Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: 2WvB8r4RKAtzCTCojnnogep7cAd2j+5oz/9XYWmiKEA=
Subject key identifier: F3:A7:16:72:E9:58:2A:24:E3:B8:A4:B5:8C:95:7F:18:CD:D2:04:34
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 019D39AE5B301309485D6DBDE91616237ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0D07
Signing time: Sun 29 Mar 2026 13:00:20 +0000
Manifest this update: Sun 29 Mar 2026 13:00:20 +0000
Manifest next update: Mon 30 Mar 2026 13:00:20 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: AvbPNq4Ase7FhiNyFyjVbZb6FiaQqgJEHbJvvZINwYs=)
2: kvD9VGLLMdV8Z-0U6xAPcdb9xNs.roa (hash: UOjHZulJJ0l7NjYIq2CISrUEi7sGsjxxCwq6ItXieZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:5b:30:13:09:48:5d:6d:bd:e9:16:16:23:7a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Mar 29 13:00:20 2026 GMT
Not After : Mar 30 13:00:20 2026 GMT
Subject: CN=f3a71672e9582a24e3b8a4b58c957f18cdd20434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4b:30:06:44:58:6e:a7:be:cd:d8:09:dd:c8:
4d:a2:e4:e8:aa:6a:08:91:fd:ba:09:4d:8f:d5:d8:
1d:b7:17:a5:7e:14:59:dd:04:b8:c3:40:12:10:f7:
48:b7:1d:d9:89:d9:78:0a:31:f2:64:0f:81:d3:12:
b8:87:69:b3:20:6a:28:d4:be:70:58:71:8b:48:21:
74:5b:28:91:f9:78:2e:9b:42:5e:bb:50:55:66:f2:
9d:73:43:35:89:ad:21:6e:9b:7b:61:5e:26:68:02:
09:05:46:4f:dc:ba:ea:91:22:58:07:d5:d0:9f:cf:
f8:da:fc:99:8d:05:44:69:85:81:0d:5b:8f:90:fb:
c6:4d:48:5d:7f:5e:4a:1b:a5:33:e6:a3:40:52:8b:
76:27:0b:58:bb:60:be:70:d2:35:69:eb:86:89:a5:
93:ed:9f:39:7b:03:44:9a:a9:31:36:0e:78:1c:e7:
5d:53:b8:f2:65:87:28:4f:f6:c8:e2:74:37:51:d2:
8b:89:eb:1c:3e:29:54:9e:27:21:fe:94:6e:93:d2:
3d:6b:1c:ae:ab:6d:75:11:7a:e6:99:0a:6e:f9:1b:
59:bf:11:e8:ce:c7:e8:f9:e0:27:a2:47:bb:7e:c7:
cf:e8:fb:cc:f4:6f:db:c8:1a:32:a7:44:06:59:09:
83:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:16:72:E9:58:2A:24:E3:B8:A4:B5:8C:95:7F:18:CD:D2:04:34
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f9:44:72:ee:0d:1d:ca:9b:88:cd:c8:bb:97:62:de:4d:ad:
bd:0d:88:4b:ea:94:de:ad:06:c6:9c:a2:54:6c:e6:13:a3:58:
15:05:c5:82:7a:4b:e1:7e:64:cf:93:9a:9e:39:78:ae:a6:92:
cf:fb:14:78:bb:67:52:48:e4:26:52:18:ba:48:e6:93:74:76:
67:c3:87:ad:4a:5b:54:be:6b:c2:ab:c0:27:11:53:b2:80:b3:
8d:bf:2c:48:f5:39:1a:82:9a:9b:b6:0b:9b:3f:d9:b3:54:0e:
23:3b:83:c8:47:c6:b6:b8:ac:80:c0:92:fe:b7:46:cc:71:43:
36:1a:f2:9d:82:e3:f9:fc:97:8f:86:9a:5c:9b:f5:d4:ec:c2:
75:1c:8e:42:48:a9:2e:cf:8e:81:40:4f:97:9a:8a:75:45:5b:
65:47:e0:51:9d:3d:59:87:0f:25:b5:1a:7a:84:c5:e9:83:ba:
52:8d:58:ae:97:44:95:6a:8e:9c:20:5e:c0:59:c9:31:ec:ed:
84:0a:a6:94:2c:7d:2c:fa:86:6c:48:4f:ee:9d:69:8a:98:42:
95:bb:13:2d:25:0d:32:cd:74:04:7c:ca:5b:58:82:fc:9b:a1:
12:55:f9:f4:90:f0:73:e3:7b:c2:ea:61:52:d4:21:98:4e:5a:
09:a2:8c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:48 2026 by rpki-client