Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: ryNhEXzFjBxJopM8EbS4f6k47UZWY7fEquiQSvDDHYY=
Subject key identifier: 25:A6:D2:C2:EE:B0:D8:9F:28:77:D2:BA:21:05:D8:EB:94:67:D8:8F
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 019EC0A3EF504C5F9A717C4F11A178C406C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 11F7
Signing time: Sat 13 Jun 2026 11:00:29 +0000
Manifest this update: Sat 13 Jun 2026 11:00:29 +0000
Manifest next update: Sun 14 Jun 2026 11:00:29 +0000
Files and hashes: 1: l6dD6_YwYG2GoAyCwVNIGTIWyF0.roa (hash: mR/Sx8Gef6jaLXJaUX0OcwA84CHIBBS3pL7jXOr7b50=)
2: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: wJWvEDJ9gwxG/dirmip8KP+DpGiqQ1js5P0Jl7x7Kck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:ef:50:4c:5f:9a:71:7c:4f:11:a1:78:c4:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Jun 13 11:00:29 2026 GMT
Not After : Jun 14 11:00:29 2026 GMT
Subject: CN=25a6d2c2eeb0d89f2877d2ba2105d8eb9467d88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:71:b6:f0:09:af:4c:64:a0:33:b4:bf:ee:
19:97:73:2f:bb:f5:77:d3:39:6a:dd:f4:56:34:3d:
5b:ce:fb:fa:1d:70:eb:cf:1e:d8:c4:b1:15:59:c5:
90:4a:77:41:db:e1:ce:10:ea:9e:89:03:9f:2d:37:
f2:74:c2:03:00:ad:c1:64:7b:04:40:83:f6:54:e0:
54:93:c4:47:9b:78:b4:57:ff:7c:69:36:a1:45:aa:
f3:dc:9b:1f:3f:78:14:f2:dd:3b:b0:42:a0:b9:e6:
31:8f:f3:1c:32:b6:31:74:f4:cc:b6:a4:4d:f1:4c:
4a:4b:b2:d7:6d:dd:9b:c5:76:3b:38:7c:02:4c:bc:
6d:47:24:f7:15:c0:67:2f:cb:86:57:aa:e5:b3:85:
39:f6:66:e1:32:ac:fd:ce:9a:67:8e:83:f4:24:de:
60:3c:85:58:58:a8:f5:6a:14:e0:60:8a:7d:9b:5d:
d8:52:b8:fb:b1:f9:94:9b:8c:35:fc:06:e7:61:31:
a2:a3:bb:31:54:b1:88:9e:80:bd:34:16:3c:4b:39:
c1:8a:9d:e2:a1:fc:bc:60:bb:f5:81:d2:cc:65:17:
2c:6c:b4:f0:42:aa:0f:49:d9:35:c6:2a:51:54:4e:
6d:39:f1:3a:ec:02:28:b1:b2:e8:fe:7b:50:8b:dd:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A6:D2:C2:EE:B0:D8:9F:28:77:D2:BA:21:05:D8:EB:94:67:D8:8F
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4e:ff:8f:03:12:b7:ad:55:88:60:c7:85:15:2f:e4:a7:25:
c2:18:75:98:0d:65:45:e5:b5:80:48:0e:82:a8:6c:18:07:03:
8f:88:9f:d7:ab:fc:14:cc:ff:c1:7d:71:29:09:e4:a6:64:c4:
cd:1f:90:36:e3:0d:d0:55:47:f2:9c:d4:58:ec:88:8b:5d:36:
06:45:89:fd:dc:79:5b:87:61:76:4b:40:b2:e9:a2:02:56:6a:
14:12:8a:11:bd:bd:eb:86:54:d6:86:84:a5:46:62:23:38:f0:
1a:eb:27:8f:a2:de:82:17:17:f9:16:23:7e:d2:0e:f9:52:31:
2c:24:88:34:29:b1:06:6c:80:c6:73:67:93:1e:41:f3:63:de:
5c:3d:3c:41:9a:ee:76:4b:a6:e9:b7:3b:af:bb:48:37:cb:d9:
43:5d:ec:4e:89:8f:8f:3b:00:52:32:91:5b:5e:81:c5:6f:56:
42:bb:e3:9b:a5:ef:30:ed:e0:77:c5:54:7e:78:1e:33:29:f4:
6c:f0:6f:08:98:a8:97:f9:e9:02:4a:92:8b:d9:ed:51:00:2f:
7a:a7:3d:c9:2f:31:32:45:f3:e2:51:a2:f4:e5:5a:6b:f4:d3:
bc:29:49:2b:0e:df:fd:6a:5d:81:ec:f1:39:b0:4d:23:29:b8:
dd:49:4d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:54 2026 by rpki-client