Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: Bq5nfBMFQji8Hr4q05Db1cLj2aGJEcLFBHA5uz7COQo=
Subject key identifier: 5E:02:E9:88:5A:04:03:B8:D3:87:AE:45:E4:BB:F2:C7:D1:43:A5:38
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 01A10BEFD8C7312AB7E652253E7556C29157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 1A8D
Signing time: Mon 05 Oct 2026 12:00:30 +0000
Manifest this update: Mon 05 Oct 2026 12:00:30 +0000
Manifest next update: Tue 06 Oct 2026 12:00:30 +0000
Files and hashes: 1: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: Qx6flCAXq0SQTbIELG/iKh6iEgCskq1dsl3UVpIE+r4=)
2: Q6JObLBeLp3wtiYaWIJ3qZQTM-I.roa (hash: 8OMeNdCrOVu7DLm13oZufQc3RGDGngByCEF598K46Yw=)
3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:ef:d8:c7:31:2a:b7:e6:52:25:3e:75:56:c2:91:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Oct 5 12:00:30 2026 GMT
Not After : Oct 6 12:00:30 2026 GMT
Subject: CN=5e02e9885a0403b8d387ae45e4bbf2c7d143a538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:55:45:06:47:e4:66:dc:01:1c:cc:02:3f:
bc:e0:b5:34:30:a6:0e:0f:d4:47:4d:9c:50:03:d8:
68:43:95:13:7e:7c:d2:75:30:df:dc:ce:ef:34:24:
b8:60:d7:c7:e0:63:03:2d:37:af:6a:7d:fe:09:ad:
39:e6:98:96:33:f5:53:00:94:d7:27:e5:7f:89:cd:
ad:c8:0c:ed:f2:af:41:75:c7:55:f2:3b:91:bd:46:
d9:b9:11:ad:e8:d7:b7:5c:64:cd:7d:c2:fc:0c:31:
43:a4:e2:7a:dc:63:9d:f4:80:7c:2d:5f:4c:48:f7:
61:34:9d:ec:0f:bc:0b:bf:cb:ae:4f:38:11:95:b1:
51:40:ed:24:4b:4e:fd:85:3e:7c:4e:ff:de:6b:79:
22:4c:bd:40:08:fe:9a:42:d5:fc:a4:6c:62:f1:e4:
fe:43:8f:c8:9b:26:2a:f4:c7:c7:46:8b:e1:90:d5:
65:31:c2:b4:e0:44:ac:81:ce:26:f4:00:33:ad:d1:
33:92:d4:ed:34:63:1e:ba:c0:b6:43:f2:a9:9d:b0:
74:9f:ff:01:aa:9b:aa:4d:db:a7:a7:cf:01:8f:0d:
87:1b:c8:de:50:bc:75:22:ae:21:d5:55:55:0b:86:
ad:72:ae:4d:1c:d8:bd:96:3b:52:98:31:28:26:14:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:02:E9:88:5A:04:03:B8:D3:87:AE:45:E4:BB:F2:C7:D1:43:A5:38
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:8a:05:ae:58:b0:4c:92:b5:e0:5f:b7:bf:76:cd:fb:74:fa:
b3:6a:4c:0e:9a:c3:07:4f:7b:17:33:1b:7b:a9:88:7c:46:e3:
7d:5a:25:33:02:1e:fa:27:23:32:07:09:45:96:09:da:4f:85:
11:76:9d:cc:17:80:4a:1d:23:19:d4:15:cb:cb:dd:6b:e8:d9:
71:31:91:96:d0:4c:d7:eb:83:5a:e3:7d:b7:aa:b7:c3:ae:c5:
c8:73:50:39:59:82:24:7c:ba:23:6f:17:7e:e4:23:fa:c4:0a:
50:e5:8a:50:a3:65:91:8f:41:52:bd:50:a6:93:17:b6:7f:91:
f2:59:03:72:46:41:c8:df:e4:41:12:b3:b5:a7:e2:57:64:29:
3a:38:96:12:e3:99:a9:46:3c:cb:59:a8:34:cc:63:96:3c:98:
b3:19:be:16:0c:36:fc:d1:78:9e:44:dd:9e:2d:26:3b:68:2d:
41:04:cc:9c:8e:7a:75:3d:e9:f2:12:96:ea:d0:22:69:33:cd:
15:55:c7:93:89:95:9a:cb:f7:b1:52:fa:1f:19:04:52:03:0d:
b1:43:d1:7b:0a:bb:ac:1a:54:a1:82:c8:ce:a2:95:ed:4b:aa:
6b:f0:8f:50:4b:02:e9:bc:d7:ae:05:0c:f3:6a:6b:43:ef:c2:
50:85:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:47:56 2026 by rpki-client