Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
File: osiREA5QD7XGTzDxYD_lRdq0kBY.mft (raw, json)
Hash identifier: GxIdr/3RQK6vcbJLmW2cNpG9+o+aq6P7qf25NSCFXK4=
Subject key identifier: 61:1D:40:C8:C7:DD:19:01:89:E4:F4:04:68:0D:93:29:F8:1E:70:F5
Authority key identifier: A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
Certificate issuer: /CN=a2c891100e500fb5c64f30f1603fe545dab49016
Certificate serial: 019D9AABA89D8769AD7C1B778F9668E75CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
Manifest number: 0CB4
Signing time: Fri 17 Apr 2026 09:00:34 +0000
Manifest this update: Fri 17 Apr 2026 09:00:34 +0000
Manifest next update: Sat 18 Apr 2026 09:00:34 +0000
Files and hashes: 1: LrvP2Z0cjFRqmLYiApVT3jJ98UU.roa (hash: 5YQBrYuaiVtBkE+i+x1V3fP75u5I8cFtQ+HuRNndJN4=)
2: osiREA5QD7XGTzDxYD_lRdq0kBY.crl (hash: t5XTezbR3WXnUDts07xg93VDYys3OcMqhKEoUqiK/e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:a8:9d:87:69:ad:7c:1b:77:8f:96:68:e7:5c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c891100e500fb5c64f30f1603fe545dab49016
Validity
Not Before: Apr 17 09:00:34 2026 GMT
Not After : Apr 18 09:00:34 2026 GMT
Subject: CN=611d40c8c7dd190189e4f404680d9329f81e70f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:18:f6:4c:c8:31:13:61:37:80:d1:f6:4b:
e9:a4:87:39:11:cf:a5:fd:18:d4:8c:b0:c9:f8:c8:
2b:b0:29:ca:fb:9f:41:7e:cf:a6:72:52:5b:b3:0a:
7d:5b:05:35:ba:b3:1d:e7:88:94:48:52:a4:11:71:
12:e0:a9:06:75:d4:6f:30:ca:1a:e6:1b:f0:bc:0a:
51:f8:b8:60:28:a4:90:32:5c:5c:ad:02:e4:a2:4e:
de:d3:86:6f:fa:29:88:cd:4e:35:15:54:ed:4d:07:
0d:74:3d:c0:d6:32:f9:ea:dc:4e:29:80:45:46:a5:
14:5d:fb:9c:db:79:cd:ec:12:14:20:a7:f5:eb:db:
c2:c6:aa:e7:e3:d8:8f:f8:81:cd:62:a9:6b:2d:53:
aa:9e:98:11:69:d7:2b:30:69:ca:65:1d:8f:84:2a:
0a:4d:3b:18:7a:e9:33:b8:24:07:62:e0:f4:55:05:
b3:fe:4c:35:57:10:cf:c2:5e:d5:48:a6:1b:44:04:
5d:9d:7d:37:15:57:f7:3b:19:06:fa:df:8e:b1:81:
f5:db:5e:92:28:1e:df:5d:60:d9:2d:43:f8:49:41:
c1:46:75:1c:94:e3:05:67:a0:97:35:5c:3e:d6:25:
d7:b5:eb:b1:25:8f:1e:8e:54:f8:02:cb:9e:d6:b4:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:40:C8:C7:DD:19:01:89:E4:F4:04:68:0D:93:29:F8:1E:70:F5
X509v3 Authority Key Identifier:
keyid:A2:C8:91:10:0E:50:0F:B5:C6:4F:30:F1:60:3F:E5:45:DA:B4:90:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osiREA5QD7XGTzDxYD_lRdq0kBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/28b56c-6aac-48d7-aba2-8ca0c90f577e/1/osiREA5QD7XGTzDxYD_lRdq0kBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:00:b0:75:a7:a4:8c:c5:20:d4:3d:53:98:ea:54:f1:c4:0b:
b7:a1:5b:8d:15:2f:82:6b:74:7e:c0:72:34:f1:55:b9:5b:1a:
f2:a7:fd:ed:25:c6:67:f5:62:92:90:76:ab:25:1f:fd:49:99:
24:fc:59:d0:36:df:d8:92:a1:07:aa:ec:f5:d9:00:1f:5e:a8:
a4:15:81:3d:da:9a:ac:fb:28:fa:92:6d:43:27:3f:17:c4:28:
0c:ea:6c:97:a3:ed:48:58:ca:e7:a3:79:db:3b:13:1d:67:b3:
4b:59:58:d0:44:d6:60:62:ad:19:08:7c:58:06:6c:f9:7d:f3:
72:4b:b4:8a:c3:75:5e:d1:55:24:ec:68:fc:54:33:d1:ef:42:
7f:8f:6c:c9:2b:27:4e:a9:a7:41:5d:07:39:da:8e:7d:42:c2:
38:76:cb:c0:94:76:fd:be:10:5c:19:78:f7:75:c1:1d:18:d2:
8f:6b:51:28:54:ce:29:f1:0d:07:ca:ad:aa:34:f6:d2:72:85:
6f:db:e2:f3:50:ee:5e:d2:fb:5c:83:b3:a9:8e:63:92:8a:d3:
10:8b:17:b2:02:eb:77:06:cb:5a:04:38:5d:aa:02:75:7d:2c:
c6:ac:8e:99:89:09:a7:60:ed:45:48:70:7d:d8:43:b7:3d:d8:
7e:bd:32:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:20 2026 by rpki-client