Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: yrhURbxJ6O37GfVkaKnCRvLDNyzWmJ79MI7+fP7qkqc=
Subject key identifier: C0:A1:B3:19:A4:38:61:2E:DE:D3:78:BA:7F:55:5E:CE:82:CF:CD:03
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019D26CCBC003FBB79F5C01D97688A0C54E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 01E1
Signing time: Wed 25 Mar 2026 21:00:44 +0000
Manifest this update: Wed 25 Mar 2026 21:00:44 +0000
Manifest next update: Thu 26 Mar 2026 21:00:44 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: D5nBvagZ6AyKU5/iaqhIPthNISdzwOW7w7ESkUs+OMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:bc:00:3f:bb:79:f5:c0:1d:97:68:8a:0c:54:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Mar 25 21:00:44 2026 GMT
Not After : Mar 26 21:00:44 2026 GMT
Subject: CN=c0a1b319a438612eded378ba7f555ece82cfcd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:9f:3b:c7:80:e9:29:a1:0a:60:9e:39:d8:
18:71:98:38:61:57:39:9c:e3:76:4b:c8:0a:09:38:
ac:b5:bf:c2:cf:d7:98:8f:93:17:c7:a6:41:d5:de:
8f:9e:46:34:71:d6:c1:80:0f:a6:13:8e:c5:77:e7:
61:80:06:2d:74:b6:cc:6b:eb:20:b7:25:d5:39:9d:
2c:1a:05:6d:70:a4:59:4c:26:6f:38:05:cd:d9:f5:
9e:7b:03:84:cc:5e:0e:96:70:6e:c1:88:ca:62:21:
f7:20:68:da:cc:d3:cb:98:34:7e:94:d9:15:99:7c:
c3:6b:15:02:5c:14:91:df:a5:c5:5f:b2:c2:8f:a8:
c7:84:a5:14:d0:5a:7d:ab:b0:68:a6:cf:fa:eb:bb:
91:f2:33:b7:d7:f1:6a:92:b3:12:a4:ac:4c:a5:df:
68:67:b3:c8:ba:ba:c5:47:85:e6:06:eb:b7:e4:0d:
90:9f:98:30:c3:12:cc:f1:9a:47:c3:54:17:2b:0a:
b3:dc:fe:db:18:c9:f4:e1:33:1c:24:d8:2a:ad:c1:
70:e0:bd:b5:bb:cc:f8:d4:92:2f:5d:43:69:01:75:
78:c2:fe:bf:29:d3:e4:5e:fd:be:fc:b1:65:48:3d:
54:52:df:42:b0:c4:1f:cf:bc:fd:40:55:66:e9:d0:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:B3:19:A4:38:61:2E:DE:D3:78:BA:7F:55:5E:CE:82:CF:CD:03
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:78:74:af:93:83:56:30:bd:7b:df:99:cd:97:f2:c4:1c:d8:
ad:5c:08:9d:20:36:ca:52:b4:61:bd:f2:34:1b:de:dd:e6:c1:
be:42:9c:0a:52:18:a0:bb:53:47:eb:a6:3e:f3:bb:a3:79:be:
01:a1:ea:06:bb:a1:c2:60:9a:d7:88:05:af:32:3c:69:38:66:
7a:8a:8b:c9:7b:4e:9d:3e:e8:85:99:99:ad:be:fb:7c:81:02:
09:49:02:76:cb:7c:95:30:00:d0:b9:cf:3d:56:c8:9e:65:9a:
2c:21:8e:60:da:58:83:24:7f:df:01:15:62:82:3e:88:64:bc:
83:5d:c3:3a:7b:68:ac:be:25:56:f2:ac:69:89:84:e7:05:c3:
77:12:b5:ef:89:1c:af:e4:5a:4e:27:41:a4:60:13:63:49:33:
b1:49:0c:0d:ae:f2:9a:51:6f:14:ce:51:e1:17:49:db:35:e4:
09:e1:26:18:13:48:70:e6:59:4b:15:4c:e8:f7:33:f4:3b:1e:
e6:eb:8b:e0:e4:7c:06:ea:77:1e:f0:36:dd:fc:f6:ab:8b:5c:
8f:6c:b4:73:65:2b:48:9e:50:d5:ba:8c:d8:5b:2b:28:27:54:
41:60:ef:3c:67:32:d7:f5:0a:f5:ca:7b:94:83:c6:6b:eb:5f:
c2:ad:a4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:34 2026 by rpki-client