Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: WMF/tDfuLGafykSD7BVd3MeIIXhppx/9xlSRVmVoO4c=
Subject key identifier: 55:8D:2D:EB:C9:F8:A9:DC:2B:19:5A:65:E9:C8:9C:A9:71:14:55:BD
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019F94A447C18BF982EF48F08A52CF4B5547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 0323
Signing time: Fri 24 Jul 2026 15:00:21 +0000
Manifest this update: Fri 24 Jul 2026 15:00:21 +0000
Manifest next update: Sat 25 Jul 2026 15:00:21 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: 7MK3ejMSs2p3FA7FrBWNaLzqu/aDqiNEmzYvwbN2F6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:47:c1:8b:f9:82:ef:48:f0:8a:52:cf:4b:55:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Jul 24 15:00:21 2026 GMT
Not After : Jul 25 15:00:21 2026 GMT
Subject: CN=558d2debc9f8a9dc2b195a65e9c89ca9711455bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:fc:6e:50:b3:40:99:f1:c4:92:19:55:d1:
e9:02:0e:b4:8b:05:08:cf:37:a2:e5:41:3b:97:ba:
c8:40:c3:c0:93:cb:81:ba:3d:ad:ab:37:0e:f4:f2:
a2:2b:f8:bd:7a:c3:6d:45:ce:38:07:ad:63:8f:a4:
d7:24:d3:d7:4c:48:50:a1:c8:93:56:6d:90:7a:5f:
d5:ed:7d:17:36:99:f5:b4:44:80:89:62:c2:34:2a:
85:c3:04:d7:2e:8f:f3:71:3f:02:ad:39:70:93:80:
15:52:a7:6d:9b:54:2e:06:bd:e3:bc:f0:93:81:1e:
73:fa:61:b5:5b:fa:eb:32:97:b7:49:43:e9:81:f5:
39:37:1b:14:7b:ca:0c:ae:5a:59:fd:18:30:2f:15:
61:00:c3:5d:1d:5a:f9:32:ae:12:6a:40:f8:61:cf:
22:ba:93:b3:90:c5:d0:40:e4:cc:64:6b:84:cd:cb:
50:3c:4f:6f:3c:ac:74:9e:10:12:bc:9e:b8:b4:19:
2b:3a:b1:de:c5:20:9c:a8:7f:d2:50:d4:2b:85:ba:
31:14:45:de:08:51:b4:41:74:36:c2:ea:e2:56:dc:
53:ee:84:f0:57:ce:35:50:63:8d:b5:23:b7:af:ac:
00:bf:5f:6e:07:ae:8e:4d:90:a1:28:98:42:2f:8f:
6a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8D:2D:EB:C9:F8:A9:DC:2B:19:5A:65:E9:C8:9C:A9:71:14:55:BD
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8d:4c:d2:8f:45:9b:22:d6:65:a6:33:7f:dd:a3:48:87:86:
ad:ba:6e:bb:b3:bb:55:1f:8e:72:26:ae:e7:66:59:32:54:dc:
9c:e6:2c:73:29:4e:61:11:32:22:3e:f6:ea:9c:b3:53:77:1e:
9b:00:03:9c:70:7c:c5:70:1c:99:93:60:8e:4b:47:5e:70:4e:
df:32:24:7c:46:33:7a:ea:0b:a5:09:de:38:43:69:09:30:18:
91:5a:71:e0:9c:de:80:0d:b7:8a:f5:49:5d:e6:e9:09:9e:d0:
24:bf:b0:ee:5b:6d:c8:6b:89:38:66:55:6d:7f:5b:e6:fc:85:
6f:b6:06:b0:8a:a7:40:3c:68:ef:18:4c:9b:6e:b8:5e:f6:84:
c8:d0:60:94:b8:a4:26:d2:78:19:18:d8:e7:3a:3e:cd:2b:48:
93:f0:15:e3:19:d0:16:76:b0:45:cd:e1:df:85:b4:cb:39:3d:
9d:e1:45:89:1e:67:7b:fd:7b:14:22:54:17:72:08:9a:61:67:
ee:09:9e:2a:47:91:c9:a1:a7:65:70:a7:b0:57:47:46:e6:3f:
9f:5a:6f:29:2c:cc:5e:a1:d5:e6:23:4d:71:b7:ca:10:19:39:
04:2f:19:e2:ea:9a:52:67:88:4e:49:05:3c:d4:bb:48:83:85:
c7:de:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:09:54 2026 by rpki-client