Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: xnYpJn4pr5zhkh9mPChaZ5YPm7OeBaxckmUb7/l9FLQ=
Subject key identifier: D3:32:91:D9:D6:24:23:B9:12:BE:09:83:D7:CE:29:A6:93:39:68:98
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 019DA30A62F5B36DF469AA2B6FD7472C8D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 0D3C
Signing time: Sun 19 Apr 2026 00:00:59 +0000
Manifest this update: Sun 19 Apr 2026 00:00:59 +0000
Manifest next update: Mon 20 Apr 2026 00:00:59 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: cTrzoLO/DpYDLU2iVjoXwl3ccnTpdtvEgxZ3lxCuBU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:62:f5:b3:6d:f4:69:aa:2b:6f:d7:47:2c:8d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Apr 19 00:00:59 2026 GMT
Not After : Apr 20 00:00:59 2026 GMT
Subject: CN=d33291d9d62423b912be0983d7ce29a693396898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:8b:27:95:ec:6e:79:0f:64:32:d9:cd:fb:
ce:c0:1f:d3:5c:60:9b:29:dc:fd:af:e0:09:70:16:
02:14:3f:e9:72:66:ec:e9:5b:0e:78:1d:3b:93:98:
8e:b2:0a:b6:86:d9:af:d1:97:0e:15:c1:15:b6:7d:
0e:32:91:77:ec:bb:06:55:66:bc:84:98:3c:d7:04:
9f:a2:2a:ff:6c:93:ba:82:0f:a8:a2:7d:56:22:ef:
e9:e0:d2:fe:76:46:34:ae:0a:f1:0e:ca:fc:ba:5e:
8a:51:51:ac:02:04:4c:65:a2:f8:f2:a9:a1:30:25:
c4:d7:a9:8c:4f:55:b5:f3:72:c7:6a:57:2d:f7:af:
2e:70:55:a8:e9:28:69:3e:dd:e3:9a:22:f7:27:6a:
f5:53:e4:4e:08:b6:dd:a3:d4:4b:12:de:aa:1f:a0:
7c:c3:2b:70:47:bd:7d:61:b1:26:d0:db:bd:80:6e:
88:70:38:5c:95:07:44:29:de:cc:c2:33:be:56:ff:
82:62:5c:b8:bf:b2:e8:a9:c9:97:c9:8e:67:73:c2:
24:6d:0e:6b:f2:4f:48:8f:ba:fe:a2:a0:87:2b:0d:
cb:49:8b:1b:49:c3:05:fe:a8:1c:b5:7f:d5:85:cd:
35:43:a1:02:93:96:7b:bd:67:44:c7:34:34:67:da:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:32:91:D9:D6:24:23:B9:12:BE:09:83:D7:CE:29:A6:93:39:68:98
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:66:0e:d1:a9:ac:f6:1d:f1:95:2f:1d:e8:88:8d:52:d7:9b:
d7:c3:cc:8c:e1:24:10:d2:68:2b:b9:3f:de:e6:35:ff:62:01:
03:4d:d9:7d:d8:0c:7e:4d:61:4c:6f:2f:15:65:f4:b4:51:d8:
73:88:ec:c1:8d:58:ce:ac:b8:3b:34:de:d0:f4:b4:3d:ac:e4:
10:04:05:58:63:ea:15:83:e8:6f:a5:18:9c:37:f6:49:5a:25:
e2:68:ac:38:78:a8:5b:f4:a9:2c:98:2c:43:1e:1a:f9:bb:78:
2d:be:5b:b6:67:2c:99:2a:2c:eb:23:be:91:b6:5f:f0:ec:e5:
0c:72:53:2e:52:18:2d:ee:ef:2c:f3:2e:c6:b1:16:53:3c:39:
f3:b8:24:9f:2e:4b:77:52:d2:6f:bc:50:8f:1c:48:1b:09:c8:
c6:5a:0b:bf:76:ee:8e:d0:e9:b2:b0:70:ad:1c:e1:ba:2a:34:
58:84:7d:57:87:3b:85:62:88:8a:e8:e1:a9:e5:a0:f1:2c:79:
7c:5f:9a:09:26:40:df:72:56:f1:a7:d4:58:db:7e:08:1e:fc:
06:40:49:d4:11:6f:cf:40:41:53:df:08:49:4c:e1:25:d0:bb:
27:08:65:6b:bc:b3:28:74:d3:e4:2e:0b:eb:d0:0e:bf:c9:5c:
4b:fb:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:21 2026 by rpki-client