Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: mOl8XiqEHMffU31Pd9xk2dsxZaGvImIaiGMsmCGUowQ=
Subject key identifier: A2:AF:4C:C0:C1:A3:23:0E:4F:E4:65:60:57:57:40:6D:88:B9:21:71
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 019CA9EB86C1945BB7DE4DFFAEBD95852965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 15:01:50 +0000
Manifest this update: Sun 01 Mar 2026 15:01:50 +0000
Manifest next update: Mon 02 Mar 2026 15:01:50 +0000
Files and hashes: 1: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: 6B+wIg3uA6T8yEOW6D8q46ASNmZbhUOjESsitI7hm7Q=)
2: Q6JObLBeLp3wtiYaWIJ3qZQTM-I.roa (hash: 8OMeNdCrOVu7DLm13oZufQc3RGDGngByCEF598K46Yw=)
3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:86:c1:94:5b:b7:de:4d:ff:ae:bd:95:85:29:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Mar 1 15:01:50 2026 GMT
Not After : Mar 2 15:01:50 2026 GMT
Subject: CN=a2af4cc0c1a3230e4fe465605757406d88b92171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:31:e8:18:89:14:07:67:79:44:5a:65:32:
c8:84:a4:51:d1:4c:52:fd:85:88:ea:7f:ab:3f:48:
2b:89:5a:9c:23:6c:bc:e9:9c:08:c2:ab:f8:2b:3c:
d7:48:09:95:a1:36:81:cf:15:c1:ca:30:0a:07:26:
a4:19:5f:5c:c7:77:c7:64:53:76:8f:01:02:fc:e4:
77:de:82:0f:05:35:cb:40:4a:f7:a0:4a:9e:3b:66:
a0:05:44:bd:60:c7:dd:f7:00:78:83:2f:8d:21:18:
55:aa:88:7f:3b:96:ad:ee:8b:b0:ae:0d:ae:05:f2:
6e:fe:13:97:d2:d1:b9:b6:e7:60:ec:69:38:f3:df:
bc:1c:d6:ad:fe:5a:df:64:b8:89:85:2c:fe:e7:c1:
ac:06:98:56:e4:e9:c4:29:05:d7:d0:d8:04:d9:8f:
f3:17:db:81:86:2d:75:99:f6:03:86:2c:ab:43:73:
65:15:b8:06:f0:24:a7:86:af:c9:fa:c7:62:43:0e:
50:81:27:b9:ba:46:3d:ed:da:d0:24:a0:43:f8:ce:
e6:08:4c:a8:50:96:4d:d4:18:dd:f1:2e:39:bd:21:
c3:83:8a:ad:2b:a6:b3:98:dc:2f:11:0a:70:d8:ef:
d0:49:2c:ad:6f:5b:7f:56:06:97:df:cd:81:71:3c:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AF:4C:C0:C1:A3:23:0E:4F:E4:65:60:57:57:40:6D:88:B9:21:71
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8a:14:88:fe:af:1d:24:3f:46:62:53:92:11:49:21:ff:54:
18:77:14:15:c5:59:82:bf:d0:63:86:3f:73:4f:6f:2e:f6:0f:
d1:eb:dc:82:d7:0d:df:be:5e:c5:7b:f3:2f:b7:02:cc:0c:a9:
d6:a0:bc:01:1f:3d:4d:bf:12:b4:44:bc:83:45:d4:1b:89:04:
3a:fe:c4:dd:70:72:9d:1c:f7:60:76:d6:cd:54:05:ad:08:e8:
bb:25:0d:5a:10:b9:fb:23:b1:a0:a9:17:4e:03:01:5f:c6:53:
a9:a5:34:f9:18:f1:0f:e5:b7:f7:db:a2:e1:28:8d:46:6b:38:
95:f5:ea:a1:39:8a:51:c2:b8:68:80:e2:95:10:34:1c:31:6e:
93:f5:85:88:09:d0:26:85:45:95:f2:7d:8d:e5:6b:25:f1:b8:
75:1e:4f:03:1d:a9:39:a0:ea:e1:38:cf:08:26:e7:fc:3b:77:
ab:4b:0e:2d:e7:94:6d:19:9c:eb:bb:df:fe:11:a7:29:f9:3e:
b2:b0:b3:e5:a6:9d:f9:1f:9b:74:76:79:d9:c9:f0:53:92:d2:
37:d1:47:b3:4f:88:f4:1a:64:21:dc:e6:30:6a:eb:96:89:1d:
8b:9f:54:a1:41:74:40:71:2d:38:15:98:1c:22:02:e6:89:38:
78:a7:d6:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp64bBlFu33k3/rr2VhSllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzc4ZjMzZThlMTE4NzMyNzY2N2ZhOTRmZDc0NDZiOGQ5
MWU1YjQwHhcNMjYwMzAxMTUwMTUwWhcNMjYwMzAyMTUwMTUwWjAzMTEwLwYDVQQD
EyhhMmFmNGNjMGMxYTMyMzBlNGZlNDY1NjA1NzU3NDA2ZDg4YjkyMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkYx6BiJFAdneURaZTLIhKRR0UxS
/YWI6n+rP0griVqcI2y86ZwIwqv4KzzXSAmVoTaBzxXByjAKByakGV9cx3fHZFN2
jwEC/OR33oIPBTXLQEr3oEqeO2agBUS9YMfd9wB4gy+NIRhVqoh/O5at7ouwrg2u
BfJu/hOX0tG5tudg7Gk489+8HNat/lrfZLiJhSz+58GsBphW5OnEKQXX0NgE2Y/z
F9uBhi11mfYDhiyrQ3NlFbgG8CSnhq/J+sdiQw5QgSe5ukY97drQJKBD+M7mCEyo
UJZN1Bjd8S45vSHDg4qtK6azmNwvEQpw2O/QSSytb1t/VgaX382BcTwK2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKvTMDBoyMOT+RlYFdXQG2IuSFxMB8GA1UdIwQY
MBaAFDrHjzPo4RhzJ2Z/qU/XRGuNkeW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEt
ZGMwMWY0YjRiYWU0LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZWRhYWYtMzMyNy00M2VkLTkwYjEtZGMwMWY0YjRiYWU0
LzEvT3NlUE0tamhHSE1uWm4tcFQ5ZEVhNDJSNWJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYoUiP6v
HSQ/RmJTkhFJIf9UGHcUFcVZgr/QY4Y/c09vLvYP0evcgtcN375exXvzL7cCzAyp
1qC8AR89Tb8StES8g0XUG4kEOv7E3XBynRz3YHbWzVQFrQjouyUNWhC5+yOxoKkX
TgMBX8ZTqaU0+RjxD+W399ui4SiNRms4lfXqoTmKUcK4aIDilRA0HDFuk/WFiAnQ
JoVFlfJ9jeVrJfG4dR5PAx2pOaDq4TjPCCbn/Dt3q0sOLeeUbRmc67vf/hGnKfk+
srCz5aad+R+bdHZ52cnwU5LSN9FHs0+I9BpkIdzmMGrrlokdi59UoUF0QHEtOBWY
HCIC5ok4eKfWlQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:09:41 2026 by rpki-client