Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: LqDg/0VQe9W8NBjGjuHV8O1EwALtO49XjSVSOsTXTlw=
Subject key identifier: 36:16:A3:4D:AB:B7:67:E1:A7:6C:51:C7:C9:17:A1:23:FF:FD:5C:CC
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019EBA6AA60366BA91FB1824965E87B403BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 02B2
Signing time: Fri 12 Jun 2026 06:00:11 +0000
Manifest this update: Fri 12 Jun 2026 06:00:11 +0000
Manifest next update: Sat 13 Jun 2026 06:00:11 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: Ndv5/yTs7korxZHQ0/jxlnSP7vT6cUt7qBkf/tqTzGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6a:a6:03:66:ba:91:fb:18:24:96:5e:87:b4:03:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Jun 12 06:00:11 2026 GMT
Not After : Jun 13 06:00:11 2026 GMT
Subject: CN=3616a34dabb767e1a76c51c7c917a123fffd5ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:2f:78:83:f7:bc:66:4e:61:ff:b6:18:2c:
b6:23:56:24:df:ea:77:6b:2c:64:44:a4:fd:43:ec:
16:b2:c6:c8:ea:76:93:c4:17:6e:d1:d1:27:8b:d1:
aa:25:81:8f:88:54:a7:32:41:c0:4a:13:13:9a:d8:
9e:ed:98:77:67:b4:48:bd:94:f2:91:32:f4:f4:2c:
5a:ab:1d:ea:d8:bd:ca:fe:55:d3:d9:99:9c:9f:ff:
65:6d:a4:8d:c4:c9:b7:3a:f8:d9:90:d8:c4:f5:4d:
19:3d:11:ed:0a:f4:f2:81:95:27:da:59:84:35:1a:
0f:95:72:72:fd:87:c8:9e:b7:10:9c:86:de:8b:27:
f3:de:1d:38:d6:da:fa:91:87:57:00:3f:4d:51:e6:
dc:40:af:be:58:e6:dc:83:fc:45:19:c6:ef:70:c7:
b5:74:4b:67:f0:11:e5:c9:65:87:f8:9e:06:e9:53:
1c:60:22:3c:68:24:04:1f:c6:ab:b6:dc:58:94:01:
d7:93:98:dd:f4:c5:aa:8a:fe:4a:5b:52:65:44:95:
ac:61:53:74:c5:14:84:4b:03:78:93:7f:97:1a:c1:
2c:c6:63:b3:1c:32:6f:a4:5f:95:d0:85:59:db:95:
c5:28:14:66:0c:02:56:3d:93:12:1f:20:0d:5b:50:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:A3:4D:AB:B7:67:E1:A7:6C:51:C7:C9:17:A1:23:FF:FD:5C:CC
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:6d:01:76:60:b9:91:bc:22:eb:07:ab:54:f6:a6:21:d6:b3:
61:c0:74:44:c7:9b:b3:88:c1:8e:3b:e8:8f:01:bc:d7:91:6d:
00:74:46:d6:44:1d:92:4b:4d:99:74:79:89:99:6a:70:36:ff:
40:92:92:31:a5:54:c7:1b:40:b2:1a:77:8b:4c:ed:e4:ea:73:
04:01:36:d0:56:2e:16:f2:1d:e4:3a:4f:f7:fd:dd:93:56:7f:
7c:ce:d7:5c:2b:a7:6e:8d:fc:b4:70:41:aa:79:a9:04:92:5f:
bc:d3:e2:9e:7c:6b:df:64:98:40:0e:2b:a3:e4:cd:76:f3:d8:
7d:f7:d3:16:43:e6:e4:3e:58:1c:69:07:83:00:cc:dc:b1:19:
1c:08:d5:46:75:15:db:fb:fd:a7:40:3a:88:23:7d:b7:96:8b:
e1:68:a4:19:7c:26:40:e6:5d:58:7e:36:71:47:34:5e:1d:80:
de:f0:41:00:a4:e1:e7:2e:c7:25:34:fa:e0:55:a0:44:1a:5d:
98:b7:df:1a:15:9a:fb:25:cb:ff:7b:89:d2:a7:36:04:35:7e:
79:68:7c:dc:64:f9:3b:11:2e:fb:7f:af:da:90:f5:3e:8a:a0:
9a:64:5d:43:12:e6:3d:89:47:bc:91:77:d6:4e:da:b0:bb:5c:
4f:32:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:25:53 2026 by rpki-client