Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: PqzkOXCJ+tY9L9K0kkDtUTzk6NNbOlnoTFo7UCeAsKY=
Subject key identifier: A0:60:B8:12:A8:3E:D8:FF:83:4B:EB:23:64:0E:AD:38:27:07:D4:FC
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 019CADC8095ACF4DB7B3A8BB17AFCB1D9BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 0433
Signing time: Mon 02 Mar 2026 09:01:33 +0000
Manifest this update: Mon 02 Mar 2026 09:01:33 +0000
Manifest next update: Tue 03 Mar 2026 09:01:33 +0000
Files and hashes: 1: 5KspkUlNT9BbAUaOg4XWjrocZnM.roa (hash: 1rw1PhJZEsHj02oRb/8duN7T9vEuiylU/SbsI5Ekwko=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: /ExDZEQC/YP/sD2OClcyzVGHq6Nw7jMki/L0w4YUlqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:09:5a:cf:4d:b7:b3:a8:bb:17:af:cb:1d:9b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Mar 2 09:01:33 2026 GMT
Not After : Mar 3 09:01:33 2026 GMT
Subject: CN=a060b812a83ed8ff834beb23640ead382707d4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:00:bc:c8:45:14:77:ed:09:64:33:55:21:29:
04:ab:4f:e9:59:de:c7:66:91:57:ea:e9:bd:1f:ec:
76:2d:6b:32:70:4e:7f:43:4b:bd:fa:66:11:d2:7f:
61:7c:74:db:66:8c:65:a9:24:2f:27:8c:57:44:55:
e5:cb:78:61:e6:10:06:db:74:66:78:e7:88:93:e2:
b3:d8:06:59:15:ca:97:6f:d5:cb:78:ae:76:07:89:
42:b8:1a:9d:53:5b:21:50:70:6d:a5:7f:1b:71:96:
fb:54:34:bb:f4:ad:69:3a:96:d4:c9:69:3b:d2:d9:
a2:5f:97:3c:f4:5b:6f:9b:10:85:7d:4e:44:00:bc:
d2:8e:a7:05:63:1d:21:63:db:81:8f:10:18:7b:f1:
de:43:6b:f8:a7:cf:bd:a3:a8:21:fb:5f:a9:a3:14:
c8:1c:d5:d4:12:12:76:c5:d2:02:ca:48:11:a9:90:
74:e0:b4:4d:9a:f0:6f:23:28:5c:d4:03:e6:fc:58:
be:4d:55:d8:73:e2:cc:8d:7a:03:af:09:3d:a7:4c:
5e:79:ce:ad:4f:75:d3:d7:d2:3d:2c:3b:82:a4:2d:
9d:e1:44:ef:82:af:ea:c4:e0:47:d0:a9:17:e6:f2:
af:be:50:c2:a7:76:44:69:9d:73:45:27:41:f3:bc:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:60:B8:12:A8:3E:D8:FF:83:4B:EB:23:64:0E:AD:38:27:07:D4:FC
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a8:73:7c:ed:d5:b3:86:f0:17:06:75:32:cf:86:be:07:ae:
a6:60:a9:8a:3d:be:93:f0:c9:88:6f:b1:1d:06:48:b0:d3:7d:
2a:da:d1:c8:0a:bc:00:12:9e:46:44:d4:fd:91:f6:a2:57:46:
f9:67:4e:04:12:c7:d3:fb:6f:b6:97:bc:99:af:26:90:b2:67:
3a:f6:f0:c3:ec:05:2d:39:c1:72:5b:db:58:f9:fd:2c:f6:3c:
44:04:97:7a:eb:df:91:43:b8:c8:bc:4a:9b:5c:9d:8f:b0:41:
7d:16:f6:02:82:94:30:a1:15:41:8f:63:54:6f:ab:3c:a4:eb:
0f:76:85:46:45:1b:27:a7:29:8a:e8:6e:7f:07:29:5e:77:67:
c1:dc:a7:ca:03:ce:be:2d:a3:43:fc:4e:51:d6:f9:16:6b:f2:
30:20:f6:c3:61:3d:4b:fe:a5:11:57:e2:0a:67:68:94:fb:6f:
77:a8:07:97:e2:85:90:d8:87:13:c0:78:a7:47:48:63:dd:d0:
ef:d2:2b:c5:98:27:d7:89:cd:5f:00:82:e5:e8:a5:da:c5:a2:
8d:4d:db:f7:af:b5:73:11:9a:28:3b:f8:c6:b3:8f:cc:aa:c8:
8a:6b:77:57:26:f4:6f:a9:0c:22:f8:46:43:f2:bb:b1:4f:2f:
a7:f7:39:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:45:01 2026 by rpki-client