Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: fYvMxmjjvlYJn7oG2P+n0ewQmJsYWANg044/zdGIS2k=
Subject key identifier: 86:C3:55:B2:3D:B7:94:DA:B8:F2:96:F8:51:13:71:75:12:F7:6C:AD
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 019D265EF7AF35F2D85F6B775D686215CD21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0CFD
Signing time: Wed 25 Mar 2026 19:00:51 +0000
Manifest this update: Wed 25 Mar 2026 19:00:51 +0000
Manifest next update: Thu 26 Mar 2026 19:00:51 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: otFbJ9H9zE2uW2P5yqq//oqGUB3RtJlmfW301lP/2gE=)
2: kvD9VGLLMdV8Z-0U6xAPcdb9xNs.roa (hash: UOjHZulJJ0l7NjYIq2CISrUEi7sGsjxxCwq6ItXieZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:f7:af:35:f2:d8:5f:6b:77:5d:68:62:15:cd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Mar 25 19:00:51 2026 GMT
Not After : Mar 26 19:00:51 2026 GMT
Subject: CN=86c355b23db794dab8f296f85113717512f76cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:dc:cd:c0:74:18:d5:8f:cb:66:1d:00:08:
c5:9f:94:07:34:dd:02:43:53:c6:eb:bc:91:70:ff:
c8:fc:66:88:43:79:80:d1:c2:cc:69:3c:41:39:52:
4a:ec:9b:9c:9e:57:fc:43:93:2b:fc:7a:16:df:9f:
1d:46:c1:25:c3:5c:fd:4c:f7:db:60:5b:fb:01:ca:
21:96:9a:a2:bb:50:96:7e:d6:b8:4c:a2:c7:75:f8:
2c:da:a8:1e:ef:2c:38:1a:2a:07:b7:12:35:2c:27:
9d:93:d6:fe:fa:21:25:cd:fb:ac:75:2d:a8:a2:e4:
c6:75:87:71:9a:b8:ff:41:5f:46:65:51:6e:74:bc:
90:59:7a:2f:60:49:32:15:91:21:0c:d6:31:a7:d3:
86:16:2b:38:24:ba:bc:31:10:99:a4:df:2f:d7:2b:
d6:86:01:d9:23:e0:94:56:83:05:b1:e9:24:97:ff:
dd:36:9a:dc:4b:6f:ed:a1:9c:2e:1f:8f:37:ee:75:
81:cb:72:ac:b9:44:0d:13:0d:33:ad:1c:6b:5c:c8:
26:9b:ac:85:c2:69:b1:28:84:2b:e6:85:66:e8:5b:
f1:9c:a7:e6:7b:b0:8c:82:29:df:a3:66:5b:99:e4:
27:17:4e:95:a8:2b:9e:c2:9b:7d:e8:60:b2:e8:6f:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C3:55:B2:3D:B7:94:DA:B8:F2:96:F8:51:13:71:75:12:F7:6C:AD
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:79:22:9f:1f:62:8d:4c:75:54:7d:20:76:22:89:36:e1:b5:
96:7e:27:8f:e3:b9:95:67:2f:f7:2a:7d:7e:0e:82:0d:a5:13:
8e:5c:da:3f:c8:b8:6c:1a:4d:d0:cb:12:ff:55:af:f4:56:24:
fe:62:19:0c:91:04:f8:d6:a8:06:89:ff:d0:2c:cb:94:cd:5a:
b0:f2:5c:db:fd:9c:55:f5:51:a3:30:b2:e5:f4:d9:a9:07:4c:
75:10:96:11:61:ab:92:3d:14:08:f7:de:f7:65:c9:dc:65:b9:
f9:02:12:93:7c:79:8d:b3:b9:b6:21:88:d9:d8:cb:4e:1a:b1:
b0:37:ae:56:ce:4f:b0:e4:b2:96:20:5f:57:94:12:b9:fc:97:
78:34:f8:ef:47:85:b3:01:a1:05:7d:21:bf:f6:31:88:16:9c:
4e:70:e0:da:f9:97:3e:00:7c:57:1a:1b:e4:91:06:a1:b8:76:
3a:f0:06:d4:34:7b:c9:3b:9f:2a:a4:8f:fd:d9:87:45:f3:bd:
4e:b4:7e:c3:b8:f0:0f:00:1e:3d:37:d4:7a:11:8d:8b:30:12:
3c:2f:40:96:62:7d:1c:93:9f:dd:59:68:cf:14:f3:a3:5d:61:
bd:52:6a:3d:60:4d:ca:d6:eb:e2:c1:b9:b3:a2:20:a4:86:9b:
22:71:27:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:14 2026 by rpki-client