Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: slkunWibucIHrRHDuMQ3gC+FUsXgOUZ1LxXB6ow7NQw=
Subject key identifier: F1:A7:BF:32:52:EA:2F:0D:B1:9C:B1:34:D5:51:5D:A9:41:72:F3:0E
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 019EB87C49F88F644B4519DBDE4956496B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0D48
Signing time: Thu 11 Jun 2026 21:00:13 +0000
Manifest this update: Thu 11 Jun 2026 21:00:13 +0000
Manifest next update: Fri 12 Jun 2026 21:00:13 +0000
Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: P5AGCXWQRmQ77XFnF66b9ahYL5eBOWbCXRMb3SbrfEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:49:f8:8f:64:4b:45:19:db:de:49:56:49:6b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Jun 11 21:00:13 2026 GMT
Not After : Jun 12 21:00:13 2026 GMT
Subject: CN=f1a7bf3252ea2f0db19cb134d5515da94172f30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:47:ab:56:59:8d:91:f2:17:75:bc:62:28:
1a:84:3e:08:17:fc:a7:75:8a:ed:b9:0d:9b:2e:74:
77:de:32:d5:08:37:03:26:2b:4e:3a:96:b7:c0:54:
ac:34:7f:64:c1:f6:43:66:8e:08:6d:a3:65:de:c9:
85:6f:b5:79:e3:32:f7:5d:b2:dd:04:3d:e5:f8:66:
05:2b:8c:83:79:5a:e6:2a:b5:e4:9f:a6:18:94:83:
32:46:3e:44:09:77:4d:85:e8:0e:07:a3:11:93:e9:
41:48:b3:e4:fa:7d:2d:f3:f8:2f:14:c6:2a:90:22:
c1:d7:b1:e9:f8:82:03:3b:be:cc:76:8c:64:b5:0a:
e6:4e:e4:db:fa:ee:65:ba:fe:93:da:92:c7:e4:61:
5e:da:a4:ea:d3:b2:95:b7:14:06:28:d3:4c:3a:00:
c7:d8:74:8a:d9:a7:a7:d7:5e:bb:87:5c:c4:ab:35:
34:46:7e:6f:2f:80:7a:f6:91:38:fd:dd:a0:eb:71:
a2:06:c5:70:76:12:0e:40:db:3e:4c:58:f1:ea:21:
3d:fd:8b:bb:fc:71:e1:43:4f:4c:3c:f1:6b:6d:31:
5d:c1:12:c4:f7:79:35:52:19:47:82:1b:11:9a:9e:
2b:4e:52:38:3b:87:98:2c:1a:82:36:a3:92:8a:c9:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A7:BF:32:52:EA:2F:0D:B1:9C:B1:34:D5:51:5D:A9:41:72:F3:0E
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:41:ca:84:b6:bb:64:d3:e3:7f:d8:64:a0:d8:52:98:f1:17:
33:37:16:26:bd:9c:fa:18:c2:73:36:99:19:ba:9a:91:d6:4f:
bb:e2:72:73:16:49:9d:d9:3d:58:06:fe:03:ee:8e:43:d4:d8:
59:19:3b:ad:2c:75:0d:a5:08:97:2a:a1:a8:4a:5a:05:b1:fa:
de:0b:1b:53:b3:76:62:50:e2:d9:d4:f1:e5:eb:b5:e1:5d:cf:
81:bf:53:cf:5c:52:de:39:0f:d4:98:94:c2:3b:29:9b:ed:99:
2d:64:eb:8a:32:12:22:bb:c7:0e:69:95:7b:65:18:ec:e7:94:
2d:aa:7a:e7:bc:4c:2d:d2:b4:5e:6a:0b:10:c8:6a:fa:70:e2:
00:6f:9a:6a:e6:7a:f9:8c:49:c9:43:fa:d9:21:36:8c:83:8f:
f2:fa:77:0f:dd:b8:f4:16:f1:12:7f:24:51:7b:e6:c4:b3:22:
ad:30:90:f5:97:d3:76:8d:7a:e5:9e:44:15:68:89:e6:22:91:
16:9a:4b:29:0a:1b:14:6c:5f:09:e1:5a:90:e8:71:1f:de:d3:
0a:6b:83:b3:03:31:20:af:64:57:b4:83:b1:e9:ee:a3:d2:b9:
d1:2e:8e:b5:df:44:be:23:96:f3:04:9a:f4:de:9b:d9:cd:d9:
d0:46:4e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:50 2026 by rpki-client