Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: rx+M/JrwEYMMKlpuvAxMMjhQWRHWX/C7OvX1X6gH4Bs=
Subject key identifier: 52:CA:41:79:22:58:96:19:C8:9E:C4:D5:19:5C:E9:BB:E4:81:28:0E
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 019CACB56331AD63BCBFFB078E7105D677FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 13AC
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: 1yJjuTyf2ztvnkdUcqNAvBEgaSg.roa (hash: nfIlAhagUA3pYoE5LuKLJK3yVXO0M1iaR7XMEzKKagA=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: JEuNMtWf9nzrKiXxh3VioHYmq/Up8aGEmjKYZR1EK8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:63:31:ad:63:bc:bf:fb:07:8e:71:05:d6:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=52ca417922589619c89ec4d5195ce9bbe481280e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:51:e8:38:20:52:b5:11:f6:e4:be:01:a9:
0d:02:a6:00:96:15:01:99:b9:4a:aa:74:10:e7:08:
ce:71:0c:ea:34:eb:30:14:aa:71:be:ce:ef:4b:18:
3e:b4:c9:b6:df:b9:1a:5d:74:32:b7:e6:cd:9c:e0:
f5:24:e9:70:e4:eb:b8:2d:3a:bd:d8:37:df:eb:10:
2b:e9:af:62:ec:3e:01:bb:35:d7:f1:05:51:be:35:
6d:18:75:9b:c2:b7:cd:0f:89:d0:a6:0a:09:d1:e5:
b0:d7:c8:62:02:6c:3e:16:77:4e:0d:ff:9f:db:24:
d3:a6:35:4a:25:a4:4d:23:c2:28:35:50:6f:62:45:
d7:7f:93:01:8c:ac:53:84:77:72:c8:62:18:c4:ee:
c5:cf:d7:06:ec:37:93:8e:84:6c:e1:4a:b1:61:39:
2b:f2:a0:d7:e2:41:35:a1:d0:52:9d:25:42:bd:da:
8d:e6:9d:9b:e2:55:9b:6f:72:3e:2d:85:b7:a7:b0:
b8:0d:ca:8c:65:ca:93:d8:34:36:ad:2b:14:c3:f7:
63:d7:86:f5:a8:fa:21:8d:a0:03:f1:04:33:66:56:
85:03:ad:d5:21:5b:16:4d:b7:aa:8a:03:a0:54:1e:
26:d5:97:55:11:ae:43:e2:a3:51:57:9a:c1:da:1d:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CA:41:79:22:58:96:19:C8:9E:C4:D5:19:5C:E9:BB:E4:81:28:0E
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f6:58:b3:b0:51:74:fe:00:6c:b2:0f:ad:df:26:dd:16:92:
14:bb:fc:e0:e5:2f:41:df:66:5f:73:9b:94:02:98:82:b7:f3:
e7:60:3a:4b:8f:9c:c5:38:a2:3a:a2:1a:62:dd:65:90:80:c6:
41:b8:ad:4c:69:37:97:78:04:5a:b8:20:71:6d:f3:9d:6d:17:
70:db:ac:e2:c0:34:b4:f4:8d:c8:2a:33:0f:d8:38:c3:cc:0c:
c2:71:71:72:8e:8c:f2:98:7b:b3:a8:5f:4d:aa:65:77:60:d8:
63:e6:d7:d2:34:87:27:f0:fb:52:fd:6f:d6:0c:85:28:60:c4:
2c:3b:2c:26:0d:61:f6:b7:01:b0:62:2c:8a:b7:29:7c:e6:80:
7e:ac:e3:41:5b:ea:38:78:26:50:33:97:9e:0c:2e:1f:8b:8b:
93:8e:e7:63:c0:09:8f:76:ae:2e:0a:f1:8b:30:38:56:69:2d:
3b:53:0b:e3:20:99:e0:14:bf:f3:23:dc:6d:06:60:3a:99:07:
e8:d1:91:7e:f0:71:ba:f9:68:75:e1:48:19:55:59:32:09:24:
09:fa:8f:4c:03:a5:9c:4e:8a:21:0d:64:be:aa:0b:fa:f7:f0:
df:c8:ba:ab:8d:28:d3:c8:ee:a0:2b:8a:ab:d8:ec:d4:ed:1e:
88:f3:9a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:16 2026 by rpki-client