Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: 1PGxbH8hnjMNBPKe86wA54QCANmssI9cUeJr3oeO+f4=
Subject key identifier: F5:59:C7:40:B6:17:EF:E1:F7:72:A4:22:12:80:8F:3A:56:9E:F8:DE
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 019EC3A59C30651B81D19EDC8D11B8A935B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 18EB
Signing time: Sun 14 Jun 2026 01:01:11 +0000
Manifest this update: Sun 14 Jun 2026 01:01:11 +0000
Manifest next update: Mon 15 Jun 2026 01:01:11 +0000
Files and hashes: 1: 68yVcmurp-TUH6bcEYJFrYBYlHA.roa (hash: GhcpVTrzvKoo7+y/CR4zZ8nvtr04ppIcAONYUpBet9U=)
2: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: n5XTJNToT17ZDrB5i1uNcOZN8Nqlj1IXOMRvKYROgVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:9c:30:65:1b:81:d1:9e:dc:8d:11:b8:a9:35:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Jun 14 01:01:11 2026 GMT
Not After : Jun 15 01:01:11 2026 GMT
Subject: CN=f559c740b617efe1f772a42212808f3a569ef8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:8a:54:5d:9b:57:69:75:09:56:eb:3b:54:
41:16:30:15:74:ac:9c:bc:89:61:65:b4:29:17:20:
f0:53:67:a4:9b:db:27:af:22:b2:e1:b8:b5:f3:ea:
45:90:37:bf:68:01:b3:98:cb:d8:00:9c:c4:5d:c4:
b2:a3:e0:43:cf:f2:1b:1b:5d:19:6d:bd:43:71:45:
de:13:20:d1:a3:db:e7:01:9d:fd:c8:fe:53:c7:57:
7b:63:14:5a:45:b4:10:e8:79:2c:ca:ca:7b:fe:61:
d0:33:e4:3f:48:1d:26:80:a0:67:00:e0:ff:2f:f2:
3c:4f:18:f3:b4:9b:bb:0e:1f:d0:b1:7b:9c:c2:6d:
07:75:58:09:21:05:a4:ce:5e:39:b6:7d:f7:c7:c0:
c8:d3:9e:05:ed:b5:01:99:3c:9b:db:9f:06:4a:12:
8f:bc:8c:45:2c:05:8b:ec:88:d5:cb:cb:f3:58:b5:
25:fa:6a:1e:a6:90:34:7b:ab:cc:cc:91:a1:ed:c2:
f4:f1:a2:97:42:89:08:d4:88:3d:3d:bf:ca:5c:0b:
ea:20:4a:af:3e:c6:79:68:af:4f:1b:1b:8c:6c:b3:
da:f9:2e:d5:87:f5:f9:ba:2f:22:13:19:6d:00:fa:
54:02:a0:ed:2d:ea:a4:be:ab:88:d4:a5:07:df:60:
de:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:C7:40:B6:17:EF:E1:F7:72:A4:22:12:80:8F:3A:56:9E:F8:DE
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bb:24:c0:09:69:9d:68:d7:a2:ff:ef:a1:ea:1a:cc:42:52:
12:88:5c:a8:a7:07:24:1f:86:f9:81:c0:96:ee:d4:22:d4:f3:
db:c5:e1:fb:2a:d6:c8:82:b9:f6:17:c8:5d:0e:fb:6b:ab:d0:
d4:bc:7a:a9:ca:78:10:f3:92:ea:41:e4:ce:8a:ac:20:83:0f:
71:7f:26:71:7f:4d:c9:f8:62:27:af:41:ef:a2:3d:d7:f5:5c:
79:1a:e5:d8:d3:48:fb:c6:56:74:10:5e:4c:5b:f2:ab:a8:cd:
47:05:d7:9b:55:bb:82:8f:de:98:da:5f:0b:9a:44:55:07:a9:
25:35:66:53:00:84:46:fb:a1:03:18:e0:1c:50:78:d8:6b:c3:
12:6c:18:ab:64:d6:51:42:6f:5a:22:95:9f:87:fa:75:f2:cd:
0a:c3:78:82:d0:b1:4a:7c:2a:78:f8:cf:f9:90:eb:15:d8:7e:
8d:9f:d1:48:e5:a5:72:f2:59:41:80:5c:5a:c4:94:cf:d6:17:
b6:d3:ee:f6:6e:b3:d3:8b:21:7a:ce:57:a9:2c:3b:b4:23:90:
8f:da:44:b5:52:10:91:aa:86:89:9c:80:c9:93:bc:38:07:1f:
21:77:69:ba:96:cc:8a:d8:6b:68:34:90:e8:0a:b4:e6:6c:36:
d5:7a:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:42:26 2026 by rpki-client