Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: z/cK8+bU/+Sxl4VUjzknflnhrdjWelJR+SlZbWuZXhg=
Subject key identifier: EF:01:22:B2:0B:83:9A:4E:50:22:43:81:07:27:B1:CF:24:F3:CF:8F
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 01A184F61279CFEED8E48DCE0F8CA0543BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 0424
Signing time: Thu 29 Oct 2026 00:01:21 +0000
Manifest this update: Thu 29 Oct 2026 00:01:21 +0000
Manifest next update: Fri 30 Oct 2026 00:01:21 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: o1taP6mlu7JPC2mPUWYSZ3IAvfNKRhOUcrKyF6sGOxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:f6:12:79:cf:ee:d8:e4:8d:ce:0f:8c:a0:54:3b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Oct 29 00:01:21 2026 GMT
Not After : Oct 30 00:01:21 2026 GMT
Subject: CN=ef0122b20b839a4e502243810727b1cf24f3cf8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:eb:84:9a:5f:63:bd:73:7a:9a:2a:91:3c:
d0:b6:ae:df:08:5d:27:7a:bb:c6:f1:e8:18:aa:f6:
00:e5:75:f8:ba:5a:6d:23:94:a6:a4:72:27:8b:5a:
e6:ce:2f:37:c7:b3:f0:bf:a5:13:ee:14:dc:0d:c6:
1a:a0:c3:8f:a2:7c:7d:e9:6a:64:51:dc:ad:e4:e2:
1f:bb:ee:f3:d5:c3:1e:00:50:82:a4:01:0d:27:7a:
b0:a5:1c:2e:ec:ec:5b:cd:26:5a:89:af:81:1b:b4:
94:0d:ac:61:dd:48:a9:88:7c:93:69:66:13:8a:1f:
3a:22:fa:d1:f9:0d:d7:48:81:df:83:09:bc:c8:50:
39:11:48:47:ca:11:33:47:f9:07:5e:32:8c:21:86:
bc:34:09:a5:e4:e2:f5:82:b9:a7:e3:56:28:4b:11:
9d:18:04:ea:fb:53:00:ea:55:0c:a9:b4:f5:06:20:
7b:c7:4b:c4:7c:aa:b1:71:f3:de:56:9c:1f:7d:94:
61:32:37:ce:d8:cb:71:5b:1f:e6:69:d9:ba:0e:88:
90:65:4c:c8:97:97:df:b9:be:ab:22:2e:53:ab:32:
63:2e:a9:5b:69:97:43:5a:d3:ca:77:fb:e5:c8:db:
76:b6:c5:6f:dc:cf:1e:f6:5c:84:fe:6b:02:a5:2c:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:01:22:B2:0B:83:9A:4E:50:22:43:81:07:27:B1:CF:24:F3:CF:8F
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4d:7e:e7:bc:7c:bf:20:ec:b6:6f:35:e3:9d:1d:2f:84:2e:
01:e5:37:3b:ed:85:77:b3:23:df:57:2b:22:65:2c:e5:ef:73:
fe:bb:f9:08:2f:c2:f6:a0:37:ce:aa:0e:c8:b6:c9:9d:4d:d4:
a6:0d:7c:7a:ac:91:d6:5e:0c:61:1b:e2:11:10:dc:3a:91:df:
8d:5a:36:f5:35:78:f4:49:39:2f:54:c1:da:bd:6d:79:1e:56:
29:9a:c4:2b:48:c3:95:b3:81:c6:26:0f:2f:77:7e:81:b0:8e:
11:68:0b:ff:d7:51:80:3b:dc:f1:49:e1:b4:be:65:90:6f:de:
5b:b1:e3:02:4e:f5:d5:e9:fb:5e:b5:85:10:0d:f8:ab:71:86:
d0:d7:85:b4:4e:4f:fa:e3:e4:e4:2f:4d:03:b2:03:04:ad:27:
d6:d2:24:2c:ab:b5:6c:ca:07:4e:c5:dd:78:33:91:37:ae:17:
39:28:81:30:88:21:67:aa:14:ce:7b:a0:ca:f8:42:f6:f1:b0:
0e:a0:ea:df:33:24:d1:66:db:07:90:fe:26:34:d8:a8:d4:10:
ad:79:4e:9f:a4:3e:73:6a:5d:f4:5a:dc:db:0f:16:7d:97:93:
3f:35:0e:7d:45:cb:bb:38:18:b0:67:93:09:78:a2:07:9e:c9:
58:50:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:03 2026 by rpki-client