Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: 9+Zp57J5CsxJM4u1EXRJEQid6bX7K+CGsmDxSLCNW2A=
Subject key identifier: 83:BB:96:E5:F7:66:8E:30:0C:55:DD:26:47:A3:44:F1:A1:22:35:39
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 019D382E9464BAA89DBA23806B5BFD85363D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0C81
Signing time: Sun 29 Mar 2026 06:01:09 +0000
Manifest this update: Sun 29 Mar 2026 06:01:09 +0000
Manifest next update: Mon 30 Mar 2026 06:01:09 +0000
Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: zyWtvZ+Bh3dHziO4jZBBo6hBu3XrVLwmZLiSJUWFLhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:94:64:ba:a8:9d:ba:23:80:6b:5b:fd:85:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Mar 29 06:01:09 2026 GMT
Not After : Mar 30 06:01:09 2026 GMT
Subject: CN=83bb96e5f7668e300c55dd2647a344f1a1223539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:98:f9:01:48:af:22:09:8b:0b:9c:8a:ae:6c:
54:56:c4:df:39:4d:3c:e7:28:df:23:11:8b:cd:a8:
bc:7c:c8:35:b9:97:f9:e0:c5:db:f6:2b:a8:8e:05:
43:40:54:89:7b:d1:1e:4e:30:c4:4c:ee:5a:b5:8a:
6d:5c:a5:f5:57:b7:41:ee:0a:9c:bd:7e:8f:8e:e0:
d2:b2:13:de:27:39:1b:87:09:2d:e7:6c:e5:55:e0:
33:2b:47:92:ed:c1:bf:7f:38:e7:44:87:8f:2a:89:
55:29:c5:c7:fd:f0:6c:19:f3:ed:fb:86:1f:67:61:
97:62:37:c9:0a:3c:e6:6e:7f:5b:d9:f8:e9:c9:e7:
33:b4:0e:ec:99:a6:6a:4c:e7:6e:6c:57:47:f7:4c:
a0:cf:3b:97:2a:ce:02:14:5c:ec:7b:c7:3c:65:26:
3a:d8:6d:fc:d5:fb:bb:89:1a:78:17:9b:6d:41:5e:
71:da:e5:4b:64:46:6f:8e:51:65:e2:6f:ec:54:fa:
93:cb:83:60:b5:ba:6c:8e:1b:c9:ae:29:35:1c:18:
d5:7c:9c:75:c6:82:16:e9:72:1d:00:be:28:23:2f:
aa:ab:08:71:30:c2:c5:4b:7b:b4:39:c0:8a:98:8c:
e9:5b:bc:2d:69:12:ca:bd:38:e3:b3:bb:f8:7f:d8:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BB:96:E5:F7:66:8E:30:0C:55:DD:26:47:A3:44:F1:A1:22:35:39
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:80:36:72:44:09:20:c9:56:75:90:8a:f4:d5:ff:e9:f9:3a:
14:59:88:c1:16:55:ac:88:5b:50:0f:63:af:2e:09:17:8a:01:
e6:78:4d:25:da:7b:4f:a3:a9:f7:3b:f9:5f:db:04:31:11:92:
03:6a:e2:54:4a:31:df:1b:f2:68:75:fa:a9:cd:7b:f7:2e:77:
3f:db:3b:cd:f3:43:73:d2:41:7b:64:03:7f:2c:b7:c2:49:9d:
5d:f5:c3:9a:b4:5c:03:d1:cf:8a:a4:c6:44:fd:cd:b6:92:23:
d2:6a:b6:4c:42:2d:2a:36:8e:75:a5:48:f2:c7:7d:b4:d4:25:
aa:97:cc:82:21:5e:b3:0b:e3:1b:33:38:93:57:9d:1b:40:a4:
85:83:25:db:ac:06:c0:2b:d3:2f:cf:06:f2:95:82:bb:f2:32:
14:6d:02:36:6e:8a:a2:32:1a:f7:f8:40:64:a7:d0:60:f1:4a:
43:87:5c:97:94:9c:7c:78:bc:02:45:2f:4c:0c:74:29:58:c0:
b8:7f:38:6c:c3:00:8b:ee:b7:0d:49:fc:51:10:bd:cf:c6:da:
42:ce:5b:4d:f2:88:17:ec:02:57:74:80:97:07:b8:8a:b1:f4:
8c:44:94:23:68:46:7d:37:fb:fc:ff:36:de:15:7f:1f:3b:15:
18:cb:e2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:59 2026 by rpki-client