Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File: OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier: 2ZJ72NUNn8hbvg/Sp5iJFD63CKyZKWX7mPA0k5KuR3E=
Subject key identifier: 21:68:A7:8F:ED:34:86:1B:52:DE:48:F9:F2:B0:BB:86:B4:AC:C5:27
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 019D3940B690EF8A0AEF829C79DCAF0FA2A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number: 090D
Signing time: Sun 29 Mar 2026 11:00:35 +0000
Manifest this update: Sun 29 Mar 2026 11:00:35 +0000
Manifest next update: Mon 30 Mar 2026 11:00:35 +0000
Files and hashes: 1: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (hash: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=)
2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: lDqhiiuzZdqt+aYHS0TzkBbdCpYaJML415VCwMAZi58=)
3: egvTStfdqsgaJQHUlI4Gx-druNs.roa (hash: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg=)
4: tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa (hash: mDC6nKfTSpQ8MtQgVXXdC9nwrvajhFovh0zIQBw5Eko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:b6:90:ef:8a:0a:ef:82:9c:79:dc:af:0f:a2:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Mar 29 11:00:35 2026 GMT
Not After : Mar 30 11:00:35 2026 GMT
Subject: CN=2168a78fed34861b52de48f9f2b0bb86b4acc527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:7d:bb:a6:41:d6:9d:17:28:7d:9d:65:00:
1f:da:08:a4:07:14:26:43:18:0b:6c:48:a6:e3:43:
ff:cc:c6:04:2a:5e:57:c1:ee:7a:11:ad:8a:66:18:
93:2a:c6:f2:b4:66:18:35:19:4b:95:61:32:72:2d:
10:8a:a4:28:96:52:c3:f1:20:23:4d:73:08:a3:6c:
c5:07:e6:95:a4:fe:39:76:49:fd:65:6a:af:c3:18:
e4:8c:88:d0:84:26:19:57:14:e3:d0:3b:c2:8c:81:
15:b6:80:3c:56:a3:22:a9:e1:ec:21:12:6e:53:69:
98:9c:a8:2e:0f:2e:d5:6b:b4:0f:a2:59:cb:9d:07:
67:98:5a:3e:81:f2:32:ca:f6:e2:db:47:99:53:c5:
6e:ed:db:86:0c:99:33:c7:3c:6e:36:6a:e7:a9:72:
50:eb:26:60:11:db:a1:cc:5f:d8:79:48:81:d6:70:
71:59:ff:45:43:d4:f6:17:79:bb:8b:f9:14:c4:69:
60:1c:e0:72:fa:af:5f:4b:0f:3a:9f:7a:c1:1d:38:
f3:1f:3e:67:a6:f5:ba:44:3a:fd:b6:68:1b:15:16:
bf:83:5f:1d:74:52:c8:6b:c0:0e:ab:6c:e3:85:60:
a0:0a:f4:5d:8f:6e:83:7e:be:53:e0:f7:02:67:96:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:68:A7:8F:ED:34:86:1B:52:DE:48:F9:F2:B0:BB:86:B4:AC:C5:27
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:7d:a0:fd:13:78:53:e8:3d:a6:7c:7f:69:dd:71:6a:c7:a5:
9c:17:72:b3:7f:f9:9d:7e:fa:af:19:65:f6:ca:b6:64:c7:44:
48:a0:b1:2c:aa:0b:dd:72:74:9d:04:94:70:ce:ac:0c:fd:da:
68:ab:bc:d1:0a:b1:92:ed:44:1e:95:56:87:84:85:b2:c7:8e:
59:79:17:0c:c4:5b:aa:48:7c:ea:91:b5:a4:72:b0:83:d0:ff:
9e:09:fa:4a:cb:c1:fd:4b:43:81:21:2b:78:34:03:87:d9:68:
e7:cb:3b:65:80:6d:8d:64:63:dd:27:76:59:10:44:24:7b:c1:
3a:c7:e7:fb:62:46:e9:9e:cb:87:f4:6e:83:b9:74:6a:93:82:
31:55:46:da:d7:3c:6e:53:1c:db:c8:ce:0c:e2:8e:4f:96:9f:
45:29:c1:e0:f6:be:a6:1f:8b:a2:20:ba:17:e0:04:a6:15:f1:
de:da:49:c9:ba:9d:44:d0:e5:bc:74:03:d8:56:00:f7:33:f6:
35:0d:29:1e:2a:b7:7e:f3:20:34:a3:21:2b:4a:ee:07:27:a9:
84:6e:10:e8:40:f9:26:78:76:e9:4e:2f:d4:6e:d1:72:43:47:
78:e2:d4:7b:d1:b5:79:cd:2d:91:9b:a5:b7:f9:fc:8c:97:e1:
19:fb:fe:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QLaQ74oK74KcedyvD6KnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MjQ3Zjc3YTNhZTBhZjcxZWFjMDMyNTY0NDlmNWQyOTJj
ZmZkNzQwHhcNMjYwMzI5MTEwMDM1WhcNMjYwMzMwMTEwMDM1WjAzMTEwLwYDVQQD
EygyMTY4YTc4ZmVkMzQ4NjFiNTJkZTQ4ZjlmMmIwYmI4NmI0YWNjNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvR9u6ZB1p0XKH2dZQAf2gikBxQm
QxgLbEim40P/zMYEKl5Xwe56Ea2KZhiTKsbytGYYNRlLlWEyci0QiqQollLD8SAj
TXMIo2zFB+aVpP45dkn9ZWqvwxjkjIjQhCYZVxTj0DvCjIEVtoA8VqMiqeHsIRJu
U2mYnKguDy7Va7QPolnLnQdnmFo+gfIyyvbi20eZU8Vu7duGDJkzxzxuNmrnqXJQ
6yZgEduhzF/YeUiB1nBxWf9FQ9T2F3m7i/kUxGlgHOBy+q9fSw86n3rBHTjzHz5n
pvW6RDr9tmgbFRa/g18ddFLIa8AOq2zjhWCgCvRdj26Dfr5T4PcCZ5ZsfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCFop4/tNIYbUt5I+fKwu4a0rMUnMB8GA1UdIwQY
MBaAFDkkf3ejrgr3HqwDJWRJ9dKSz/10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYt
Y2Q2NmFkNTM0ODEyLzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYtY2Q2NmFkNTM0ODEy
LzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt32g/RN4
U+g9pnx/ad1xaselnBdys3/5nX76rxll9sq2ZMdESKCxLKoL3XJ0nQSUcM6sDP3a
aKu80Qqxku1EHpVWh4SFsseOWXkXDMRbqkh86pG1pHKwg9D/ngn6SsvB/UtDgSEr
eDQDh9lo58s7ZYBtjWRj3Sd2WRBEJHvBOsfn+2JG6Z7Lh/Rug7l0apOCMVVG2tc8
blMc28jODOKOT5afRSnB4Pa+ph+LoiC6F+AEphXx3tpJybqdRNDlvHQD2FYA9zP2
NQ0pHiq3fvMgNKMhK0ruByephG4Q6ED5Jnh26U4v1G7RckNHeOLUe9G1ec0tkZul
t/n8jJfhGfv+Cg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:48 2026 by rpki-client