Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: mopcAWgJnHDrNn32pCw42qfZm9fqDnJBfTEksOrf+zE=
Subject key identifier: 86:00:28:BE:52:06:C0:4F:81:1E:C1:E3:29:69:3D:34:63:32:08:D6
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019E1E6CA7FBD9AB3E22ACC42E40CF47973D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 09EC
Signing time: Tue 12 May 2026 23:01:37 +0000
Manifest this update: Tue 12 May 2026 23:01:37 +0000
Manifest next update: Wed 13 May 2026 23:01:37 +0000
Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: 0yVJ8D2T+Ec+iaCoE33lUF4EYTQj+uNzZuFHdJZfBg8=)
2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=)
3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:a7:fb:d9:ab:3e:22:ac:c4:2e:40:cf:47:97:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: May 12 23:01:37 2026 GMT
Not After : May 13 23:01:37 2026 GMT
Subject: CN=860028be5206c04f811ec1e329693d34633208d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:01:80:15:e3:f0:e2:18:89:92:52:8b:29:
54:0c:60:b2:29:f1:07:42:22:64:50:ab:d8:ea:0c:
e2:88:de:7c:e9:bb:20:db:fe:57:8d:d6:0d:46:71:
63:fd:cc:b0:69:05:ee:e6:5f:fd:7f:5b:47:6e:49:
59:ce:32:84:e9:c5:53:eb:21:84:2b:7e:14:8c:1a:
4f:bd:19:04:83:3d:1b:1c:42:4b:88:4e:fd:d4:d8:
0d:14:84:b5:2e:a7:65:25:db:c0:2f:7e:e2:ea:7c:
cd:f0:b1:2c:63:14:69:3f:61:53:32:9d:e9:40:7b:
ef:ed:4e:1b:4d:67:89:1d:53:e9:67:4f:ea:7e:b2:
a6:e3:7a:03:5e:2e:04:f7:c2:af:8e:43:63:4c:05:
30:9b:92:9a:47:49:1d:c9:95:80:c6:44:87:f7:00:
8e:63:5b:64:eb:a4:e6:35:64:51:31:3d:d9:23:2c:
5e:e7:32:f2:b9:f8:50:54:3a:a8:15:21:83:43:15:
5b:3c:8d:78:56:28:09:55:2d:cd:dd:59:30:8e:59:
61:f6:59:8b:d8:9c:06:1c:85:a6:45:a1:bd:8e:c2:
4c:11:86:30:4d:33:ae:fb:5f:62:a7:2f:0a:8a:d3:
4e:4f:ef:b4:97:68:a5:eb:49:bc:e6:a4:3b:4f:19:
7a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:28:BE:52:06:C0:4F:81:1E:C1:E3:29:69:3D:34:63:32:08:D6
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:64:64:76:b9:d1:2d:32:06:77:b3:ce:a1:08:48:e8:d0:fe:
1d:d9:36:05:d0:d9:af:8b:cd:52:62:df:36:49:f5:65:e7:2e:
49:87:1c:f5:7f:68:37:c3:73:2c:67:9c:90:df:eb:f8:e9:52:
27:5a:9c:2a:51:43:bc:86:2f:1d:c7:52:7b:f7:dd:f5:24:f2:
78:00:c6:10:23:bc:43:76:06:19:f6:db:3d:b7:40:7f:7f:b0:
bd:ee:49:b2:ab:74:d5:4b:83:dd:9d:a7:0e:06:6d:64:6e:8e:
96:13:46:b6:8b:84:fc:48:50:7e:a0:d6:ba:ae:1e:e2:86:eb:
62:0c:4b:00:fd:f5:1b:74:71:87:87:75:b2:e8:37:5f:2e:c7:
aa:04:ef:e7:d4:dd:fa:4b:92:54:f3:7e:5c:ab:db:ad:a0:26:
30:01:31:56:f0:61:b6:f9:59:ba:5a:79:03:89:7b:a5:85:99:
67:d4:de:6b:5b:55:01:27:aa:91:ab:6f:b2:97:d3:f5:c4:06:
a3:79:74:97:a6:36:58:8d:b6:c7:76:51:45:55:79:2f:88:0d:
ed:47:3d:84:03:08:4c:16:af:37:5a:86:44:ae:39:09:78:39:
d8:a4:62:75:d6:10:db:6a:b9:0a:3f:af:36:42:8b:2b:8e:80:
29:ea:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:49 2026 by rpki-client