Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: IRoEMPHADxnoPwyfQ6+/MMp4rvHOp8hAXwkkHIQlTgI=
Subject key identifier: 32:15:3E:E8:8A:AF:9A:8C:8C:B9:F2:62:34:7A:DD:6C:90:5F:E6:F3
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019EFA9443B21244154263F20DE2C9BF2CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 0A5E
Signing time: Wed 24 Jun 2026 17:01:20 +0000
Manifest this update: Wed 24 Jun 2026 17:01:20 +0000
Manifest next update: Thu 25 Jun 2026 17:01:20 +0000
Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: s9/M1ymrfCb/k+lxvmmoSPnnyIf402eUhTCRLoc3oww=)
2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=)
3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:94:43:b2:12:44:15:42:63:f2:0d:e2:c9:bf:2c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Jun 24 17:01:20 2026 GMT
Not After : Jun 25 17:01:20 2026 GMT
Subject: CN=32153ee88aaf9a8c8cb9f262347add6c905fe6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:b0:66:58:9f:e3:f5:09:48:f4:04:57:f0:
b8:14:45:91:d3:06:cc:16:bd:be:da:31:c7:85:12:
56:1c:44:7b:c8:a8:39:fb:1a:7d:00:c0:f7:53:1d:
23:c5:89:73:32:df:a8:52:29:45:df:39:e9:94:cf:
a1:08:cc:28:4c:80:b7:5f:6b:d5:39:65:38:46:df:
08:9b:f4:e5:37:0a:e8:2b:11:69:d9:45:40:8b:dc:
11:15:15:39:b3:3c:01:a9:37:fc:a5:36:31:7f:8c:
88:d2:2a:20:f5:4f:d5:93:00:92:14:2e:76:7a:99:
ff:5e:3b:c6:06:c1:af:cf:99:4d:77:5a:42:98:08:
09:b5:d3:d7:18:96:36:a6:d9:49:c9:dd:57:5c:83:
7a:4b:ef:6b:78:d9:1b:a7:34:26:c0:dd:fc:ab:a0:
12:e6:0d:50:ad:07:70:a0:60:c8:d8:3b:88:fc:f4:
e3:41:a0:1d:c0:a2:b5:e2:a9:5b:76:4b:cd:6d:ad:
d6:51:b8:53:20:55:9f:68:97:58:03:6a:69:3b:20:
90:12:88:b0:d3:84:ad:cd:b4:8d:03:e2:55:89:19:
ad:11:50:1d:4f:db:b3:a2:07:02:45:ff:ed:bd:c4:
29:34:d5:0f:95:f3:a8:88:c6:0b:35:a7:a7:62:8e:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:15:3E:E8:8A:AF:9A:8C:8C:B9:F2:62:34:7A:DD:6C:90:5F:E6:F3
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fa:2d:21:40:e5:90:53:c2:fb:86:53:c1:1c:04:57:7d:ea:
b6:c2:98:93:f3:41:c8:21:e8:a7:ca:09:19:6a:e9:1b:e5:96:
16:0e:65:fb:66:55:4b:e4:9b:e7:5c:eb:3b:57:40:55:b3:44:
af:99:6d:5d:22:15:ed:a8:b7:25:90:bc:50:f9:84:60:ba:ae:
fd:5d:e9:3f:97:f8:f5:7e:b0:5c:74:a8:43:4c:b6:9c:81:0e:
ce:13:25:15:17:76:dc:df:91:d5:d3:cd:d0:d4:05:ec:59:52:
d7:2a:42:ef:d0:c3:e6:57:ab:ba:6b:f8:47:dc:cf:5e:c3:af:
7d:55:b9:2e:36:03:29:99:01:c3:85:01:d3:ea:cd:0f:cf:0b:
9b:8b:2a:5a:3c:98:e0:49:85:ad:79:8e:2a:52:03:f4:37:e9:
db:c8:5f:ff:7e:27:40:f9:49:44:9b:dd:46:e0:04:e6:4e:b9:
f8:e6:5a:2f:2d:d9:6d:82:e4:f0:3c:7b:26:eb:f7:07:54:bd:
40:0a:c4:cb:58:f0:ef:9b:98:54:bc:4b:85:62:11:c7:3e:9a:
4c:b4:15:ed:a4:cd:4e:08:fa:8c:d5:6c:cb:e3:ae:aa:5a:a6:
8a:ed:b7:01:7e:d9:06:39:1e:81:86:da:78:94:82:92:e7:6d:
c8:90:57:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ76lEOyEkQVQmPyDeLJvyzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzU2YmRlOTYzZWVmN2MyNTBiYzg0M2M2OTVjYTNmZTA3
ZmJhYzQwHhcNMjYwNjI0MTcwMTIwWhcNMjYwNjI1MTcwMTIwWjAzMTEwLwYDVQQD
EygzMjE1M2VlODhhYWY5YThjOGNiOWYyNjIzNDdhZGQ2YzkwNWZlNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVKwZlif4/UJSPQEV/C4FEWR0wbM
Fr2+2jHHhRJWHER7yKg5+xp9AMD3Ux0jxYlzMt+oUilF3znplM+hCMwoTIC3X2vV
OWU4Rt8Im/TlNwroKxFp2UVAi9wRFRU5szwBqTf8pTYxf4yI0iog9U/VkwCSFC52
epn/XjvGBsGvz5lNd1pCmAgJtdPXGJY2ptlJyd1XXIN6S+9reNkbpzQmwN38q6AS
5g1QrQdwoGDI2DuI/PTjQaAdwKK14qlbdkvNba3WUbhTIFWfaJdYA2ppOyCQEoiw
04StzbSNA+JViRmtEVAdT9uzogcCRf/tvcQpNNUPlfOoiMYLNaenYo7fDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIVPuiKr5qMjLnyYjR63WyQX+bzMB8GA1UdIwQY
MBaAFDrFa96WPu98JQvIQ8aVyj/gf7rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2It
Y2U5YzlmM2FhODU1LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2ItY2U5YzlmM2FhODU1
LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPotIUDl
kFPC+4ZTwRwEV33qtsKYk/NByCHop8oJGWrpG+WWFg5l+2ZVS+Sb51zrO1dAVbNE
r5ltXSIV7ai3JZC8UPmEYLqu/V3pP5f49X6wXHSoQ0y2nIEOzhMlFRd23N+R1dPN
0NQF7FlS1ypC79DD5lerumv4R9zPXsOvfVW5LjYDKZkBw4UB0+rND88Lm4sqWjyY
4EmFrXmOKlID9Dfp28hf/34nQPlJRJvdRuAE5k65+OZaLy3ZbYLk8Dx7Juv3B1S9
QArEy1jw75uYVLxLhWIRxz6aTLQV7aTNTgj6jNVsy+Ouqlqmiu23AX7ZBjkegYba
eJSCkudtyJBXqQ==
-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:56 2026 by rpki-client