Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: FbvvpfU4cgb76FKWgaX29NgWtR8mWYMenfTYtZZIhQg=
Subject key identifier: EF:B7:26:2A:77:17:35:D4:47:EC:E2:59:19:1B:95:C6:E4:DE:EC:63
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 01A03F3B2675CA90062C5A15D8128002B718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 1A23
Signing time: Wed 26 Aug 2026 18:00:36 +0000
Manifest this update: Wed 26 Aug 2026 18:00:36 +0000
Manifest next update: Thu 27 Aug 2026 18:00:36 +0000
Files and hashes: 1: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: R8GDoLY09pEc/rAz5Setr/31QdSoyM7R39XRoEzeEPc=)
2: Q6JObLBeLp3wtiYaWIJ3qZQTM-I.roa (hash: 8OMeNdCrOVu7DLm13oZufQc3RGDGngByCEF598K46Yw=)
3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:26:75:ca:90:06:2c:5a:15:d8:12:80:02:b7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Aug 26 18:00:36 2026 GMT
Not After : Aug 27 18:00:36 2026 GMT
Subject: CN=efb7262a771735d447ece259191b95c6e4deec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:67:96:7e:6b:84:4d:99:a4:c4:70:90:5a:ba:
2c:6f:2b:bb:7d:70:6f:2f:a1:be:8e:d0:65:c1:04:
40:cf:78:44:b1:bc:a2:20:8a:50:b2:12:4e:4c:40:
ec:d6:79:37:60:66:be:14:3b:38:81:c2:f6:b0:a4:
ed:83:23:15:ef:57:6a:fb:af:e3:b5:2a:ee:b1:8d:
44:da:67:b4:ce:97:ec:ae:56:4d:c7:55:8a:1a:c2:
da:0e:7f:b7:48:ce:0b:9d:8c:ed:b6:5f:25:ea:3a:
24:09:d5:31:35:56:5f:6f:f7:4f:61:04:bc:24:65:
ed:33:a6:c6:22:72:1f:8d:90:8b:ab:1b:f4:8a:c4:
e6:92:f5:d0:c0:f7:dc:41:dc:ed:38:65:a2:33:ad:
1c:69:b0:83:37:6b:fe:24:26:d0:02:d7:9e:48:91:
e9:6d:96:77:c1:dd:d5:62:5a:c3:d8:12:34:21:0c:
b6:94:ac:eb:98:4a:25:72:b8:6d:4f:95:44:0b:d5:
0c:b2:4e:8d:90:c1:c7:60:e9:54:c2:10:02:02:2b:
86:cc:88:1c:65:48:0a:28:a3:f2:4c:b7:35:85:e1:
5d:c7:4c:77:f7:6d:4b:84:88:13:ec:d1:af:d1:b7:
58:f6:f2:62:4e:76:66:f0:52:76:11:c0:7d:c8:3b:
e2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B7:26:2A:77:17:35:D4:47:EC:E2:59:19:1B:95:C6:E4:DE:EC:63
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ee:8e:5f:f5:c7:11:e4:fc:10:68:b8:6f:75:fc:80:93:63:
08:c2:2d:d1:a4:eb:d4:c3:67:9f:e5:fd:a9:5a:27:88:f7:28:
74:f5:65:4d:c4:d4:60:ac:17:56:44:72:d6:ad:e9:46:3a:e4:
27:6a:61:4b:fc:70:df:d8:78:b5:e6:3d:e2:06:9c:10:eb:51:
35:d7:53:02:ba:df:35:5e:c6:f8:7a:2c:b0:61:a1:db:62:2e:
69:cc:3f:d4:d1:34:ac:6f:cb:6c:2d:31:50:8a:c2:ad:20:51:
3d:e8:5d:4c:88:87:70:da:03:0b:91:df:f6:19:8e:45:5b:07:
d5:ef:cf:d0:df:6c:cb:5b:67:1f:25:66:33:b1:93:89:23:fd:
31:67:bc:4e:12:55:ed:b7:97:70:83:b0:cc:0a:c8:9f:09:de:
ce:32:5f:2c:6a:a4:b1:5b:29:1d:55:ab:18:16:c3:5b:3b:8b:
70:71:52:78:4d:3c:1d:65:05:94:02:d2:5f:22:d0:0b:14:57:
37:00:b4:4c:ac:3c:91:f2:7d:31:77:7a:7c:44:b1:7c:31:17:
61:e4:97:ee:15:eb:2a:2c:fd:cc:fe:22:dc:c8:b4:0b:46:81:
32:f8:73:a0:d5:18:a9:04:49:b7:12:c2:61:ae:72:20:5a:34:
64:77:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:06:48 2026 by rpki-client