Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: BT8oMkvgP233iwkaFbepJ9E74cr9nxK8G7KM/1kNaFQ=
Subject key identifier: CF:24:0E:D7:20:EF:3D:D5:DF:E6:63:48:10:49:0F:0E:69:41:A9:3A
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 01A17F2A6FC082B629E56CAA21603313156A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0EB8
Signing time: Tue 27 Oct 2026 21:00:49 +0000
Manifest this update: Tue 27 Oct 2026 21:00:49 +0000
Manifest next update: Wed 28 Oct 2026 21:00:49 +0000
Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: 2eQruZuFqyoe0hEBPUSUPEU0C8DoqhTvnSy/2HAACg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:6f:c0:82:b6:29:e5:6c:aa:21:60:33:13:15:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Oct 27 21:00:49 2026 GMT
Not After : Oct 28 21:00:49 2026 GMT
Subject: CN=cf240ed720ef3dd5dfe6634810490f0e6941a93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:6e:24:0d:56:c7:ad:49:8e:fc:f9:f4:cd:
22:5c:54:2b:05:20:c9:7c:00:38:09:d4:b2:64:36:
04:0c:7a:20:e5:3e:59:4c:2b:0d:b9:fc:b6:be:fd:
a7:64:96:c8:28:2b:2b:2d:5c:53:d8:0e:ea:9e:93:
cf:57:cd:69:90:82:cb:e3:54:71:23:47:15:b8:c6:
6e:d2:de:86:a4:5d:59:4e:17:ae:02:1b:09:83:6a:
d2:3f:91:7a:81:55:ee:74:35:70:c6:56:1d:4c:dd:
20:a3:a3:cc:a2:9f:2c:91:cf:51:fe:8e:7a:f6:c4:
bb:22:8a:03:15:3e:8a:7d:f6:e7:0b:ab:50:ef:06:
6d:34:cb:23:1d:f5:3f:33:19:3d:93:0b:3a:51:2a:
a6:ce:76:47:f3:b9:d3:62:fb:4c:61:8b:4f:fc:ea:
cb:23:56:a4:81:67:84:ef:41:f9:3d:e0:b5:34:13:
87:ad:fa:59:07:f0:b6:33:cb:40:d0:e1:9c:89:e4:
80:da:f0:9f:b6:35:4b:3d:91:80:3d:de:5b:a2:13:
6d:fe:ef:04:be:9d:87:73:a3:0b:37:2f:5b:43:a4:
cc:76:e7:d8:d3:79:d6:66:00:8d:7f:ba:fa:f3:38:
47:4c:df:8b:f7:f3:fd:e0:53:76:49:45:06:92:6e:
c6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:24:0E:D7:20:EF:3D:D5:DF:E6:63:48:10:49:0F:0E:69:41:A9:3A
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:51:5f:34:21:f5:41:61:7b:67:5c:66:1e:2b:91:20:bd:69:
c9:db:13:85:83:c4:69:3e:75:f8:d6:a6:97:19:b9:b3:a0:16:
07:64:b9:45:57:b8:d6:6c:04:07:79:65:48:41:95:90:6f:e0:
d9:b2:5c:f6:c7:e7:3d:1f:9d:b3:01:72:7b:30:36:8d:cc:0a:
cc:78:33:41:a2:73:46:5c:66:0b:4c:1d:1a:91:71:60:b1:99:
5d:05:26:95:f5:4e:7b:8e:36:98:8b:d3:1c:7e:4a:15:16:77:
fe:31:fb:e8:17:00:fb:7e:b6:3d:3e:96:e2:aa:7e:8a:ac:20:
b3:e3:76:b5:07:73:0c:88:6b:be:29:93:f3:ab:40:1a:18:7a:
da:5e:4d:e0:07:1b:d1:ac:83:df:ef:5b:18:9e:81:eb:1b:aa:
42:4e:54:ff:84:4c:74:78:f3:6d:b7:81:56:55:8f:b8:7a:ba:
c7:7c:96:1f:fb:7f:c6:10:05:29:49:fb:22:3c:2a:89:c2:dd:
0a:ea:fc:f8:a5:0d:49:2c:9f:ac:6f:54:96:6d:51:f3:f6:95:
ac:b5:e7:3f:72:76:07:ab:a5:d4:54:bf:2a:02:05:28:48:cb:
0e:ae:13:89:5a:f6:7a:9f:c1:c0:6d:f6:6e:a0:cd:a0:98:2b:
87:00:60:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:52:06 2026 by rpki-client