Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
File: oSCGrcccvsWuoqH4lU36ZCtTDDs.mft (raw, json)
Hash identifier: TUfeGEkIAlw8Av4F3xwU+u53iA3a0zdeX3LqOYEMM0A=
Subject key identifier: DC:F7:B3:74:0E:30:BB:C7:CF:26:90:32:30:8F:21:85:E9:34:B3:ED
Authority key identifier: A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
Certificate issuer: /CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Certificate serial: 019D386590A8F2BA700CB18B498D5CD7EDC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:13 +0000
Manifest this update: Sun 29 Mar 2026 07:01:13 +0000
Manifest next update: Mon 30 Mar 2026 07:01:13 +0000
Files and hashes: 1: 0xOSlFF4qEJ0-V611FUixhfdX0Q.roa (hash: 2cl0zm8Cn1RFnkSxPtYibLq9wI+6x0kOdV+BL5DuDG4=)
2: oSCGrcccvsWuoqH4lU36ZCtTDDs.crl (hash: HdysFC1qS96wbBWfOBmAdhDOWNONDe1NcYjb2wQ7ZQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:90:a8:f2:ba:70:0c:b1:8b:49:8d:5c:d7:ed:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12086adc71cbec5aea2a1f8954dfa642b530c3b
Validity
Not Before: Mar 29 07:01:13 2026 GMT
Not After : Mar 30 07:01:13 2026 GMT
Subject: CN=dcf7b3740e30bbc7cf269032308f2185e934b3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:de:01:17:20:f9:a5:e3:4b:a6:71:d1:1e:
58:ba:e0:5a:fd:d2:74:e7:34:85:da:97:06:c0:2d:
c9:89:77:1f:41:c3:89:ff:41:6a:34:ab:8f:24:09:
4d:5c:7f:9a:1c:dc:45:55:7f:f5:c1:c3:63:a6:e8:
b8:ba:15:a7:4f:51:a9:9b:a9:4e:eb:bc:c0:e9:3d:
08:d6:b8:60:d4:9d:a6:c0:8f:56:7b:5b:5b:a2:b0:
4d:0d:86:7d:6e:70:4b:7d:42:05:bb:b8:c3:c0:8e:
67:1f:66:18:62:26:da:c3:cd:be:e2:13:97:57:1f:
8a:58:61:a5:f3:d5:51:25:8f:2e:eb:c7:23:e9:46:
c2:be:d5:3c:ee:27:35:3e:6e:e7:54:3b:d2:21:d7:
83:36:e3:02:89:67:c2:52:28:fa:2c:8e:a6:f3:7d:
3b:20:d8:d6:3e:66:7d:13:1b:9a:ff:55:95:46:a8:
85:4a:4a:8b:90:ef:11:67:d0:98:2c:d9:b2:db:42:
a5:cb:14:b8:c1:f7:b5:c8:87:9a:04:55:a1:4b:dc:
c1:50:7b:6f:50:4e:f8:72:d1:c5:e9:93:1f:41:42:
9a:26:96:10:7b:d1:12:a9:4c:d0:51:b3:96:41:76:
a1:fb:d2:a3:ed:a9:d9:b3:af:8f:55:e0:1f:60:a6:
78:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F7:B3:74:0E:30:BB:C7:CF:26:90:32:30:8F:21:85:E9:34:B3:ED
X509v3 Authority Key Identifier:
keyid:A1:20:86:AD:C7:1C:BE:C5:AE:A2:A1:F8:95:4D:FA:64:2B:53:0C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSCGrcccvsWuoqH4lU36ZCtTDDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6d9a02-e42d-42e3-af13-485a92bb9ba3/1/oSCGrcccvsWuoqH4lU36ZCtTDDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9e:b1:4f:05:ed:28:12:73:b5:19:98:0f:f0:28:4d:04:3a:
fc:79:53:68:64:1b:0f:2c:cd:4b:24:a5:26:a7:be:22:7d:ce:
1b:b1:bd:89:2a:33:64:79:44:1d:b0:12:3f:5c:f8:07:1e:58:
74:99:75:4e:88:e3:53:df:4c:d5:20:25:2d:5a:c5:c1:92:a6:
6e:47:8a:0e:f5:88:4d:df:8a:d6:19:c4:40:2f:56:c3:9f:97:
03:b9:24:b0:0e:dd:c2:ae:31:4c:b3:b7:be:ae:d9:27:14:b9:
94:0e:37:0d:f9:0c:8d:47:d8:92:80:a7:f8:7f:43:be:b3:56:
75:47:60:e3:13:48:41:52:6d:c9:37:bc:e1:ed:69:ee:81:3c:
22:cd:b0:ca:44:cb:72:48:db:da:2f:0c:19:a3:1d:b3:77:af:
83:fa:68:a6:79:be:d9:9b:9c:60:d9:1e:18:d7:8e:b4:bd:15:
27:b2:69:d8:da:cc:11:d2:f1:2f:6a:dd:f9:8a:b7:5b:04:cc:
2e:63:ac:ca:a2:76:d6:cc:64:c2:a1:02:5b:aa:a1:fc:73:91:
d9:5b:48:34:89:37:fd:18:a4:05:4c:61:9b:0c:78:dc:46:1e:
bb:46:55:b3:4b:0d:86:bb:b5:47:2b:8a:09:1a:a1:b6:51:e8:
21:1f:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:32 2026 by rpki-client