Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: gZrJE6cqlhqPyPRmAIfZeP4X7gqhr/HzsXkAZXSVdoo=
Subject key identifier: 19:F0:5B:8A:8D:58:33:F1:8D:98:46:CE:DA:6E:3B:80:B8:B5:68:B3
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 01A184885A4B999735ADDF2478DCEA61BF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 1ACC
Signing time: Wed 28 Oct 2026 22:01:30 +0000
Manifest this update: Wed 28 Oct 2026 22:01:30 +0000
Manifest next update: Thu 29 Oct 2026 22:01:30 +0000
Files and hashes: 1: 8q-W0PKPLsEOkor_JxfKbFGGeP0.roa (hash: hZ6qaGb2hmEL20Q3/hvqbyvlZuoL2wX3NWTGSH0Pkz8=)
2: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: iwl8SFNFyWGfIu2HIj+pB1t2GUypc7utj/MA/SWCTMs=)
3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:88:5a:4b:99:97:35:ad:df:24:78:dc:ea:61:bf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Oct 28 22:01:30 2026 GMT
Not After : Oct 29 22:01:30 2026 GMT
Subject: CN=19f05b8a8d5833f18d9846ceda6e3b80b8b568b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:c0:73:97:93:f1:50:95:7a:a3:85:6b:f0:
ae:17:fe:1a:f9:6a:bf:46:13:29:ce:c3:91:98:42:
61:db:ac:1a:55:78:0f:e5:97:33:8b:da:81:24:81:
1a:11:78:3c:c1:11:ca:22:da:3a:48:bc:1c:fe:12:
1c:f1:95:e6:b7:b5:4c:eb:49:b4:2e:0b:08:61:4e:
e2:e4:cc:3f:4c:51:a8:8c:d9:c9:45:70:a4:6b:36:
0b:f5:5e:3d:d1:51:69:a9:a6:cb:76:2a:b6:7f:27:
ff:e8:78:96:64:ef:fe:98:06:2c:55:98:cd:ce:fb:
d9:8d:56:3f:3e:d6:5a:91:95:90:8a:e5:7e:44:56:
d3:3b:3d:ba:00:02:67:77:b6:5b:b4:54:91:8b:9b:
dd:b1:14:e5:02:87:0a:f6:84:66:69:c1:59:c4:5b:
c3:ee:22:89:e3:29:e6:53:a4:77:55:6b:95:60:66:
36:94:07:d8:17:da:5b:ba:ff:16:dd:30:96:a1:9b:
c2:13:ed:16:c1:fa:97:f9:b7:1c:b4:0b:b9:9e:66:
bd:4b:4a:77:93:21:20:26:df:1c:94:2a:83:50:ee:
e6:09:6f:8c:e6:ec:ca:a7:66:08:82:9f:fe:b0:03:
c5:d0:fc:9f:e4:df:84:f0:ac:66:d5:3e:d8:b0:bc:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:5B:8A:8D:58:33:F1:8D:98:46:CE:DA:6E:3B:80:B8:B5:68:B3
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b7:8f:1d:8a:fa:28:df:08:96:70:c3:6f:b2:0c:a3:08:16:
a8:1c:cc:0a:b1:06:54:25:5f:83:12:47:f5:9c:ef:f5:ff:a5:
70:ff:3a:59:57:d9:22:cf:19:72:f8:06:1b:90:4e:88:56:d2:
c7:5f:d6:b1:e8:36:42:d9:00:61:ca:3c:b6:50:aa:91:65:91:
b8:3e:77:5b:f2:54:f4:e1:46:a3:50:fa:bb:44:b8:9c:c8:6e:
59:13:a9:d2:d4:f9:f5:01:96:f8:bd:a1:db:b3:2a:4e:b1:d4:
f5:7b:61:ea:61:37:88:04:81:26:a7:dc:5a:5d:38:06:28:14:
d5:c7:4d:a3:b0:8d:6c:9a:f9:51:5e:1c:be:4b:31:dc:e3:70:
e5:89:45:ee:6f:f6:47:e0:f2:d4:10:2d:80:2b:f5:d4:0a:49:
ba:66:ad:79:58:67:9b:31:10:5f:d9:96:be:5c:54:af:0a:2a:
1c:92:e9:27:04:b5:43:4d:7d:a0:d5:61:5c:77:1f:39:49:c1:
24:5e:37:aa:8c:e6:38:01:c8:56:03:22:5a:12:8d:48:43:ab:
fc:95:cb:42:45:9c:8d:0f:1d:33:39:5a:1c:7a:46:32:36:be:
04:a2:00:ff:5c:85:88:d5:36:52:7f:91:2e:8c:73:dc:ba:75:
d0:f3:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:42:01 2026 by rpki-client