Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: LhZvWnzXrQzkqxt/fGnuA1xA6l52BPKf++xdse9kbk8=
Subject key identifier: B9:EF:77:3A:56:9F:C4:F8:99:86:82:72:01:69:CF:B3:45:34:D5:A6
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 01A0035D9DAA7255CF06D26F51B3AAFEBEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 1991
Signing time: Sat 15 Aug 2026 03:01:01 +0000
Manifest this update: Sat 15 Aug 2026 03:01:01 +0000
Manifest next update: Sun 16 Aug 2026 03:01:01 +0000
Files and hashes: 1: 5oWhiFwGFcfXZHnE2d1SP87QB8o.roa (hash: PLgcqNiJpgmQue599/AjXnaE7M6VZQryMqw5mChZ3GI=)
2: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: /rKzouvgNgbcOfBPb0Id90BrkU7KhIatT2Ooak7ML08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:9d:aa:72:55:cf:06:d2:6f:51:b3:aa:fe:be:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Aug 15 03:01:01 2026 GMT
Not After : Aug 16 03:01:01 2026 GMT
Subject: CN=b9ef773a569fc4f8998682720169cfb34534d5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:d3:0f:6b:9b:d4:1e:3b:af:c4:82:30:24:
c0:dd:e8:7b:aa:6f:7d:e9:cf:61:30:86:9f:af:4e:
37:e2:33:5b:7d:34:1b:1b:b3:f1:b3:39:bf:3b:c7:
bc:1c:81:ec:be:8e:ba:b5:8c:59:f6:30:b9:e0:62:
cf:27:88:06:34:07:19:be:6a:03:be:a6:73:48:7a:
36:a5:5d:71:84:3a:e6:b4:e0:0f:1b:dc:4a:de:67:
3e:4f:8d:55:5b:49:00:c8:04:d4:7e:86:92:d0:1d:
ec:5d:42:be:ff:4e:2a:d8:3e:ce:5d:d2:d2:e6:5a:
37:d1:a3:f7:70:d3:58:31:e9:ce:cb:94:64:e4:86:
12:66:74:a1:9c:81:7b:6c:25:89:e6:40:6b:a4:ae:
f4:ba:2d:91:b9:59:a1:ca:82:d9:fc:15:3d:fb:a8:
5b:e1:0e:09:7d:64:f9:9d:d0:8c:6a:40:67:83:f3:
5b:34:8b:f3:da:02:d1:76:b1:c5:ba:c0:a7:7c:56:
58:56:34:5e:42:01:72:3b:b0:d7:7b:d0:1e:a0:0e:
17:e4:60:9e:8b:0b:84:ae:01:71:6f:2a:f8:35:5a:
57:98:4a:bc:88:14:e5:2b:28:fd:ba:88:f7:40:87:
9c:23:a2:9c:64:5d:4e:cf:68:04:22:aa:0f:58:52:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EF:77:3A:56:9F:C4:F8:99:86:82:72:01:69:CF:B3:45:34:D5:A6
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d2:01:62:95:c5:e6:e6:e1:2c:e4:ec:9c:55:b7:8e:6e:dc:
db:d9:a0:5b:8f:61:b1:84:a9:45:6b:39:ba:65:f8:0c:8e:15:
49:24:60:14:83:f4:cd:0a:f7:72:64:d1:eb:b3:ad:7c:28:e8:
a7:1b:2c:b1:a9:48:60:94:6d:48:53:47:a9:e5:10:6e:5e:33:
ca:b0:8f:b9:19:98:91:d1:b8:8d:f7:3e:c1:36:86:df:cc:c3:
44:14:f5:8b:1a:fd:07:14:15:41:43:50:71:78:45:c6:35:25:
11:66:35:6d:6e:09:01:83:21:e2:b0:6e:48:97:a4:5d:81:eb:
de:7e:89:26:c3:3f:de:8e:ff:4c:bf:02:db:76:eb:57:92:b8:
d3:f0:22:c9:f4:18:fc:12:34:f4:a1:7d:a9:94:79:4d:5c:94:
63:7c:77:53:bb:32:7b:1d:75:21:25:79:0c:83:34:7d:7e:cc:
b1:22:b3:e4:b4:1f:0a:32:5b:36:3e:71:08:41:9f:50:51:6f:
8b:cb:01:5c:5e:eb:a5:ad:5c:fa:31:52:d7:f0:99:ae:7f:04:
93:56:04:24:51:1c:80:8c:45:76:4c:45:c0:b6:94:0a:d4:30:
25:69:8c:24:e1:88:47:f0:83:f7:ff:14:6d:7e:67:66:76:38:
fd:e6:91:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXZ2qclXPBtJvUbOq/r7pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MjFiN2YxZWVlOTBkOTllMjk0MjE4YTkzODc1M2MxZWEy
ZGMyNjcwHhcNMjYwODE1MDMwMTAxWhcNMjYwODE2MDMwMTAxWjAzMTEwLwYDVQQD
EyhiOWVmNzczYTU2OWZjNGY4OTk4NjgyNzIwMTY5Y2ZiMzQ1MzRkNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbvTD2ub1B47r8SCMCTA3eh7qm99
6c9hMIafr0434jNbfTQbG7Pxszm/O8e8HIHsvo66tYxZ9jC54GLPJ4gGNAcZvmoD
vqZzSHo2pV1xhDrmtOAPG9xK3mc+T41VW0kAyATUfoaS0B3sXUK+/04q2D7OXdLS
5lo30aP3cNNYMenOy5Rk5IYSZnShnIF7bCWJ5kBrpK70ui2RuVmhyoLZ/BU9+6hb
4Q4JfWT5ndCMakBng/NbNIvz2gLRdrHFusCnfFZYVjReQgFyO7DXe9AeoA4X5GCe
iwuErgFxbyr4NVpXmEq8iBTlKyj9uoj3QIecI6KcZF1Oz2gEIqoPWFILvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnvdzpWn8T4mYaCcgFpz7NFNNWmMB8GA1UdIwQY
MBaAFDkht/Hu6Q2Z4pQhipOHU8HqLcJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1NHMzhlN3BEWm5pbENHS2s0ZFR3ZW90d21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iZTFkYjEtNGRjNC00NjNjLWJhZjgt
MjQ0MWUxMGY2ZjhmLzEvT1NHMzhlN3BEWm5pbENHS2s0ZFR3ZW90d21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iZTFkYjEtNGRjNC00NjNjLWJhZjgtMjQ0MWUxMGY2Zjhm
LzEvT1NHMzhlN3BEWm5pbENHS2s0ZFR3ZW90d21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9IBYpXF
5ubhLOTsnFW3jm7c29mgW49hsYSpRWs5umX4DI4VSSRgFIP0zQr3cmTR67OtfCjo
pxsssalIYJRtSFNHqeUQbl4zyrCPuRmYkdG4jfc+wTaG38zDRBT1ixr9BxQVQUNQ
cXhFxjUlEWY1bW4JAYMh4rBuSJekXYHr3n6JJsM/3o7/TL8C23brV5K40/AiyfQY
/BI09KF9qZR5TVyUY3x3U7syex11ISV5DIM0fX7MsSKz5LQfCjJbNj5xCEGfUFFv
i8sBXF7rpa1c+jFS1/CZrn8Ek1YEJFEcgIxFdkxFwLaUCtQwJWmMJOGIR/CD9/8U
bX5nZnY4/eaR6w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 06:55:53 2026 by rpki-client