Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: u2p39h2rPSt142lTiSS9WSNtOceKoTV1UMph/KgRdwM=
Subject key identifier: 4B:37:1F:99:E2:18:C7:FE:DA:05:0F:21:EE:C5:5B:C7:50:E2:18:B8
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 019FA03AAC233B7771742426FCC9A06227D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0DC0
Signing time: Sun 26 Jul 2026 21:00:27 +0000
Manifest this update: Sun 26 Jul 2026 21:00:27 +0000
Manifest next update: Mon 27 Jul 2026 21:00:27 +0000
Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: GjIqInwKWMPOuhI1xBdzEluEaI6Nv7PowWRzxUA1g8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:ac:23:3b:77:71:74:24:26:fc:c9:a0:62:27:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Jul 26 21:00:27 2026 GMT
Not After : Jul 27 21:00:27 2026 GMT
Subject: CN=4b371f99e218c7feda050f21eec55bc750e218b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:23:5a:61:20:74:70:e1:64:2a:4e:7e:c3:ae:
4e:e2:c1:bd:7e:f3:98:f3:8e:fd:6c:ed:c2:b7:21:
6c:3b:47:e6:ab:bc:c9:f5:81:7d:81:9f:26:38:6f:
24:01:e7:9c:67:65:d4:c5:e0:52:e5:c5:d5:82:24:
43:6d:24:31:8c:f5:e5:da:96:3e:94:0e:c1:e1:22:
21:37:0f:5c:39:59:fd:7f:68:a9:f2:bc:a3:10:9c:
83:94:1a:5e:14:27:0f:08:af:17:b0:0d:f3:69:a3:
7e:c6:41:81:a4:36:93:b7:07:45:30:4a:eb:4d:f3:
5f:9c:48:f1:e6:c9:95:47:65:a0:03:47:2c:ee:8d:
89:3b:33:d2:aa:bf:32:fa:23:d6:22:99:f5:e0:42:
71:d5:f0:2d:a9:f9:67:f9:5d:80:33:46:16:ea:2e:
88:c8:c4:cf:b1:06:9a:b7:a1:ca:af:cc:9a:fa:0d:
04:28:ac:13:5c:36:9d:10:71:8a:5f:b2:d8:0a:c6:
1e:21:48:ac:6d:fd:02:83:cd:6f:dd:5b:45:ba:0b:
73:4f:26:13:89:b8:dd:9e:0a:48:45:1e:db:50:8a:
e1:00:c0:0e:cb:12:25:cc:c6:04:ee:b9:e9:ed:a2:
b1:4a:d1:61:d8:70:5c:c4:73:da:ca:8e:41:ad:15:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:37:1F:99:E2:18:C7:FE:DA:05:0F:21:EE:C5:5B:C7:50:E2:18:B8
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:32:39:8c:a5:f5:e9:5b:db:56:76:80:cc:60:ce:3a:4c:48:
8b:f7:ac:c9:94:27:6b:f3:29:d7:10:b3:c1:90:b9:e5:b0:15:
2d:ce:dd:8f:5e:a5:e9:0e:7e:97:2a:cc:16:4e:d6:08:34:2c:
59:99:c8:e0:ae:f2:5d:8d:80:0e:ff:d9:5d:7c:6f:84:fb:d4:
39:40:02:c0:ee:54:50:0b:ba:a4:26:54:20:3f:77:18:c1:25:
a1:c8:a5:d9:6a:f6:5a:c9:06:d5:64:1e:70:8d:6c:23:80:3a:
5f:84:d6:be:69:67:a9:af:5e:ec:27:1e:6e:0e:1e:5f:f4:0b:
fc:b1:0e:96:6b:83:3f:d7:19:ca:c4:a8:40:66:18:64:d6:ec:
58:03:27:4c:eb:46:7c:3e:a4:6d:b0:70:89:02:ce:47:17:c2:
65:88:3e:e6:17:04:e5:cc:f4:83:c3:49:e3:25:81:80:a4:79:
c4:f0:4c:96:69:35:7e:be:c2:15:e8:22:55:ac:c8:47:8a:32:
53:8d:7c:7b:a8:74:9d:6e:39:5e:f0:aa:89:94:b9:08:da:e4:
9a:3d:24:d1:0d:6f:fe:a4:42:bc:c2:37:b2:85:15:36:aa:70:
6c:d0:4a:83:7a:5f:21:28:63:c9:aa:17:a0:ee:27:a1:f6:32:
38:ff:b7:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOqwjO3dxdCQm/MmgYifZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzg5MTEwMGU1MDBmYjVjNjRmMzBmMTYwM2ZlNTQ1ZGFi
NDkwMTYwHhcNMjYwNzI2MjEwMDI3WhcNMjYwNzI3MjEwMDI3WjAzMTEwLwYDVQQD
Eyg0YjM3MWY5OWUyMThjN2ZlZGEwNTBmMjFlZWM1NWJjNzUwZTIxOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyNaYSB0cOFkKk5+w65O4sG9fvOY
8479bO3CtyFsO0fmq7zJ9YF9gZ8mOG8kAeecZ2XUxeBS5cXVgiRDbSQxjPXl2pY+
lA7B4SIhNw9cOVn9f2ip8ryjEJyDlBpeFCcPCK8XsA3zaaN+xkGBpDaTtwdFMErr
TfNfnEjx5smVR2WgA0cs7o2JOzPSqr8y+iPWIpn14EJx1fAtqfln+V2AM0YW6i6I
yMTPsQaat6HKr8ya+g0EKKwTXDadEHGKX7LYCsYeIUisbf0Cg81v3VtFugtzTyYT
ibjdngpIRR7bUIrhAMAOyxIlzMYE7rnp7aKxStFh2HBcxHPayo5BrRXtuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEs3H5niGMf+2gUPIe7FW8dQ4hi4MB8GA1UdIwQY
MBaAFKLIkRAOUA+1xk8w8WA/5UXatJAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTIt
OGNhMGM5MGY1NzdlLzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTItOGNhMGM5MGY1Nzdl
LzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDI5jKX1
6VvbVnaAzGDOOkxIi/esyZQna/Mp1xCzwZC55bAVLc7dj16l6Q5+lyrMFk7WCDQs
WZnI4K7yXY2ADv/ZXXxvhPvUOUACwO5UUAu6pCZUID93GMElocil2Wr2WskG1WQe
cI1sI4A6X4TWvmlnqa9e7Ccebg4eX/QL/LEOlmuDP9cZysSoQGYYZNbsWAMnTOtG
fD6kbbBwiQLORxfCZYg+5hcE5cz0g8NJ4yWBgKR5xPBMlmk1fr7CFegiVazIR4oy
U418e6h0nW45XvCqiZS5CNrkmj0k0Q1v/qRCvMI3soUVNqpwbNBKg3pfIShjyaoX
oO4nofYyOP+3vw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:35 2026 by rpki-client