Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: +8wM/1nYS8AozmqiMXdAgXybeZWMeYFS0M7j4cD3W4k=
Subject key identifier: 9A:1A:8F:15:71:3B:0D:4A:A3:38:56:A1:3D:A6:D9:2D:25:7D:CC:16
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019D382E2D6EC40C47EB7A804FB461317A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 01EA
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: n/pqkzF4SHVIYh+NXBN59n0jCqNAcXqvZabROB1cM8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2d:6e:c4:0c:47:eb:7a:80:4f:b4:61:31:7a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=9a1a8f15713b0d4aa33856a13da6d92d257dcc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:22:25:8f:ac:6e:3d:8e:02:2e:9e:d7:d8:5c:
e0:85:52:aa:cb:23:66:91:e3:b6:83:f4:1b:50:76:
e3:8a:c9:91:cd:1e:69:c9:8b:2c:55:11:19:97:a1:
13:aa:75:74:46:03:31:f3:97:c8:32:4c:2b:f4:74:
0e:7e:6a:28:9c:b7:93:9a:77:e3:c8:10:ea:da:f1:
44:d2:15:17:ab:d9:7b:28:dd:b7:1b:5a:1c:00:af:
70:65:a7:b2:55:c7:62:fc:ee:a2:47:2a:5b:04:f7:
4a:c5:c1:fa:e6:94:a7:72:0a:8d:db:17:21:22:5b:
ad:ca:7c:c9:06:83:cc:bc:f1:0c:0b:59:03:09:22:
f1:3e:e1:42:05:5f:ad:f4:d9:21:ff:57:85:46:15:
df:b5:b7:b6:d4:e3:b8:df:9a:8d:d6:6b:c0:c2:0f:
7b:ca:7c:f4:d3:66:fc:15:23:dd:74:ac:de:57:b1:
ea:f9:3f:80:a6:81:26:bf:2e:7b:a1:6a:a3:db:d3:
4f:71:b7:73:49:b4:8a:bf:a5:e0:d8:d3:38:5d:41:
ec:6d:89:c3:7f:17:5f:a4:51:70:13:23:ac:10:2d:
ec:30:0b:c5:89:64:b6:a0:09:68:d1:04:82:5b:33:
46:2f:1a:6d:f4:cd:4f:c9:0a:80:0e:f7:2c:29:f1:
b1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1A:8F:15:71:3B:0D:4A:A3:38:56:A1:3D:A6:D9:2D:25:7D:CC:16
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ab:5f:b9:a2:c1:8d:95:6b:53:80:9f:89:96:82:a0:0d:4e:
9a:8a:6d:6d:e1:7f:e4:a3:79:a7:16:fe:4b:7d:79:72:c5:e8:
0d:1c:3a:be:ae:d2:3a:e3:24:12:2a:96:16:df:ee:cd:05:ba:
9e:88:b2:3c:bb:57:c2:b4:93:ca:a4:29:a6:15:53:a6:1e:eb:
ac:1b:6c:13:2e:72:db:77:90:50:fd:fe:d2:b1:2a:0c:de:68:
c2:4e:69:17:09:c3:27:12:dc:88:c6:1d:ec:69:bf:cc:89:13:
23:e8:73:a7:31:49:81:ef:c8:b5:6c:b4:b5:f5:e2:c6:b1:c1:
f7:31:f7:b9:df:22:30:35:3b:0c:28:76:11:5f:42:0d:0f:16:
dc:2a:3e:2b:6d:8b:08:49:4b:67:28:0d:70:6d:fc:4f:ea:21:
e7:51:b2:cb:96:83:9b:00:c9:d5:85:c0:fe:7b:35:f6:9c:f5:
92:85:21:63:ca:86:f1:a1:fa:78:54:bc:bc:99:31:cf:23:d8:
33:97:99:ab:e7:07:c7:2b:5c:34:27:cb:43:ec:45:94:c1:99:
57:8b:99:65:31:d0:06:02:1c:be:21:b5:46:6c:07:f6:e0:36:
f7:0f:a7:39:4a:1c:64:3f:e1:c1:88:16:b8:30:f9:a4:cd:44:
6f:c0:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:57 2026 by rpki-client