Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: MhpLPx3dSse5hpjjaE8tLvCs5vo+lny8bWd6a9aQhgk=
Subject key identifier: 04:51:E9:D9:6B:5C:A6:E4:83:AE:13:D7:B3:62:45:B9:79:72:F7:9A
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 01A12C1FF1BBBD35280C5A8756D992F06F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0E8D
Signing time: Sun 11 Oct 2026 18:00:53 +0000
Manifest this update: Sun 11 Oct 2026 18:00:53 +0000
Manifest next update: Mon 12 Oct 2026 18:00:53 +0000
Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: Fq29IaHXOHQ6d+5shn+d2zc10t395Ps3Mml5ovBEfm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 18:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:1f:f1:bb:bd:35:28:0c:5a:87:56:d9:92:f0:6f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Oct 11 18:00:53 2026 GMT
Not After : Oct 12 18:00:53 2026 GMT
Subject: CN=0451e9d96b5ca6e483ae13d7b36245b97972f79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:40:8c:11:3c:e6:93:12:e0:5b:67:fa:45:c9:
44:3c:a4:c3:d3:c5:a5:fb:a7:dc:6a:04:67:30:0d:
4b:06:3b:06:c2:11:44:7a:1d:90:8b:95:01:8a:70:
43:09:63:93:ed:d3:82:02:64:80:c4:a7:d7:5e:ab:
54:85:46:76:6c:81:75:8e:bf:78:19:50:e8:99:a8:
7c:3a:73:4e:c0:41:1b:5a:4d:ec:5e:fd:85:c1:a9:
c5:e3:7d:52:22:94:5b:01:91:73:d1:ba:90:84:11:
e0:61:6c:56:b0:27:fa:bb:bf:2d:a8:55:d8:5b:f4:
2b:05:93:d1:9e:55:51:18:07:56:ac:c0:78:d4:95:
95:6d:9d:14:ec:a8:8a:e9:77:d7:c6:35:c8:8a:2a:
5f:02:36:01:1b:48:0a:47:42:00:56:33:d3:4e:7a:
25:2f:20:e3:49:09:a9:d3:b5:7a:92:b5:fe:b2:88:
5b:2e:31:d1:e7:65:5e:c3:0e:81:46:3b:b1:0f:f0:
a6:c6:07:d7:2d:21:36:75:17:dd:45:e8:d3:f6:b4:
72:4e:8b:57:97:d2:22:a7:cd:78:5f:ff:41:cb:12:
f9:26:1d:c3:f3:e1:c2:dd:95:7d:6c:57:78:55:32:
0f:94:2f:29:37:8b:12:69:8e:c6:f7:92:e9:9a:99:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:51:E9:D9:6B:5C:A6:E4:83:AE:13:D7:B3:62:45:B9:79:72:F7:9A
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:41:24:2e:0e:05:64:f1:3f:6a:54:ba:ee:9e:54:c6:7b:93:
b8:84:80:01:93:b7:b2:33:9c:ae:f3:fa:74:0e:4e:4a:a5:14:
1c:45:7a:17:9e:38:73:9f:4d:38:7b:00:17:8c:81:be:bd:82:
1d:23:df:e4:d4:de:b0:83:f1:6b:a5:e8:67:49:5c:8b:b4:ab:
d3:e5:9b:f5:1d:5f:ee:43:df:71:54:12:9b:11:46:8a:cd:11:
51:07:4c:b5:6d:53:f5:4d:8f:f1:a6:4d:e7:86:a9:fa:ec:96:
2e:ef:db:f8:a8:c4:7c:3b:da:a9:9f:73:f3:19:14:a3:65:5e:
3b:2b:74:c2:27:02:8b:8b:3c:10:30:90:f5:fd:df:be:3c:e8:
b4:36:ee:de:97:0e:bf:d3:e6:6c:b8:5f:15:e8:54:41:45:05:
51:63:f3:35:86:dc:ab:1f:4b:23:f2:99:36:6b:29:bd:cb:20:
e3:93:0b:72:c4:4f:bc:48:ff:4c:cb:dc:9e:53:8f:f4:91:5c:
ca:d7:bf:44:df:33:d7:e1:90:d9:8a:e4:d6:d3:bf:21:85:6b:
b6:11:a6:41:3a:e3:a9:62:60:f2:59:48:e3:eb:55:0f:b5:6d:
3b:5e:9d:17:b8:64:c0:a1:4c:f8:58:71:44:fd:1c:5c:e3:eb:
14:72:cd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:03:37 2026 by rpki-client