Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: EBi3a2vBOOzmaBmxprEZ0fGDSRv31AeIqcisa86/nko=
Subject key identifier: A0:38:94:D0:35:B3:1B:0D:C8:12:CC:51:B8:C6:FF:23:DA:65:01:A4
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 019D996316FFB9D7ACA77255F6C2FCC81500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:40 +0000
Manifest this update: Fri 17 Apr 2026 03:01:40 +0000
Manifest next update: Sat 18 Apr 2026 03:01:40 +0000
Files and hashes: 1: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: NzLGB9R2RwbVjsp3n422Fx6By6LxGWB5+VaEkgUw8sw=)
2: Q6JObLBeLp3wtiYaWIJ3qZQTM-I.roa (hash: 8OMeNdCrOVu7DLm13oZufQc3RGDGngByCEF598K46Yw=)
3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:16:ff:b9:d7:ac:a7:72:55:f6:c2:fc:c8:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Apr 17 03:01:40 2026 GMT
Not After : Apr 18 03:01:40 2026 GMT
Subject: CN=a03894d035b31b0dc812cc51b8c6ff23da6501a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:fa:88:91:b3:fa:3b:15:6b:20:ff:89:a9:
87:04:78:de:35:e4:5a:54:d1:d9:67:fd:e5:fb:c7:
5b:33:35:49:58:95:cc:68:03:23:54:37:1d:14:ee:
0e:c2:78:8d:28:df:df:3d:7f:6f:e5:9f:6c:92:2a:
cc:65:97:49:d8:97:96:22:7b:9e:51:60:0b:1f:5b:
58:c9:5f:d0:f5:b5:e2:95:68:ee:4b:ca:d3:ed:1c:
a3:45:5f:e6:07:e1:7d:b0:ba:5e:93:6b:47:ec:97:
58:72:ba:1a:50:68:90:58:2e:f1:92:5a:f4:f4:ec:
03:37:19:82:6c:5c:5c:55:c8:ed:a7:5e:c9:d3:3f:
99:13:2d:f6:28:0e:d8:c6:7e:18:b1:f4:08:89:7b:
b2:ae:d8:a6:8d:6f:16:0b:c4:7d:f5:50:4a:8b:f3:
d1:8d:b5:6b:dc:06:5b:15:ec:a1:7e:e2:e6:41:5d:
c8:e4:77:5d:4b:c9:7f:61:a9:5f:06:6e:8e:0f:1d:
b9:05:f4:5a:50:7f:99:9e:a8:27:61:00:8d:06:c5:
95:81:9c:b9:fb:fe:d9:73:b7:82:40:dc:10:54:40:
6d:8e:92:a9:1c:82:f7:47:4e:9c:08:ce:89:51:0f:
37:d4:c2:12:2e:45:8d:fb:63:a1:99:18:d1:40:33:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:38:94:D0:35:B3:1B:0D:C8:12:CC:51:B8:C6:FF:23:DA:65:01:A4
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:dc:dc:01:3f:41:c6:d3:0e:d9:77:4e:79:70:3d:7e:55:bd:
3d:8e:7f:b4:c7:9a:20:b2:ad:83:86:2f:d8:35:66:86:05:f3:
87:04:7b:b3:a7:d1:f2:a8:8c:ed:f5:cd:e4:a1:60:db:92:de:
77:d7:51:51:1a:86:e5:a4:dc:63:ad:71:32:9d:eb:25:24:d5:
48:3a:fe:15:a9:cf:70:9b:ff:73:3d:5c:9b:8f:b3:d7:51:73:
77:d8:db:95:20:9b:7a:46:34:cb:6a:63:cf:df:ed:57:44:41:
35:dd:37:46:dc:04:0e:2f:19:8a:70:c4:03:18:99:9e:32:eb:
3b:05:9b:49:79:f2:e7:43:06:c8:82:27:20:54:02:62:ee:6e:
98:55:ff:38:2d:39:0b:fd:86:b7:25:ff:aa:e3:ac:47:17:d3:
03:13:0d:84:32:64:6a:40:d5:d8:b2:0c:41:f8:84:84:7e:6b:
cc:92:d2:af:c1:3b:ac:46:e8:95:f9:1b:ac:46:ce:68:1f:1f:
3b:38:a5:1e:04:58:45:e6:7d:bb:19:f9:ab:b8:3b:a9:6f:d7:
8a:2a:ee:58:e9:fb:eb:79:48:3e:cb:07:07:11:0b:5b:b0:bf:
88:a6:66:1d:bb:76:10:ea:3e:75:5f:71:50:47:b2:5b:a0:28:
db:38:f0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:36 2026 by rpki-client