
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: zXpXXsmukCr60w7OqOkEfy/W7JSEzd59S71cg/HrnCY=
Subject key identifier: 6C:E8:B9:42:76:3D:01:F0:3D:12:AF:44:6E:BA:28:62:4D:40:27:05
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019D047785DE4E32B7DD8603502E302CF879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 095A
Signing time: Thu 19 Mar 2026 05:00:34 +0000
Manifest this update: Thu 19 Mar 2026 05:00:34 +0000
Manifest next update: Fri 20 Mar 2026 05:00:34 +0000
Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: TtL8LKyXD0Jr5wA8DsxGmYqLhqA0jHF87iGwzzv5fLU=)
2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=)
3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:77:85:de:4e:32:b7:dd:86:03:50:2e:30:2c:f8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Mar 19 05:00:34 2026 GMT
Not After : Mar 20 05:00:34 2026 GMT
Subject: CN=6ce8b942763d01f03d12af446eba28624d402705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:1f:8e:a4:3a:a6:c6:16:e7:0c:57:19:45:
1e:f6:90:3e:3d:ff:22:5b:85:11:5e:7c:74:b0:cc:
79:f1:10:e9:49:c0:e3:ed:2e:7d:ab:7d:62:b3:b7:
71:ea:e3:20:4a:96:49:5d:60:b2:c4:61:73:49:d0:
91:2b:3d:ba:35:f2:04:a9:e4:2f:85:de:af:7c:7f:
fe:8e:6b:86:b5:17:a3:bc:3f:43:49:5e:ed:d3:b2:
5f:ea:87:94:a8:84:e8:1d:67:55:ff:ac:31:89:b2:
6b:2b:eb:53:1a:48:1f:b1:7f:19:e2:8b:7a:dc:b2:
c3:43:f7:e0:a9:14:d5:7e:1a:f3:98:a5:eb:64:59:
9a:0d:c4:7f:14:a6:c6:e1:6e:e4:11:67:75:7a:4c:
0d:65:45:92:9b:51:5a:df:91:64:c3:7d:c2:79:1d:
de:83:48:12:c4:a8:87:86:87:59:d0:0b:86:5d:07:
01:d8:a3:c8:1a:ad:9b:4d:a6:e7:99:4b:ee:29:a9:
1b:c3:3c:9c:c9:d9:f6:1e:7c:ec:2e:cd:97:84:48:
31:0a:5b:2d:dc:bf:f7:37:73:c2:01:3c:07:87:44:
c1:6e:1c:5e:38:ae:f4:cc:9e:24:d7:ad:ed:c6:ca:
de:60:c2:49:4a:0c:99:7d:50:e2:8f:7d:ac:a2:4a:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:B9:42:76:3D:01:F0:3D:12:AF:44:6E:BA:28:62:4D:40:27:05
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e3:0c:5f:8b:72:b0:b6:6a:ab:39:2c:57:c2:e8:e6:16:ef:
05:1e:72:62:66:2a:b6:39:da:df:7b:b3:97:9b:c3:37:8d:92:
57:f9:9c:4d:60:be:8c:8b:c8:59:4a:ab:91:5d:5e:96:0c:68:
6a:47:86:cf:ce:00:8a:32:39:e2:25:9e:92:20:ea:a6:e9:88:
28:2d:15:55:70:6d:24:74:78:a3:02:c5:8a:ad:e1:43:09:28:
55:b3:4d:30:91:14:a4:54:87:df:94:90:4f:ee:ef:37:00:79:
99:27:84:f6:b9:d4:16:fe:7d:60:64:28:1c:f4:dd:02:2c:1d:
1d:6e:5b:ad:11:7e:ea:60:65:50:c3:11:6d:ea:bb:c0:51:af:
f0:29:35:b0:da:08:f5:ef:6f:9f:8e:78:b8:08:ad:63:2d:6a:
46:81:9a:55:30:50:eb:47:b0:e5:02:f2:b1:53:92:bf:55:32:
79:bb:09:5a:0b:5f:94:f8:f0:59:9e:f6:4b:1f:19:78:4d:06:
1d:a0:9a:3d:12:79:70:34:9c:1b:d4:4d:ec:a7:4e:d6:c0:df:
02:2c:cd:85:f1:70:f5:0f:fa:7e:60:1b:d4:da:15:8e:93:c4:
30:82:70:00:dc:40:dc:88:8c:37:5f:69:9c:a8:19:cf:f7:0e:
84:d3:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:07:14 2026 by rpki-client