Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: +UJkKByS7+N9KrVTr+Sz6LewEuRvOPkm7epOc3nkkn8=
Subject key identifier: 4F:3E:7C:4B:63:60:9C:A0:7B:04:B5:13:40:63:4A:FA:2E:41:C6:1F
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 01A15B1E32E3E910F66DFEEA0AFC470BC17F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 1A43
Signing time: Tue 20 Oct 2026 21:01:08 +0000
Manifest this update: Tue 20 Oct 2026 21:01:08 +0000
Manifest next update: Wed 21 Oct 2026 21:01:08 +0000
Files and hashes: 1: 5oWhiFwGFcfXZHnE2d1SP87QB8o.roa (hash: PLgcqNiJpgmQue599/AjXnaE7M6VZQryMqw5mChZ3GI=)
2: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: HE5himAmAt6Jr9s7WVmRWIQajfyI1OS9ngvqM8zLwLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:1e:32:e3:e9:10:f6:6d:fe:ea:0a:fc:47:0b:c1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Oct 20 21:01:08 2026 GMT
Not After : Oct 21 21:01:08 2026 GMT
Subject: CN=4f3e7c4b63609ca07b04b51340634afa2e41c61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e7:f6:33:61:44:f0:69:6a:27:51:00:87:5a:
08:7b:a4:d9:c9:3b:58:d4:ff:f7:bd:b6:04:b1:8d:
6a:21:b3:7d:be:da:14:0d:d5:8b:85:6e:be:48:a3:
fb:75:4a:50:30:97:36:32:e3:46:bd:56:b6:39:a8:
77:b5:ca:b3:ee:50:f2:b9:d9:1e:89:a5:79:7a:44:
6c:39:2f:63:bb:7d:f3:01:3d:66:97:77:48:8a:75:
86:27:9f:f4:b1:40:a3:8c:08:52:78:82:a3:8f:23:
d7:c7:49:4c:a7:03:73:5f:18:41:bc:34:a5:b6:0a:
9b:c7:9c:42:eb:4d:b7:55:bd:63:9a:b7:3f:32:f2:
1a:cf:a3:4f:97:48:5f:e7:1a:1a:86:4c:2f:38:56:
1d:62:3d:54:e8:ba:2f:71:7e:d3:e2:32:09:5d:6b:
06:fe:cb:cc:49:2c:e8:b2:a1:7e:1b:45:9f:d2:6e:
7e:37:7b:a8:92:3a:8a:39:47:a2:8e:c8:f9:6c:f0:
65:90:ad:12:a0:a8:c0:f9:d2:e5:c3:5c:54:44:71:
c8:fe:a8:6f:ef:fb:7e:60:7e:74:2a:bd:81:43:3b:
9c:71:d7:21:19:28:e9:df:15:4a:3f:9a:77:e0:c2:
62:e5:a4:6d:57:1c:7b:39:c8:5b:df:2f:a9:b4:a7:
fb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3E:7C:4B:63:60:9C:A0:7B:04:B5:13:40:63:4A:FA:2E:41:C6:1F
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:49:0e:ba:4e:a2:35:23:c2:46:84:99:1c:5c:0d:94:f4:18:
f2:ab:91:a0:22:8e:1e:90:19:4f:1b:20:57:4c:e7:0c:c6:cd:
d7:ae:07:d4:dc:ab:ce:df:12:ae:8b:e3:54:bf:0a:ed:d5:ac:
4a:eb:36:71:77:05:7c:e7:fd:6c:83:d0:44:2c:49:5f:84:89:
02:21:20:3e:4c:f0:4b:76:9b:72:cc:c2:ca:23:16:d4:39:b7:
64:d7:b0:ce:cb:63:70:65:41:11:cd:57:8c:71:98:25:ea:f9:
25:16:54:32:93:a9:4e:0f:3f:7e:d5:4a:5b:9c:56:ae:ac:86:
81:5b:f9:14:97:98:75:9c:d2:18:fe:c6:de:aa:91:a7:cf:0d:
95:d8:13:e6:2a:9d:12:2c:bf:24:8b:81:8d:83:3a:86:96:4b:
d3:7d:64:c6:d8:10:46:31:be:1b:f8:36:e2:70:6b:cd:eb:91:
dd:31:55:ff:be:17:dc:47:c8:b1:19:b9:29:8c:d1:17:85:d1:
33:2e:a3:b3:5d:16:29:b3:b7:62:8c:05:41:31:77:7c:7d:2b:
4d:9b:45:92:b5:29:2c:24:44:c4:57:be:fb:54:08:c2:dc:e0:
64:f1:5d:51:82:58:d7:13:5e:31:7d:3f:23:3a:3d:de:db:a0:
33:2a:73:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:27:08 2026 by rpki-client