Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: 1R5mcRmsN9jN0sMrtG1fT1K6SlrRTZtx+hJ4UFisTUw=
Subject key identifier: F6:20:1A:F5:B0:2E:13:4B:A3:15:CC:75:67:AC:4D:1E:0A:29:7B:E5
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019D273AC0212DA03D71F5834C85E36E36C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 096C
Signing time: Wed 25 Mar 2026 23:00:54 +0000
Manifest this update: Wed 25 Mar 2026 23:00:54 +0000
Manifest next update: Thu 26 Mar 2026 23:00:54 +0000
Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: keyIMtk/VfgXGd0d5gM1AqXGUlx8eKnBhG0LaqxPQb4=)
2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=)
3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:c0:21:2d:a0:3d:71:f5:83:4c:85:e3:6e:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Mar 25 23:00:54 2026 GMT
Not After : Mar 26 23:00:54 2026 GMT
Subject: CN=f6201af5b02e134ba315cc7567ac4d1e0a297be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:93:dd:d0:77:d7:ee:06:7c:36:16:1c:0d:
84:11:66:bc:10:d3:0c:08:f1:8e:b6:f8:f3:26:61:
7d:49:ab:ac:3c:de:d7:4c:96:8f:f7:ea:d2:b3:9b:
b4:10:c2:b2:b3:b2:1f:5c:bf:2c:bf:b5:55:62:bc:
b3:eb:e5:e6:72:09:31:be:86:d7:e5:4e:93:1e:88:
f2:70:75:d8:f9:be:e6:32:31:fd:d0:b6:79:34:28:
76:2e:e6:60:1f:2a:d6:1c:5f:05:20:74:d8:9e:89:
62:0e:e5:ec:f7:86:ab:9d:c2:16:10:54:f1:05:33:
1b:99:4f:2b:c5:30:18:d0:6b:72:91:14:dd:fd:97:
40:50:f7:0e:00:3b:47:af:d6:7c:b5:af:57:1a:0a:
e2:89:01:09:66:cb:14:89:6f:96:74:b8:09:1b:10:
05:fc:43:1f:f7:9b:a3:0d:01:72:5e:09:d4:fe:16:
38:25:f6:a1:3e:35:42:33:23:86:1b:38:c3:10:6b:
37:96:6e:1c:4a:d6:3b:f6:f7:7b:34:f1:04:53:c4:
02:7d:9b:31:c5:9d:3d:d1:b4:88:32:31:0a:59:e6:
e8:92:03:c6:d0:79:ed:f8:c7:09:c4:76:8a:65:d4:
d6:8e:31:99:3e:d9:f5:45:ba:8b:02:bd:0f:8b:18:
53:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:1A:F5:B0:2E:13:4B:A3:15:CC:75:67:AC:4D:1E:0A:29:7B:E5
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fb:f5:41:c5:f2:3e:e5:f5:46:86:66:ef:b3:b0:61:59:40:
03:7f:92:4b:5a:49:ad:a4:70:80:23:9e:b1:bb:ce:dc:f8:21:
ba:08:c5:b9:e0:b4:04:e4:1c:9d:5d:ad:be:04:31:4c:9e:55:
9b:4c:19:7f:e1:47:6d:e0:9e:ac:64:e5:6b:cf:da:30:f8:ab:
01:5f:85:ac:75:94:27:a4:17:73:83:f1:77:a4:21:41:68:7e:
4b:d1:7f:b1:ce:13:21:56:40:2e:fa:17:50:39:50:d0:01:a9:
69:2c:40:56:13:81:29:a7:72:43:6e:40:d3:20:d5:0f:ca:cb:
aa:f7:91:83:e0:da:d0:19:df:c6:75:48:9d:8e:2b:2c:41:c2:
11:b7:3a:e6:20:0a:61:12:a9:d6:cd:00:7a:b0:00:49:bf:89:
6c:c2:69:07:ed:ee:86:b8:92:72:02:d3:36:18:61:b1:ca:44:
7c:bd:5e:c7:b2:5e:33:33:94:99:55:12:9a:f7:86:86:6d:f8:
66:27:95:d4:91:29:66:7d:d0:17:a8:de:f7:38:4a:df:c8:1a:
77:7e:a4:3e:94:90:c0:22:97:05:b4:1f:21:a1:32:3d:0a:77:
08:f4:43:74:24:52:36:03:8f:ea:4e:23:f1:d6:46:6b:4e:12:
2a:af:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:18 2026 by rpki-client