Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: xCREbrUjoj5GZoHnAjopiIsFOiWxPGWgEpoX0XveZ1A=
Subject key identifier: 1C:27:A9:CA:93:13:9F:00:20:14:12:61:DF:7A:3B:B7:68:6E:BD:7E
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019FA228EBD8CF86A7957272DB6ECA8B9148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 032A
Signing time: Mon 27 Jul 2026 06:00:18 +0000
Manifest this update: Mon 27 Jul 2026 06:00:18 +0000
Manifest next update: Tue 28 Jul 2026 06:00:18 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: PpNypQorQ1W5if+C/uA9N5jd9A8wlPy+z+htISpBnv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:28:eb:d8:cf:86:a7:95:72:72:db:6e:ca:8b:91:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Jul 27 06:00:18 2026 GMT
Not After : Jul 28 06:00:18 2026 GMT
Subject: CN=1c27a9ca93139f0020141261df7a3bb7686ebd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:07:a2:88:8e:be:3c:6e:dd:69:0f:81:90:
f4:73:ea:ba:0b:6f:4e:59:24:36:90:f0:45:75:0e:
4a:0a:1f:7f:d1:bf:1d:38:43:9b:9c:66:39:46:dd:
58:df:67:35:25:5f:b4:5b:e3:92:f9:d4:9c:96:ca:
04:05:1a:8c:c4:ab:65:a0:74:2b:d5:6d:72:4a:b7:
ab:67:91:27:3c:7a:26:5b:32:f3:bc:b5:ca:bf:b3:
55:22:65:5e:ee:f0:a6:17:0c:ac:b0:d6:c6:2a:66:
77:58:30:d9:51:a1:3d:20:db:f1:d7:24:d2:6e:b3:
74:84:d8:63:0d:bc:d3:20:37:96:e2:5a:f9:a2:c2:
2b:2f:bb:f3:bf:a2:36:18:b9:7a:1c:b2:23:0a:06:
12:26:18:8e:93:9d:08:df:3d:3e:ff:ef:43:e7:ba:
ae:84:1d:8f:a3:28:4f:38:fc:6f:f6:1f:34:a3:56:
17:8e:7e:9f:01:f0:f9:63:0e:ef:eb:38:83:f3:d4:
25:77:ca:fc:f0:4e:1c:08:27:83:4f:08:89:d8:e6:
53:de:b1:65:a7:ea:31:8c:d4:84:df:95:b8:2a:a4:
a4:ad:ca:1a:76:14:31:76:17:58:2e:f9:27:13:e1:
22:36:17:92:4d:f2:25:9c:47:c6:33:73:64:d7:d8:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:A9:CA:93:13:9F:00:20:14:12:61:DF:7A:3B:B7:68:6E:BD:7E
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:9a:1b:50:d1:6d:02:dc:24:e4:e5:7b:33:1a:19:1a:a7:47:
7d:06:08:aa:0d:da:eb:60:1b:dc:8d:db:4b:9a:49:9b:1e:1b:
81:26:aa:77:38:6e:9b:31:8c:45:3f:89:aa:85:ee:00:fb:be:
ee:3b:21:77:1d:9f:25:e3:31:11:d0:df:a5:37:68:48:ea:4e:
09:b5:fa:e8:9b:34:7e:dc:45:1e:eb:bb:3e:d4:56:c0:3b:15:
6d:c6:04:4d:02:7c:f2:ac:1f:97:40:ea:ea:e5:41:d4:84:e3:
e4:d2:db:9c:18:0f:a1:a0:18:55:81:64:d8:26:07:e5:5e:f2:
b5:ad:4c:87:35:14:af:2b:3f:8f:71:b2:74:5f:f6:d9:c5:12:
f9:9b:32:e3:a5:3d:54:31:8e:e2:64:c5:d6:50:40:10:1a:60:
22:12:f4:1b:e3:88:61:b4:b0:2f:bd:2b:47:bb:ad:90:88:21:
08:e6:c4:d0:9c:fd:9a:f6:d3:95:b3:32:fe:6f:d8:b5:0b:5a:
4c:83:59:26:82:47:d2:e7:d1:9d:d1:a1:1a:c7:5a:a6:5c:3f:
29:44:5e:db:4d:21:be:df:b5:fb:b5:21:8e:2f:fe:96:f0:37:
f2:2c:08:43:1f:ce:1d:cd:ec:ae:7e:da:5f:c0:de:38:f3:5a:
dc:ce:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:21 2026 by rpki-client