Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: ahstAF39Y2qka/anX/ivOLM/Q+H0LgNjKJJQw8FGhBA=
Subject key identifier: 67:82:B9:EA:78:D2:3A:71:0A:80:2B:10:0B:3A:02:AD:6E:AD:88:30
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 019CABD9A229899689076631AA3438EB7473
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 0CBC
Signing time: Mon 02 Mar 2026 00:01:32 +0000
Manifest this update: Mon 02 Mar 2026 00:01:32 +0000
Manifest next update: Tue 03 Mar 2026 00:01:32 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: Pisne2f7ouNwzjg/XIe5bmRrvKMDgLTji+JvU1548t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:a2:29:89:96:89:07:66:31:aa:34:38:eb:74:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Mar 2 00:01:32 2026 GMT
Not After : Mar 3 00:01:32 2026 GMT
Subject: CN=6782b9ea78d23a710a802b100b3a02ad6ead8830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:78:41:0e:06:60:e2:0d:bd:ba:e7:ac:ed:
cf:55:ef:8f:5a:f8:02:36:e9:eb:c7:ca:94:77:a9:
9e:96:38:75:8d:6d:ef:be:a7:6a:fc:7b:4a:e8:65:
25:d4:ea:ef:00:8f:51:b5:bd:78:c4:f6:38:f1:70:
49:9a:b5:cd:38:23:15:87:d4:89:32:3f:c8:0d:df:
8a:bd:57:11:f9:5e:9c:da:eb:cb:fb:c8:20:83:7f:
89:29:62:f3:01:87:50:c2:3a:e1:78:29:31:90:82:
5b:19:21:1a:8f:a0:92:d1:e4:ea:87:22:e2:ea:b0:
45:09:a3:7b:ad:44:83:c8:71:2c:1b:99:b7:a1:82:
5b:91:89:bb:16:15:84:69:45:04:87:48:cc:b2:57:
12:0b:cf:bb:62:42:4b:3d:7d:0d:a4:06:dc:4f:5b:
41:6b:bd:d0:a9:88:c2:09:a5:a7:bd:1c:03:34:b9:
bf:4f:e0:86:5f:14:55:5f:92:56:2c:49:cd:44:44:
80:05:2b:bf:5a:a3:1a:d6:56:d3:fe:ff:b1:ba:93:
1c:dd:d9:5d:3d:87:5a:6b:c7:77:86:89:99:ed:84:
d0:e5:4b:5e:4f:64:af:26:00:4d:ab:ae:87:c1:06:
d1:bc:b7:81:6d:e9:7f:8f:22:7d:98:76:2f:fb:88:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:82:B9:EA:78:D2:3A:71:0A:80:2B:10:0B:3A:02:AD:6E:AD:88:30
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8a:73:29:4f:6c:86:d3:55:8e:60:24:7c:b1:0e:93:e5:7d:
7a:b2:f4:76:88:f0:91:07:1e:2e:b5:c2:fc:c5:33:c1:f7:bd:
33:91:24:31:9e:e5:4a:00:7f:d4:92:25:57:73:e7:15:31:19:
72:4e:f0:90:49:16:78:b0:a3:07:61:d7:0a:13:97:42:9c:7e:
5a:71:7b:a0:3c:ee:f1:4c:e6:d5:72:34:91:0f:f0:ae:65:65:
e8:3e:e9:aa:0c:08:43:01:8f:bd:ac:0c:23:f8:0a:23:e4:2b:
e7:84:43:60:07:b8:92:90:cd:7f:84:3c:f7:19:35:5b:15:f5:
07:6c:d5:ea:95:8c:a5:92:55:c0:e0:8b:1a:5f:d1:ef:6c:d2:
1a:3b:71:a7:81:b2:eb:a5:4a:35:14:19:ca:dc:7a:5c:37:93:
86:ea:62:1f:94:67:8a:4a:63:7f:b9:be:ca:f1:66:58:77:b6:
38:02:cd:2e:2e:70:5a:2b:d0:41:fd:b8:65:dc:32:16:38:23:
f3:45:56:8c:03:42:cc:aa:30:30:6b:07:b2:e2:ff:a0:35:53:
c9:f1:3e:32:cd:5a:f5:a1:f4:d7:d8:aa:4b:15:06:d9:0f:18:
17:dd:cf:c8:69:28:79:68:04:23:a8:fa:ae:3a:37:fd:bc:fd:
aa:d8:7c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:54 2026 by rpki-client