Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: iApDsbajmZwrVMlWE2NsZYxzw6psfoHN5tmakxNe+00=
Subject key identifier: 28:44:D4:98:E9:68:26:C7:67:E4:84:24:E4:01:ED:AB:1E:FE:C4:7F
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 01A13B92BB31FDD449FDA86EB18F18F4E42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0E95
Signing time: Wed 14 Oct 2026 18:00:34 +0000
Manifest this update: Wed 14 Oct 2026 18:00:34 +0000
Manifest next update: Thu 15 Oct 2026 18:00:34 +0000
Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: 5bySx/PlQAOfjZRM4ymhJ/xPnqtglLe3+jnC7fSmiIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:92:bb:31:fd:d4:49:fd:a8:6e:b1:8f:18:f4:e4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Oct 14 18:00:34 2026 GMT
Not After : Oct 15 18:00:34 2026 GMT
Subject: CN=2844d498e96826c767e48424e401edab1efec47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:02:0c:d4:72:8d:b0:11:c6:d7:15:b1:5a:
26:4a:bb:9a:bb:bc:9c:af:f2:e8:6d:ad:bc:0c:46:
6f:97:fa:36:05:8c:a0:ed:7e:1f:d2:34:a5:fc:03:
06:e0:ff:61:96:57:f0:b3:d0:ef:5d:91:e4:06:fa:
69:fa:ad:a5:6a:a4:77:76:46:ed:cd:19:0a:de:29:
13:7c:7b:52:19:89:55:7c:e4:33:4b:f0:41:e9:33:
7b:70:65:63:b2:0e:08:92:c9:d8:68:22:54:18:fa:
c7:69:d8:de:82:3a:41:2b:92:76:3e:45:24:9d:b5:
c7:44:58:07:e0:ba:e5:1a:8e:ff:9d:a3:ef:bc:8a:
2e:e7:22:9a:b9:4d:b8:d9:5e:5d:93:77:2b:e3:2f:
10:13:db:46:34:6b:fa:40:be:a0:dd:ca:fe:9a:98:
39:22:69:5c:34:11:36:e2:c8:f0:eb:95:39:40:de:
5d:c5:01:19:69:4c:d6:a9:3f:b4:22:c1:ff:c6:0d:
0f:0e:7c:70:f3:09:c3:5f:7d:0a:4f:3a:0d:84:43:
3a:b7:5e:b1:39:a8:b6:2e:cb:f1:c0:4a:fe:68:51:
12:71:4a:fa:f0:af:47:c2:37:c7:01:cb:54:71:7a:
bf:e3:a0:86:79:fb:f5:30:f8:2e:11:6a:59:6b:51:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:44:D4:98:E9:68:26:C7:67:E4:84:24:E4:01:ED:AB:1E:FE:C4:7F
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:d5:2a:a8:47:14:db:c5:07:bc:8c:80:9a:1e:d5:eb:fa:
6a:4c:8c:f3:e0:0e:89:49:87:d7:ab:0d:e3:30:25:41:88:72:
fd:df:41:05:69:85:82:b5:3f:4b:93:74:98:2c:18:57:0d:7b:
9e:02:1d:13:a5:bd:9b:76:15:f8:ae:d7:2c:2e:05:1d:62:e5:
79:80:32:b7:1c:31:28:6c:71:3c:1d:b6:8f:54:87:86:27:38:
74:b4:f2:67:cb:c8:fd:16:de:d0:1c:0a:c0:b0:d0:90:41:9e:
2a:7f:72:36:37:96:67:68:88:e2:d1:07:d6:4d:76:e7:45:f0:
98:12:b7:36:d0:9b:67:53:23:c4:4e:dd:8b:c1:2a:93:59:27:
b1:19:d8:ce:0a:ca:33:89:02:26:82:6c:7d:8c:6a:39:7a:5b:
ca:9f:6e:c5:76:7f:c3:87:7f:af:0f:df:07:3d:e3:54:8b:55:
52:ba:df:7a:ae:ae:2d:f1:5c:9c:5e:38:24:7c:5b:60:c9:53:
a5:bb:02:9f:00:7b:98:53:47:ed:89:92:b2:4b:62:7d:6b:bf:
f5:f6:23:01:b6:6f:87:c3:8b:c9:68:dd:56:0b:59:80:fc:69:
06:69:39:a9:ec:0c:7e:05:eb:1d:9f:75:39:05:34:d0:98:1a:
d0:2d:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:33:15 2026 by rpki-client