Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: 0kp3GtqxiMm9PvZeq2fQ0R9WA2X/zRzawKS4q0zA3Vc=
Subject key identifier: E4:56:0E:8D:E7:4A:35:13:1C:E7:A7:C6:05:AC:00:89:0C:F9:C5:8C
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 019D3940D3B52E00805E742610085DEE74AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 05E6
Signing time: Sun 29 Mar 2026 11:00:42 +0000
Manifest this update: Sun 29 Mar 2026 11:00:42 +0000
Manifest next update: Mon 30 Mar 2026 11:00:42 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: rX9+yhG/O3CrocpTXEhIxcoD4M7NkN3qx0097rezy3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d3:b5:2e:00:80:5e:74:26:10:08:5d:ee:74:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: Mar 29 11:00:42 2026 GMT
Not After : Mar 30 11:00:42 2026 GMT
Subject: CN=e4560e8de74a35131ce7a7c605ac00890cf9c58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f7:9e:67:ec:02:48:32:03:21:78:f4:cf:74:
30:53:6f:c8:75:e6:b3:ff:45:18:55:39:9f:85:7f:
0e:46:39:e9:cd:db:cd:dc:b8:30:d6:d4:22:e4:27:
22:4b:8d:87:14:44:bb:0f:a4:99:0c:4a:8b:aa:83:
18:28:a2:1d:6a:ed:bc:43:26:1c:ae:08:ef:77:50:
07:ea:71:92:ab:68:6c:d3:a6:ae:39:a5:ee:f5:cf:
dc:05:89:18:6f:49:ff:62:c5:4d:8d:a3:e5:89:fc:
32:4a:4d:13:9f:51:a5:54:71:f4:a7:47:fe:0a:8b:
e1:5a:1b:c1:93:6a:27:ba:07:26:3e:c5:be:f3:a4:
1b:ef:78:57:d6:b7:a7:57:fa:06:9d:fc:54:b2:77:
11:c1:f5:14:1e:63:fa:a6:f4:d1:bb:aa:59:03:ba:
45:f1:3b:70:17:be:da:45:19:c7:78:da:f4:3a:71:
66:1e:97:e5:88:bc:40:ca:c6:e2:74:ba:f3:16:7d:
07:ea:f8:27:d9:f3:74:f7:82:8e:56:78:e3:f6:25:
a7:fa:20:e5:91:54:3d:b6:75:6c:1c:69:99:b5:ab:
9a:3f:1d:01:9b:e7:3d:8a:21:85:7f:9e:75:23:03:
f7:ba:66:5d:61:89:01:a5:74:2d:02:40:0c:68:2f:
7a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:56:0E:8D:E7:4A:35:13:1C:E7:A7:C6:05:AC:00:89:0C:F9:C5:8C
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7c:f7:6a:20:4f:3b:3b:ee:c8:21:3f:40:0f:56:db:d1:71:
45:05:24:47:81:cd:1b:f0:62:a7:32:8b:de:05:28:05:f8:b3:
5e:d8:d1:e8:58:db:cd:1c:b9:90:79:5f:65:cf:7f:81:72:2a:
1f:a8:8f:6c:41:6a:10:3c:52:29:47:69:89:42:71:b9:da:47:
9f:0a:5a:0e:e0:fe:76:06:da:52:70:30:24:9a:f1:a9:ed:28:
24:d0:36:7e:1d:fc:84:c6:8c:d8:df:0d:b7:d9:8b:60:82:e2:
1d:7c:cd:b4:c1:b0:97:a8:ae:ab:7c:af:4b:a7:68:78:dc:af:
11:44:c4:7a:5b:b5:ef:fd:ce:9e:f9:d8:fd:cc:84:8e:f2:0b:
8f:10:fa:7d:31:0a:47:84:fd:0c:ee:e5:43:90:38:bd:d1:6d:
5f:a4:f9:a9:ce:8e:89:77:f8:c6:a8:e9:ea:9a:32:ca:ec:aa:
7b:d5:61:46:d5:65:e1:1d:69:6a:bb:e2:96:7f:6e:b2:35:d9:
dc:15:a8:59:51:68:21:98:e9:e0:fa:2b:e7:b0:7d:37:f1:c8:
3a:23:a5:0c:34:60:69:cc:4c:ab:ee:8d:00:91:3d:fd:c3:db:
e4:1a:39:56:54:5e:cc:09:67:d5:33:79:43:34:96:95:e4:71:
e8:93:16:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:55 2026 by rpki-client