Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: LCODqVw5xXxYH85t9qcJlo8uCTnZlLf4swT/phhySCs=
Subject key identifier: 32:CE:C6:E5:CC:C9:B4:38:3A:44:14:A9:53:D2:FF:A5:E0:12:D2:B8
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 01A089E7FDA1920BBF833FF46CD12539ABCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0E39
Signing time: Thu 10 Sep 2026 06:01:17 +0000
Manifest this update: Thu 10 Sep 2026 06:01:17 +0000
Manifest next update: Fri 11 Sep 2026 06:01:17 +0000
Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: 7KhgXnHKQC8ayMTe0DTVeOCVUF3HcovZm2YIhtAhr/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:fd:a1:92:0b:bf:83:3f:f4:6c:d1:25:39:ab:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Sep 10 06:01:17 2026 GMT
Not After : Sep 11 06:01:17 2026 GMT
Subject: CN=32cec6e5ccc9b4383a4414a953d2ffa5e012d2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:41:6e:2d:0f:02:c7:fe:4a:59:ec:36:50:
85:9d:86:a8:1e:f6:f0:6e:34:5c:49:e4:3d:f0:b6:
b9:1e:b1:71:55:c4:7c:52:48:84:62:2d:01:71:e3:
55:04:a1:5d:a1:bb:72:9e:3c:87:65:c4:a9:ec:9a:
fd:76:3f:f5:eb:b8:d1:7c:3e:fe:bb:7e:c6:6f:f0:
63:c1:bd:a3:72:b7:4e:bf:b9:df:97:f2:f1:e7:fe:
4e:c0:a9:76:c5:fe:f7:fe:8d:ea:68:81:b7:d3:fa:
83:92:e1:82:90:c7:72:50:f3:be:c3:b3:40:19:32:
39:7b:d6:76:a1:00:be:8c:f6:3b:26:42:70:a3:01:
e6:2b:b5:11:bb:15:f5:33:7d:93:28:3d:53:26:f6:
15:35:b0:27:e5:39:fb:33:60:8f:b6:a7:b0:9b:26:
5d:a6:f9:87:fb:39:02:6b:95:3b:46:6c:e4:a4:ac:
93:0a:1c:f2:f5:44:08:40:48:cd:45:03:17:38:7d:
ec:ec:94:fd:4e:56:a7:cf:a3:e1:b2:10:cd:50:08:
c4:4b:95:19:5f:19:c1:9b:34:16:30:5b:a7:60:5a:
14:c5:a5:14:68:c5:2c:a6:e1:5e:45:5b:f4:c4:64:
e7:ca:71:f7:68:41:17:e9:9b:88:47:b2:11:db:eb:
40:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CE:C6:E5:CC:C9:B4:38:3A:44:14:A9:53:D2:FF:A5:E0:12:D2:B8
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:fd:c5:31:2a:a2:14:3c:e2:66:af:1c:ee:a1:62:e5:2b:be:
22:32:41:c4:da:f8:1f:ab:9f:87:a2:c4:90:5b:d3:6b:a5:65:
4e:8d:4a:76:e1:c6:37:95:6c:cf:ea:0e:29:0f:59:f4:d6:54:
70:dd:20:7f:93:e2:45:35:f7:a9:39:a1:6b:65:cc:fa:69:ae:
0c:14:f3:fd:4f:2a:70:ce:a7:70:c7:ba:d9:66:38:43:55:c4:
36:b1:3f:66:e5:d6:68:58:7d:7d:5c:e7:7d:07:1f:cd:d2:39:
dd:7d:b2:e0:cf:d8:c7:d4:f7:a6:0d:c1:67:d9:b4:ea:0d:fa:
bb:a7:8c:dd:a0:15:4c:31:17:5a:80:16:5c:92:de:a3:8d:c7:
bb:ea:3b:d3:77:3e:6d:e7:f5:4e:ac:1b:51:4e:df:b8:2b:57:
a1:db:86:81:f3:2d:50:be:15:58:06:7c:8d:58:99:40:45:65:
62:93:ab:5e:a7:67:6e:29:a3:c2:a6:14:1e:72:3c:a7:eb:c6:
49:9d:cc:a9:8a:ed:6c:13:41:4d:2b:34:a1:6b:d3:92:9a:a3:
98:eb:de:fa:80:ed:17:4e:5a:b3:e2:75:2d:7c:b9:55:88:dd:
fc:ae:d8:f5:4a:ac:a6:91:57:9a:4b:5a:64:88:67:55:c2:fa:
ee:76:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:49:13 2026 by rpki-client