Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: TbQDhpw7CT67oGG9f/PjKp2QJH1wC37AS18R+rQzYk8=
Subject key identifier: 86:A8:1F:41:54:FF:15:C5:C7:FF:57:77:AF:1B:8C:AA:D0:50:B1:DC
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 01A0E889163C18DD924180CF29E0D1EA4CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 03D3
Signing time: Mon 28 Sep 2026 15:01:33 +0000
Manifest this update: Mon 28 Sep 2026 15:01:33 +0000
Manifest next update: Tue 29 Sep 2026 15:01:33 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: l2bOE5asAWnAHPfvBSBEeksBpzEYqo03c8Sb3HEUUi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:16:3c:18:dd:92:41:80:cf:29:e0:d1:ea:4c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Sep 28 15:01:33 2026 GMT
Not After : Sep 29 15:01:33 2026 GMT
Subject: CN=86a81f4154ff15c5c7ff5777af1b8caad050b1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b4:5a:95:d9:4e:64:6b:ec:a9:f4:51:6b:48:
bd:1d:9a:9a:5f:c9:a7:54:37:65:9d:d0:9f:e3:eb:
30:25:1d:88:6f:2c:24:37:4d:55:59:20:a9:78:d5:
c7:66:c2:e5:e9:8e:aa:8e:11:e7:be:89:3a:c9:fd:
6b:fc:0e:8e:f2:df:fb:b0:6e:14:dd:11:1a:33:b4:
34:f9:47:19:4f:bc:e8:4a:21:d1:93:bb:5f:c3:fa:
6f:37:90:01:88:0f:e8:0f:82:b9:8d:1b:0a:ae:83:
39:31:08:59:c8:52:52:50:98:bf:5d:ed:b9:8e:8d:
6b:88:f8:44:74:06:6b:bf:69:d3:7a:fb:b9:c7:c1:
f3:c3:d1:21:95:65:fe:09:06:1b:b1:c3:9d:4d:c5:
68:1b:58:73:41:eb:09:7e:6f:65:1a:90:7c:79:54:
f1:12:2b:24:13:a9:cd:05:b5:0a:27:82:c6:bc:55:
f6:bd:eb:1d:85:24:3e:b0:5c:39:ca:01:5f:ed:b2:
b6:da:84:4e:74:74:54:f8:0c:fe:0f:cf:57:09:f3:
ea:bf:0f:e4:76:ee:50:97:85:29:87:84:77:81:b2:
4b:19:e5:bf:a4:ee:c6:ca:ce:75:2a:1f:41:d7:78:
c5:fe:2f:fc:b9:bc:fa:3d:94:00:71:58:9b:cc:29:
b2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:1F:41:54:FF:15:C5:C7:FF:57:77:AF:1B:8C:AA:D0:50:B1:DC
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:16:6b:1c:bc:d6:92:6d:6c:bc:2b:52:c3:e8:77:21:73:67:
41:0f:02:75:33:92:56:6e:97:5b:94:2a:4c:78:30:cd:99:cb:
0a:b1:c1:ca:58:cc:32:68:1d:b4:da:90:2a:dd:72:85:4c:5d:
76:d8:f6:18:36:71:1f:7f:bc:4c:92:34:39:9c:ad:c6:84:9f:
df:e7:51:5a:d2:09:a9:58:bc:4b:77:78:a1:61:4a:38:81:18:
84:64:8a:a2:df:e1:b4:a7:46:7c:c0:f0:0b:a3:76:3f:2c:80:
01:44:75:a8:0e:63:c6:01:e5:31:8a:04:50:6d:94:ee:45:10:
50:cb:28:c8:a3:0a:91:c1:50:30:76:c7:70:39:00:00:19:1d:
9f:53:a0:7e:ba:63:f5:a2:b7:85:53:53:a0:16:22:e2:07:f0:
ac:26:04:7c:e5:85:cf:70:32:29:f8:95:a1:99:3f:4e:08:84:
43:87:c1:41:f5:28:38:68:8e:11:2c:02:d5:e0:b6:81:ad:b5:
c2:3f:ec:89:2c:87:c3:04:e0:13:66:2b:ea:ff:21:72:9a:c0:
45:80:c6:42:bf:4f:73:e1:32:57:db:48:41:ed:b2:c2:39:37:
56:19:fc:9e:de:ea:9c:56:6e:0e:f1:0c:39:00:39:ac:67:7e:
f9:3c:07:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:49:03 2026 by rpki-client