47:a0:ce:10:29:84:bf:cb:4e:dd:ba:e3:
d9:c1:4f:34:13:3e:0a:57:d9:a3:33:9b:e8:26:29:
c1:4d:67:63:6c:a7:ad:bb:b9:f3:50:70:84:22:da:
67:e3:bc:16:7c:6d:96:a7:1b:a7:06:54:a1:41:eb:
87:14:8c:1b:55:2f:0e:95:b1:37:3c:a4:d3:57:45:
49:38:2f:25:61:61:36:a6:d9:ed:dd:e4:da:d1:3c:
db:9c:22:77:e2:5e:38:82:93:ad:ac:7f:74:aa:a3:
64:16:49:6b:f3:f9:4e:18:17:25:55:2b:69:2c:69:
1e:1a:93:af:f7:f7:7e:14:3b:a5:3b:fa:3d:e2:10:
5f:da:59:27:ee:43:61:39:37:d5:f9:c5:90:da:d1:
53:9f:38:52:7b:0b:a3:46:18:3e:df:88:d3:6b:fc:
be:09:81:f4:10:19:ae:cd:87:97:fd:db:db:5c:cc:
50:ca:fa:78:6f:b3:81:64:b3:a2:87:94:72:ce:7c:
99:98:95:4a:49:c3:64:ff:b8:83:5e:cd:fc:17:38:
b1:03:93:df:96:b6:39:df:f7:8e:44:c8:51:55:6e:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F3:1B:4B:ED:BB:F6:CD:DF:21:9F:BB:96:10:33:BA:A8:2B:26:A8
X509v3 Authority Key Identifier:
keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e7:65:f5:0b:74:9c:da:e7:41:d3:4e:e6:9a:95:b7:50:03:
ce:18:25:04:c9:63:f8:6c:44:93:9f:05:2e:2e:94:7d:cb:d4:
10:bd:f3:5d:b9:c8:ec:e9:db:e5:14:2d:9a:0e:d0:a1:d1:e2:
78:2e:47:6d:7c:31:dc:5d:44:10:d4:da:d7:58:ea:c9:a4:b8:
d8:9f:a0:3d:71:a7:42:9c:0e:d1:f0:cd:53:c0:c6:9e:ad:e6:
4f:c6:c4:0a:34:9d:76:d4:7a:47:af:97:a9:00:52:a8:38:1d:
f4:87:1a:05:24:80:89:96:59:7d:91:33:be:bd:37:91:36:84:
42:c1:85:7c:25:b5:6a:a5:74:01:8d:0f:b0:55:0b:22:8a:30:
93:64:43:4e:f5:36:57:e7:28:ab:ad:27:c1:94:b9:ba:14:c1:
93:d9:c9:4f:7f:83:42:c3:c4:8b:f0:2a:41:7b:0e:04:ee:2d:
97:46:6f:df:9e:d3:5a:79:c2:66:5f:db:b3:4f:21:2f:8b:c8:
dc:d5:be:5d:e0:25:b8:d2:5b:e1:25:0a:2c:c8:0c:3f:d6:c5:
59:b0:bf:18:7c:79:3b:31:79:7a:85:31:8d:1e:37:c7:c0:39:
66:2d:de:a5:c0:9d:de:b8:b9:fb:3d:b1:95:5d:48:09:cc:7a:
18:e4:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:58:15 2026 by rpki-client