Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: A0ZwuF8BKqW5NjH2rguHFuh0BCE9BWMRR/GYM5uub5c=
Subject key identifier: DD:D3:C9:0B:CC:21:66:05:D1:EC:9C:5B:1E:7A:3A:C0:E9:04:E0:27
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019E1FECD37F9F551E5EC1A60450D03E16C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 0262
Signing time: Wed 13 May 2026 06:01:14 +0000
Manifest this update: Wed 13 May 2026 06:01:14 +0000
Manifest next update: Thu 14 May 2026 06:01:14 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: U4uZ+z7ddc4BerqA4S74e0pbNTlPbgDlOQ9zxK3EGxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:d3:7f:9f:55:1e:5e:c1:a6:04:50:d0:3e:16:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: May 13 06:01:14 2026 GMT
Not After : May 14 06:01:14 2026 GMT
Subject: CN=ddd3c90bcc216605d1ec9c5b1e7a3ac0e904e027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:4d:4b:fe:cf:b1:7c:a8:50:f4:7c:c6:6a:
df:5e:5b:0c:96:e3:39:3e:01:45:51:77:e0:2b:19:
44:4b:28:5a:d8:b1:60:8c:7e:91:fc:80:d5:75:9e:
59:40:84:b9:fc:90:14:8f:3a:74:ff:4d:a2:e2:16:
65:f6:61:ee:da:de:fe:6f:f7:e0:4a:e1:86:07:a6:
f9:1a:76:05:8b:6c:f6:9e:e6:fc:d8:81:c8:4c:d8:
4f:f8:62:e9:96:ec:b1:eb:40:10:b3:ac:4a:21:9f:
28:24:8e:5c:2c:dc:7f:6f:7f:c1:7c:41:97:2b:92:
2a:36:30:be:40:37:bd:11:c8:7d:3e:77:3f:f4:4c:
05:17:e5:11:5b:9c:c7:d8:89:3e:32:97:f8:16:45:
53:ce:b8:35:3f:ce:5a:14:7b:33:a1:f7:ab:1f:89:
2a:55:86:81:e1:a3:c4:32:e3:0c:63:dc:59:ea:31:
7e:e5:e6:d4:90:9b:e2:c6:66:a0:d6:fe:4a:d1:63:
3f:5a:1a:ab:e3:97:a1:ac:22:ee:e7:20:12:45:35:
b2:bf:3f:a7:14:58:4e:35:ef:a6:b0:9e:e5:a0:7c:
42:97:2f:15:0f:ba:d3:7c:f5:9e:b8:63:aa:53:7b:
c2:dd:90:b7:7a:53:74:1b:01:00:8d:32:77:93:bf:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D3:C9:0B:CC:21:66:05:D1:EC:9C:5B:1E:7A:3A:C0:E9:04:E0:27
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:82:f5:80:86:7c:ae:12:ab:c5:d5:6c:b5:8d:d8:de:33:4a:
cd:c2:f0:fc:dc:b6:61:49:8b:bf:47:f8:7f:78:4a:9e:d8:c4:
ef:fe:06:d6:36:43:94:8e:2a:57:b0:2b:1c:f8:f6:b6:47:cc:
50:4d:48:fd:ea:c6:d7:91:92:75:ed:80:86:dc:4b:9c:2f:fa:
b0:e2:ef:40:11:32:43:54:a8:ae:52:b9:1e:3d:93:e6:01:23:
60:68:aa:86:a9:6c:18:84:49:59:01:93:ca:f4:4f:cb:f3:ab:
a4:c6:d8:12:ad:f6:25:ef:81:d8:a1:3e:2a:18:6a:ef:63:0f:
c5:96:01:79:c6:68:90:d1:3d:2a:92:68:24:9c:f2:ba:d2:e0:
b8:c2:9b:d1:fb:00:43:5a:34:96:e1:2d:f5:64:aa:29:da:d7:
e3:71:0e:08:c4:e8:44:78:6b:fa:a4:0d:73:b1:40:33:59:6d:
ef:81:3b:b2:e3:9a:2f:ea:19:4a:50:bf:9a:a4:67:5d:ab:81:
e0:9f:a4:f3:ff:03:a9:ae:3a:8a:52:fd:04:7c:a3:eb:7d:db:
bf:2b:8c:46:f8:7e:2e:e0:d7:99:bc:2b:ee:ac:74:65:b7:92:
8e:39:50:36:32:95:7f:15:d1:10:65:9c:24:65:0a:78:92:19:
8a:de:f7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:50 2026 by rpki-client