Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: AXlgqFZ3/DxlWXKMqc91l7jv1WLpZ+EYnf90WjNEKCE=
Subject key identifier: BB:68:7E:59:90:57:11:5D:F7:E8:28:1F:A5:3D:87:EC:CD:EA:8C:D6
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 01A186E42682484D335724D0CCE33512C132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 0425
Signing time: Thu 29 Oct 2026 09:01:01 +0000
Manifest this update: Thu 29 Oct 2026 09:01:01 +0000
Manifest next update: Fri 30 Oct 2026 09:01:01 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: rATdWPYa+I+31XppwIHLx50K+rUpSnhtgMuNNr3x70A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e4:26:82:48:4d:33:57:24:d0:cc:e3:35:12:c1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Oct 29 09:01:01 2026 GMT
Not After : Oct 30 09:01:01 2026 GMT
Subject: CN=bb687e599057115df7e8281fa53d87eccdea8cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:8b:1f:48:b1:c3:47:ad:1d:a8:de:7b:c3:
62:e7:46:8e:ba:8c:4c:5b:0f:90:1f:ab:3c:dd:39:
18:31:6d:0c:bb:7d:a3:66:a7:75:24:1d:e0:68:64:
58:35:26:ac:35:41:08:b5:20:2e:42:87:c8:cd:c3:
ba:dc:5a:d4:d8:14:36:97:98:93:cc:5b:96:7f:da:
99:2b:d6:74:30:7d:61:a6:ae:fe:ca:9f:79:0f:0a:
5d:51:82:83:23:be:4f:9d:49:8e:5a:ad:5c:65:d5:
f6:31:f4:62:25:b8:65:c8:54:c0:b3:8d:76:d4:9c:
38:d4:98:b9:50:b3:ac:58:5e:a3:4b:84:48:d1:a4:
66:56:cc:b3:c5:9b:1e:62:2c:c9:99:fa:48:f2:01:
62:5e:af:79:11:c2:95:20:be:d9:8a:dc:9d:26:1c:
0d:32:b3:4c:26:c5:5f:dc:38:11:68:12:18:5e:8b:
33:28:7d:e6:44:9f:1f:a8:20:be:11:b2:09:5d:c7:
08:8e:54:98:17:71:6b:22:e7:5d:ec:ce:04:a3:3a:
00:84:f8:1a:26:97:6c:fb:9a:77:d2:ec:5c:31:11:
59:35:70:19:a4:fc:85:e5:fa:84:6a:56:3b:b7:99:
78:6a:28:da:04:f8:cf:9d:fb:19:83:91:95:dd:87:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:68:7E:59:90:57:11:5D:F7:E8:28:1F:A5:3D:87:EC:CD:EA:8C:D6
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f7:1d:e7:59:50:8b:c4:93:fc:d7:9e:fa:c3:0d:1b:53:54:
1c:be:4f:5c:5d:de:1c:48:5d:69:95:c2:01:c7:d0:1e:9a:c3:
c2:25:9c:18:1b:b7:98:82:c0:0e:fc:4a:ae:bf:74:a0:e1:9f:
15:28:0c:cc:48:47:50:d5:f9:4d:22:21:c4:01:34:09:22:b0:
83:91:24:fa:4f:7b:41:2b:d8:45:17:06:ca:9e:be:79:35:13:
a3:45:71:f5:50:8d:4f:93:57:fa:16:44:ad:ed:99:d5:84:f0:
4a:e3:4b:67:7a:63:f8:4c:15:8f:a2:61:d2:7e:a3:00:1b:ce:
33:aa:f9:d8:ad:8a:b8:db:40:4d:83:e2:76:d6:d0:3d:df:06:
ea:b4:b1:c5:87:e7:cf:84:f5:d1:f5:66:2b:d0:2b:d3:86:70:
0a:d3:d5:d4:3f:83:56:1d:6c:d2:a9:65:c8:13:46:85:dc:fc:
40:6a:f9:e8:89:f9:40:18:20:d1:3e:09:1b:3c:35:e2:8f:be:
b2:bd:08:ba:df:7c:30:34:f0:98:71:a1:82:8b:bf:98:ac:41:
6a:18:a0:09:8b:56:2b:1a:9f:2c:bc:ec:d6:a7:15:a2:9e:81:
65:ca:04:e2:ce:58:38:b3:ee:2a:32:3e:d6:66:ab:24:69:7b:
c5:c1:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:36 2026 by rpki-client