Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
File: OSR_d6OuCvcerAMlZEn10pLP_XQ.mft (raw, json)
Hash identifier: s1sMB2hsh7PzUf132mSYcTw+2e4WLABNY+n9baAoB+g=
Subject key identifier: A0:2B:BB:CC:76:84:1E:7B:8E:EB:EF:41:9F:F9:95:B4:DB:E2:A5:E9
Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74
Certificate serial: 019D3376392DACF19AD3B2D1EEE314DE233B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
Manifest number: 090A
Signing time: Sat 28 Mar 2026 08:01:18 +0000
Manifest this update: Sat 28 Mar 2026 08:01:18 +0000
Manifest next update: Sun 29 Mar 2026 08:01:18 +0000
Files and hashes: 1: 6QjQA0_fqdIryNhtjxIfR8HzBm8.roa (hash: BdP8cS5Jr2HaqgKC6lWTWfU5V8jliQKRlVrIRV0QG54=)
2: OSR_d6OuCvcerAMlZEn10pLP_XQ.crl (hash: zohvaqTIIZM7jS6Xmay+gYA+n430e2192WM6O/1opaA=)
3: egvTStfdqsgaJQHUlI4Gx-druNs.roa (hash: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg=)
4: tvvhjcNPTzu8EJ_egoIMXRYZBJ8.roa (hash: mDC6nKfTSpQ8MtQgVXXdC9nwrvajhFovh0zIQBw5Eko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:76:39:2d:ac:f1:9a:d3:b2:d1:ee:e3:14:de:23:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74
Validity
Not Before: Mar 28 08:01:18 2026 GMT
Not After : Mar 29 08:01:18 2026 GMT
Subject: CN=a02bbbcc76841e7b8eebef419ff995b4dbe2a5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:f0:08:0c:63:df:ea:a7:7d:47:00:ec:1f:
69:dc:d8:9b:87:c9:b5:5d:e2:76:ba:55:99:84:75:
55:58:0c:45:1b:2c:82:fa:82:b9:dd:a3:cd:7e:4a:
af:8c:68:cf:fe:ae:8a:3b:d9:13:1c:29:51:d2:69:
24:d0:90:3a:f8:ef:62:f4:79:81:a5:53:27:a0:e1:
96:3e:db:8a:88:65:67:d8:7f:1b:d8:73:d7:82:32:
06:1f:22:bf:f1:82:96:56:9f:47:a1:0c:7f:df:77:
f5:54:15:77:03:be:57:76:c1:b1:4a:43:d3:cc:4d:
22:fe:8b:44:61:81:8e:1f:e6:9f:23:7c:0d:5c:95:
47:ed:14:42:10:e5:c5:d3:8c:81:7e:c6:94:c4:5c:
bf:30:8f:c3:99:e0:3e:73:58:de:10:60:11:2f:0b:
d5:2b:fb:d9:2d:6a:a5:f6:99:84:c5:92:43:25:2a:
57:39:b8:d3:d4:2e:76:56:2d:74:f8:71:8e:73:25:
27:bb:9b:6b:47:dc:62:ac:70:4f:35:61:6a:43:41:
5f:27:90:9a:6a:bb:f5:8c:77:0e:04:3e:f1:5f:35:
15:0c:34:c3:83:bd:ad:a8:cb:d0:fc:ab:e2:16:59:
d4:23:ac:d5:d3:7a:0f:7d:f7:72:ce:78:34:18:b0:
71:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2B:BB:CC:76:84:1E:7B:8E:EB:EF:41:9F:F9:95:B4:DB:E2:A5:E9
X509v3 Authority Key Identifier:
keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:77:04:21:92:cb:e1:6b:c5:44:3a:75:9d:14:d1:07:a0:17:
7c:f0:47:b0:af:e3:31:71:b9:6a:69:df:13:84:c6:ac:29:c6:
ee:f9:ae:25:3c:e0:53:e5:4f:75:b3:84:57:45:17:d7:fc:e0:
fb:9d:65:c8:00:17:d8:a0:f7:45:c9:b8:c7:19:4e:78:37:d5:
95:ae:9b:b1:b8:77:3a:fc:f3:ba:5e:e5:14:d2:4a:d2:9c:48:
97:a4:a4:41:cd:c1:1c:65:25:35:46:71:89:74:4c:9b:84:87:
ce:3f:f8:24:4c:81:8f:37:3e:eb:2c:60:e9:3e:bd:26:fa:7c:
bc:13:81:cc:8c:e5:49:31:1a:5c:53:ec:62:e0:ab:ce:18:39:
cd:17:6c:fe:d2:aa:fd:12:1d:44:0d:90:0a:40:fa:d6:0b:34:
ec:e7:f4:85:3c:e6:12:b4:6a:d7:7a:2f:70:2a:4d:ba:d8:a9:
db:90:1b:47:18:ab:10:51:8b:cc:2c:c2:26:f4:80:fe:ed:7e:
13:41:41:10:f7:08:94:38:3f:9f:99:35:19:3f:78:8f:bf:81:
3f:05:bb:2f:b3:87:5b:a9:af:9d:02:09:dd:93:e8:ca:d4:25:
f2:aa:fa:90:f7:e5:31:8c:51:90:eb:cb:74:94:a1:2a:d8:71:
ff:0a:6a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:23:43 2026 by rpki-client