Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: w81iPXpvRfX9cBb0QgQ+4cZrOcHEAYqKTHkqWzVQA7Q=
Subject key identifier: A1:CB:4C:48:B1:84:C6:2A:E7:B7:9D:BF:BB:3F:02:60:3D:C6:28:53
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019DEE24F65ECC471D9A6B2834E178E4F1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 09D3
Signing time: Sun 03 May 2026 14:01:32 +0000
Manifest this update: Sun 03 May 2026 14:01:32 +0000
Manifest next update: Mon 04 May 2026 14:01:32 +0000
Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: wUU1WTc6/VVSEXqjjmiLMDq+YpOpJPvfaJ9v6M0vCck=)
2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=)
3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ee:24:f6:5e:cc:47:1d:9a:6b:28:34:e1:78:e4:f1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: May 3 14:01:32 2026 GMT
Not After : May 4 14:01:32 2026 GMT
Subject: CN=a1cb4c48b184c62ae7b79dbfbb3f02603dc62853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3f:8c:6f:d4:0a:af:03:69:dc:c5:b0:ba:f3:
e0:f5:12:91:7c:41:07:1f:0f:65:eb:92:f7:54:f7:
f3:d5:70:9b:b3:ca:c9:2d:49:85:54:cf:c1:ec:99:
0f:9b:d0:c3:8d:7a:ed:4a:c5:ca:d2:1e:15:c1:6a:
fb:a3:96:f3:7c:63:6c:72:8f:bb:03:3f:b9:50:c1:
27:d0:b1:55:11:e0:8f:8f:f3:c5:c1:f9:f8:5f:4f:
3a:1c:a5:44:5c:a4:5a:91:06:e2:86:8a:12:6f:27:
eb:99:ae:5a:85:96:c4:6a:9b:f2:18:48:4f:c3:6c:
1d:20:a4:18:a1:10:7c:cf:c8:36:7d:85:cc:49:a5:
d9:f6:af:2d:4e:aa:c8:e3:19:33:78:06:e3:0d:af:
c9:d4:6a:c2:96:64:72:01:da:ef:70:f6:fb:88:e1:
31:ac:70:24:50:cc:7b:ee:b0:fd:2a:aa:3c:36:f1:
e2:6c:b4:f8:29:91:af:c7:d6:d1:e6:af:4b:87:37:
b3:07:f4:04:87:b0:98:a5:d8:d6:9c:a9:b5:d9:f0:
f7:10:72:be:41:f8:9a:ae:f8:d3:7d:eb:96:bb:07:
81:0e:d8:a6:f2:da:1d:43:74:86:f0:a7:bf:42:d8:
a6:29:44:86:53:49:77:ac:ce:66:1c:44:e3:0a:85:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:4C:48:B1:84:C6:2A:E7:B7:9D:BF:BB:3F:02:60:3D:C6:28:53
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:75:97:6c:f9:cf:96:e8:f2:d6:f7:ec:d7:0a:53:85:8e:7d:
91:9f:de:45:cc:c3:a2:24:6f:bd:4e:4c:48:b3:3c:ea:f4:bf:
e2:b8:b1:df:aa:a1:a7:e7:12:83:e2:3e:b9:49:fb:a2:4d:d3:
b3:58:d3:5f:dc:9a:24:42:72:de:22:b7:11:1c:69:a2:60:e1:
17:23:65:ab:05:09:d1:8c:7b:67:3c:8e:c9:35:8d:7c:62:76:
ab:70:61:59:33:0b:b6:73:dd:e7:f7:0b:60:02:d0:6c:87:7a:
9d:d6:a5:bc:4c:b8:c0:c4:00:f7:64:47:18:01:1c:3b:42:48:
52:24:8d:f4:32:b3:a3:18:4a:5f:87:61:a9:fc:13:be:7e:a3:
c8:70:74:88:78:54:ba:64:1a:ef:1e:06:ab:b3:da:c5:bc:b9:
dd:15:e2:43:d8:c7:6f:a6:78:d8:96:94:73:c1:d7:a5:bf:50:
9d:82:a8:cc:92:8c:b9:78:98:99:e4:41:d0:0a:ef:99:28:22:
9b:de:7c:fe:16:7e:8b:91:41:4a:f3:67:33:52:9e:3d:83:3e:
61:2c:44:63:d0:d5:17:9a:d5:2e:dc:29:94:60:0a:fe:90:56:
eb:54:5c:a8:11:d2:e0:c8:e5:0b:f1:c5:c4:5b:4d:a9:0f:08:
5a:8f:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:05:43 2026 by rpki-client