
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: wZy7BUnckCmSZi192NCiJqxmZrCwvO/zgqxz8Mk8ADM=
Subject key identifier: A2:7F:FE:64:93:31:76:38:51:96:8E:26:4C:F7:B7:52:91:A6:C5:0A
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 01A10813A4EAA4DB292656C036C06ED09F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 1A8B
Signing time: Sun 04 Oct 2026 18:01:07 +0000
Manifest this update: Sun 04 Oct 2026 18:01:07 +0000
Manifest next update: Mon 05 Oct 2026 18:01:07 +0000
Files and hashes: 1: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: 6PepLhhTpVyyCqqFEglg1gvIHiZvn7tkNgc5+P0cXag=)
2: Q6JObLBeLp3wtiYaWIJ3qZQTM-I.roa (hash: 8OMeNdCrOVu7DLm13oZufQc3RGDGngByCEF598K46Yw=)
3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:a4:ea:a4:db:29:26:56:c0:36:c0:6e:d0:9f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Oct 4 18:01:07 2026 GMT
Not After : Oct 5 18:01:07 2026 GMT
Subject: CN=a27ffe649331763851968e264cf7b75291a6c50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:3b:9a:a2:f9:bc:1d:02:ea:37:58:62:f5:
57:79:e6:ef:b5:f3:44:c9:21:7a:90:5c:cc:f5:9c:
4a:a8:eb:57:f5:2b:61:b2:94:8f:db:cc:34:80:c3:
52:17:7c:a4:b8:bb:ab:37:e9:b8:19:83:4f:b4:2f:
2d:40:96:3d:67:84:39:3f:b8:08:51:24:be:8b:bf:
75:f7:97:c5:07:c6:e7:9d:db:c4:cf:6f:a7:f4:c0:
53:8e:26:85:23:0c:53:54:31:ba:94:38:2c:df:a5:
37:30:69:1a:21:2f:53:e0:f2:21:f9:72:e0:80:c7:
43:7c:fb:8b:c2:5e:42:f9:78:14:22:8f:d6:dc:04:
2f:3e:c2:4c:0e:47:0d:14:38:6e:34:39:05:69:6a:
38:93:d7:fb:d5:ac:34:6d:50:73:8f:bc:47:0e:2c:
ed:52:91:8d:75:01:13:d2:1b:9c:f5:13:55:55:cb:
71:71:9a:6f:0d:ec:2c:92:68:9d:df:6e:50:2e:2b:
71:c1:82:5d:4c:1d:a5:d4:1c:79:57:dd:57:b8:25:
2e:59:94:77:75:38:a4:f2:69:d0:c5:5b:a7:9d:7c:
47:6b:77:ee:d9:9f:97:d8:a1:f5:b8:09:36:62:cb:
60:43:e7:d3:f8:be:c0:aa:ea:32:e8:af:f0:df:f7:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7F:FE:64:93:31:76:38:51:96:8E:26:4C:F7:B7:52:91:A6:C5:0A
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:7d:b6:22:6a:8d:a5:ce:6d:e5:a0:32:af:29:70:d5:12:
34:ce:cd:60:e5:7e:69:09:12:fd:08:1a:81:0f:c6:0b:1c:33:
41:f8:aa:96:08:c6:2a:52:f8:69:ee:c8:66:48:1b:16:f4:9a:
56:9b:3f:79:fb:68:b9:55:56:95:a4:a0:b7:89:13:bf:45:6d:
5a:34:da:39:08:28:eb:54:f3:a9:6d:5b:41:42:98:91:67:cb:
1d:ec:ec:8e:19:b6:d2:66:17:16:96:67:d0:c9:71:01:9b:36:
9d:39:dc:c1:27:a7:9c:05:c0:93:3f:64:8d:9e:d4:f2:74:fb:
03:7d:28:92:15:02:73:5f:74:c2:80:3d:49:90:f4:a9:7b:b5:
9a:23:9d:eb:b0:ed:42:f1:d6:9f:a6:fa:62:e5:81:3d:44:de:
70:a7:1a:15:86:32:46:ea:3d:cd:1b:1f:ab:10:ea:86:7d:15:
34:60:5d:fc:5c:26:2d:b1:91:48:6a:ff:8f:c2:d6:e4:96:16:
89:ad:9d:d1:6c:56:12:a3:0c:8a:34:a6:e9:cd:da:62:c5:5c:
d6:91:39:91:a9:62:5c:e1:35:4a:38:20:bc:d3:00:5a:0b:27:
3f:9f:12:65:2d:4a:54:99:f9:d9:6d:1f:7d:c4:23:9d:82:c7:
5e:9e:4e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:03:07 2026 by rpki-client