Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: CEQepxYAn8BgCdC+IO2bqUpXcWo8IMTXe3rFSJbwzDs=
Subject key identifier: EE:5E:46:59:AC:06:2C:10:1B:83:99:2A:37:81:64:5F:52:FC:D8:C1
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 019F94A42B010AD9708C98F5983A5EC4157F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0DBA
Signing time: Fri 24 Jul 2026 15:00:14 +0000
Manifest this update: Fri 24 Jul 2026 15:00:14 +0000
Manifest next update: Sat 25 Jul 2026 15:00:14 +0000
Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: 4rtoPJVtdYA/H5WramNDhrWwyRFwKH88sMnSEH834vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:2b:01:0a:d9:70:8c:98:f5:98:3a:5e:c4:15:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Jul 24 15:00:14 2026 GMT
Not After : Jul 25 15:00:14 2026 GMT
Subject: CN=ee5e4659ac062c101b83992a3781645f52fcd8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:8c:58:23:3a:72:7a:eb:f1:b1:d6:8c:86:
74:e4:fc:b7:4e:86:a9:21:6a:10:7e:e5:3b:be:ca:
45:a1:81:1d:a4:35:f0:9a:25:58:79:2d:0e:33:2b:
a3:3f:c1:b1:a5:5e:85:11:7a:8b:c3:3d:c4:a9:02:
da:00:06:47:b7:8f:4b:a6:c4:2f:02:14:d0:ab:9f:
ab:89:3f:e3:fa:b2:c0:98:47:33:b2:a1:1f:90:e8:
7a:66:0e:03:66:b6:8d:6b:ac:be:b4:a9:16:a1:e8:
9c:64:85:3f:0d:73:b8:dd:65:cb:9d:07:9e:5f:5a:
cb:26:2f:1a:78:a2:1a:3f:42:1c:0e:7b:a3:d0:8d:
1b:9d:7b:70:00:a2:ca:38:08:07:51:5c:cb:9f:cb:
92:a5:d5:e9:df:b6:69:42:81:19:17:b8:52:6f:9f:
a5:17:d7:7e:89:4d:41:68:9f:50:4b:68:e5:56:c6:
3f:7e:9e:fd:f4:7f:ae:ba:fe:44:60:83:21:11:7f:
bc:fe:cc:28:44:79:42:6a:d7:88:f3:78:27:15:7f:
cc:8d:27:92:bd:9c:64:dd:44:e7:f7:b6:18:63:2f:
a1:aa:d5:1f:d4:8a:bf:9c:dd:ab:d1:f7:85:ad:fa:
20:d7:d9:0e:c2:a3:16:a9:a4:78:63:07:6d:63:aa:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5E:46:59:AC:06:2C:10:1B:83:99:2A:37:81:64:5F:52:FC:D8:C1
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:14:d4:ef:b5:72:f0:bc:1c:c0:ba:30:cc:7f:0c:fc:57:af:
33:45:5f:08:ec:ea:6e:ca:e7:d1:6d:07:41:f0:d1:70:ce:53:
30:a3:74:1c:fa:8c:9b:e0:5a:20:a0:e1:6b:57:a1:ed:81:0a:
f0:86:3d:81:d7:fd:cf:b2:77:ca:f5:e7:f7:85:6d:17:5f:19:
d5:53:18:5f:f7:09:fa:7a:fb:a2:a5:3d:70:91:aa:7b:6f:1e:
d3:59:b9:02:e7:89:75:88:74:3a:a6:39:ad:53:e2:aa:74:cd:
64:05:76:6c:63:81:cd:e6:92:10:c4:ce:af:19:98:5d:26:79:
6c:6c:31:36:21:00:c9:36:3d:06:df:91:9c:b0:5c:57:21:9f:
2e:1a:49:76:79:9c:37:54:64:71:6f:44:9d:c4:5a:85:e6:4b:
e3:43:4d:a2:1b:55:d6:2e:65:00:83:e4:2c:17:74:5d:71:52:
91:de:b5:16:da:6c:fe:a8:8a:f1:de:ba:13:5f:3d:58:c2:8a:
b2:ec:93:10:53:c2:76:1f:9c:a9:a1:e1:86:4c:74:c3:ef:47:
31:2d:bb:5b:93:6c:f1:8c:bf:95:47:3a:2f:13:ab:5f:4a:ea:
66:49:24:7a:f5:22:31:90:6d:ae:3f:48:9f:ac:33:8c:49:0b:
24:6c:55:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpCsBCtlwjJj1mDpexBV/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzg5MTEwMGU1MDBmYjVjNjRmMzBmMTYwM2ZlNTQ1ZGFi
NDkwMTYwHhcNMjYwNzI0MTUwMDE0WhcNMjYwNzI1MTUwMDE0WjAzMTEwLwYDVQQD
EyhlZTVlNDY1OWFjMDYyYzEwMWI4Mzk5MmEzNzgxNjQ1ZjUyZmNkOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2amMWCM6cnrr8bHWjIZ05Py3Toap
IWoQfuU7vspFoYEdpDXwmiVYeS0OMyujP8GxpV6FEXqLwz3EqQLaAAZHt49LpsQv
AhTQq5+riT/j+rLAmEczsqEfkOh6Zg4DZraNa6y+tKkWoeicZIU/DXO43WXLnQee
X1rLJi8aeKIaP0IcDnuj0I0bnXtwAKLKOAgHUVzLn8uSpdXp37ZpQoEZF7hSb5+l
F9d+iU1BaJ9QS2jlVsY/fp799H+uuv5EYIMhEX+8/swoRHlCateI83gnFX/MjSeS
vZxk3UTn97YYYy+hqtUf1Iq/nN2r0feFrfog19kOwqMWqaR4YwdtY6ooTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5eRlmsBiwQG4OZKjeBZF9S/NjBMB8GA1UdIwQY
MBaAFKLIkRAOUA+1xk8w8WA/5UXatJAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTIt
OGNhMGM5MGY1NzdlLzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yOGI1NmMtNmFhYy00OGQ3LWFiYTItOGNhMGM5MGY1Nzdl
LzEvb3NpUkVBNVFEN1hHVHpEeFlEX2xSZHEwa0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxTU77Vy
8LwcwLowzH8M/FevM0VfCOzqbsrn0W0HQfDRcM5TMKN0HPqMm+BaIKDha1eh7YEK
8IY9gdf9z7J3yvXn94VtF18Z1VMYX/cJ+nr7oqU9cJGqe28e01m5AueJdYh0OqY5
rVPiqnTNZAV2bGOBzeaSEMTOrxmYXSZ5bGwxNiEAyTY9Bt+RnLBcVyGfLhpJdnmc
N1RkcW9EncRaheZL40NNohtV1i5lAIPkLBd0XXFSkd61Ftps/qiK8d66E189WMKK
suyTEFPCdh+cqaHhhkx0w+9HMS27W5Ns8Yy/lUc6LxOrX0rqZkkkevUiMZBtrj9I
n6wzjEkLJGxVnw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:15 2026 by rpki-client