Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
File: OsePM-jhGHMnZn-pT9dEa42R5bQ.mft (raw, json)
Hash identifier: 4b+Pq3wXVXtYTVXF2dka2OvjggYxfMIXbuljArD5Rbs=
Subject key identifier: 5A:C1:81:67:6A:CB:5D:FA:AF:85:D4:BE:A1:70:74:BC:A7:3B:89:D9
Authority key identifier: 3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
Certificate issuer: /CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Certificate serial: 01A0DD97231EED2C5ED02444170AC0019E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 12:01:04 +0000
Manifest this update: Sat 26 Sep 2026 12:01:04 +0000
Manifest next update: Sun 27 Sep 2026 12:01:04 +0000
Files and hashes: 1: OsePM-jhGHMnZn-pT9dEa42R5bQ.crl (hash: AcNvPipMKysJiZoHByNkkfVW404p6fMBJPzRNtdvuCQ=)
2: Q6JObLBeLp3wtiYaWIJ3qZQTM-I.roa (hash: 8OMeNdCrOVu7DLm13oZufQc3RGDGngByCEF598K46Yw=)
3: fpgphkHAVC4EKTAhJS44DiaxsvY.roa (hash: 1INMFW9bHkSho9a0wRr4avShYtWQyAKWkemAY5V0/s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:23:1e:ed:2c:5e:d0:24:44:17:0a:c0:01:9e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac78f33e8e1187327667fa94fd7446b8d91e5b4
Validity
Not Before: Sep 26 12:01:04 2026 GMT
Not After : Sep 27 12:01:04 2026 GMT
Subject: CN=5ac181676acb5dfaaf85d4bea17074bca73b89d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:60:22:44:36:b3:b6:83:92:e7:7e:af:0f:
4b:08:dd:99:c7:4f:31:16:7e:15:21:73:72:00:c6:
fa:ce:aa:e1:02:8e:21:5c:39:58:2c:b8:39:4b:db:
61:69:b6:65:9c:7b:f3:12:fa:0d:a0:ae:d9:d8:17:
25:05:7d:48:78:86:cc:94:f1:7c:bc:77:07:94:a8:
dd:d2:2f:1f:86:f3:ab:95:02:b5:e7:a3:0b:4c:ba:
7d:6f:e2:5d:ad:fa:5f:0f:7e:be:33:ea:2d:88:c4:
96:5a:13:58:10:14:80:3e:ac:7d:67:e8:01:c5:3d:
68:08:b5:29:7c:aa:32:0b:87:61:a0:e5:8b:4c:9a:
ec:09:84:7d:27:af:65:95:f3:ee:9f:08:a3:63:79:
be:93:d8:14:ac:ad:fa:23:61:8f:36:74:08:03:25:
e0:aa:f7:2b:a2:41:af:d9:1a:52:42:01:f4:fa:f4:
b4:84:ba:0e:6e:0c:5c:10:09:d8:55:6f:3b:5a:49:
e5:4e:1e:74:1a:a3:6f:3c:59:6a:a1:25:79:a0:4c:
58:f5:b0:c7:57:3a:f4:97:4c:84:12:73:73:5c:de:
d9:5c:8a:1b:73:a0:4f:f0:cb:b1:42:66:20:72:b1:
4c:5a:65:79:66:84:03:b6:06:78:9a:73:83:3b:28:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:81:67:6A:CB:5D:FA:AF:85:D4:BE:A1:70:74:BC:A7:3B:89:D9
X509v3 Authority Key Identifier:
keyid:3A:C7:8F:33:E8:E1:18:73:27:66:7F:A9:4F:D7:44:6B:8D:91:E5:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsePM-jhGHMnZn-pT9dEa42R5bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5edaaf-3327-43ed-90b1-dc01f4b4bae4/1/OsePM-jhGHMnZn-pT9dEa42R5bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7e:16:db:a8:7b:7e:64:b1:09:89:4d:a3:55:b1:80:1b:6d:
20:9b:46:77:cf:6f:b4:e8:1e:b8:e3:fc:13:50:ee:c7:98:0e:
99:1a:c2:84:76:64:1e:7b:4e:67:68:bc:ff:a8:51:09:f5:dd:
3c:1c:9a:ae:f9:8e:48:1f:14:dc:e8:d3:c6:e1:f1:04:c6:34:
dd:bc:b4:e5:c2:df:6b:1d:62:07:9e:f7:2a:f5:40:d3:05:4c:
72:2f:9e:d7:df:e6:96:e8:8c:e9:ef:38:5f:e5:14:02:f3:d8:
91:92:c2:2c:98:b9:f3:94:d8:e7:cb:64:c5:11:45:0a:6b:97:
06:66:80:b0:ee:b0:1b:dd:4c:83:49:61:9b:28:3d:98:be:a2:
c1:0d:87:58:6d:08:c0:22:2a:24:4f:05:f1:30:28:1d:22:99:
47:67:6a:32:88:ec:e4:57:a8:9c:98:52:aa:ff:9a:94:c6:8b:
9e:ed:f9:26:42:65:0f:ae:a8:c5:01:8a:0c:1c:73:72:06:6a:
f7:e3:44:e4:da:e9:8b:bb:c0:a0:a2:5d:1a:de:f1:3c:61:b4:
50:9b:4b:ed:b4:68:8c:8d:44:c5:87:fa:6f:d2:93:3d:54:d3:
d3:ee:02:ed:4f:2d:19:13:2f:59:fa:94:88:c0:3e:80:8b:46:
c8:7a:3a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:08:36 2026 by rpki-client