Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: 8yA0nbC1QNgxkPOf5IB03YIJoJNauSMrrb0EfFp9RNk=
Subject key identifier: 57:06:DB:D0:5A:5E:06:93:F9:E6:B4:F2:78:53:26:28:8E:E6:A5:0B
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 01A115983E51601668C64163B3FC02B1C36C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 1A1F
Signing time: Wed 07 Oct 2026 09:01:01 +0000
Manifest this update: Wed 07 Oct 2026 09:01:01 +0000
Manifest next update: Thu 08 Oct 2026 09:01:01 +0000
Files and hashes: 1: 5oWhiFwGFcfXZHnE2d1SP87QB8o.roa (hash: PLgcqNiJpgmQue599/AjXnaE7M6VZQryMqw5mChZ3GI=)
2: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: mc9r2f0TGS8nRMB4Yaq4ElpH4cdpPmqIHjuvZxBmjhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:98:3e:51:60:16:68:c6:41:63:b3:fc:02:b1:c3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Oct 7 09:01:01 2026 GMT
Not After : Oct 8 09:01:01 2026 GMT
Subject: CN=5706dbd05a5e0693f9e6b4f2785326288ee6a50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:0c:a3:4d:d2:1a:d3:bf:82:0f:91:99:32:
95:3b:31:86:71:18:65:d4:d4:df:59:fc:70:b0:c7:
3a:8c:c2:07:18:36:86:15:51:df:8a:b0:89:4a:27:
44:cc:fe:e4:24:0d:c0:5f:ee:98:c3:92:6b:c3:29:
c7:a9:f0:84:05:fc:a9:33:77:4a:15:44:b0:a1:79:
d4:6a:f7:a8:15:00:82:43:a6:6b:8a:7d:ad:84:86:
03:e3:23:f0:ff:5a:2c:a0:af:6a:c1:c7:61:75:4b:
82:71:25:57:32:7d:5e:cb:35:6f:a1:fc:7c:b2:16:
2c:81:25:fc:e4:08:d9:ff:56:ef:02:56:34:8c:5f:
9c:ce:10:c1:14:c7:04:fb:7a:68:29:5e:37:87:02:
28:30:ee:47:28:57:66:a0:da:ed:cf:b8:be:a3:c3:
9f:ee:9c:be:35:33:9f:3a:6b:67:97:51:b2:fb:57:
55:77:8b:42:44:04:e1:cd:96:6a:89:ea:01:f0:0d:
83:f0:f1:13:a5:3d:d7:5b:d2:f5:07:3f:e3:7d:59:
95:fa:9c:39:e9:9b:e2:a6:36:d9:74:17:ba:1b:59:
56:96:d7:aa:a1:8f:d1:23:8b:f9:a9:36:1e:93:40:
0e:85:02:57:af:5d:05:52:8a:0a:22:ba:a2:39:f8:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:06:DB:D0:5A:5E:06:93:F9:E6:B4:F2:78:53:26:28:8E:E6:A5:0B
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:36:ec:cc:ce:c7:a6:2f:6b:17:73:12:04:03:b6:be:85:c3:
84:8e:cb:4f:db:89:d9:79:c3:6a:01:3e:d9:4d:46:84:f4:30:
28:65:39:d7:5e:c4:2c:33:d6:4d:00:dc:c7:07:a8:9b:f1:b0:
63:dc:eb:b8:bb:50:bf:3b:1f:aa:59:f7:3d:50:e1:2b:47:90:
e0:e3:19:42:32:71:55:a9:cf:92:7a:91:05:20:e6:27:6a:35:
30:f8:85:2c:d2:26:dd:bb:3d:02:fb:ce:b4:4d:db:50:06:80:
37:2d:58:6a:63:bb:d7:56:42:e7:ec:cd:02:3d:d4:67:68:ac:
d4:6d:ae:34:0e:e4:2b:4c:e3:c8:79:d5:0e:76:01:4d:38:01:
d9:88:0f:0d:0e:7e:d2:d0:33:19:51:a9:78:73:39:84:cc:44:
3a:37:dd:1f:f7:2b:14:86:50:49:b0:83:59:22:f9:35:34:f5:
29:fc:ec:ae:52:6f:a4:86:e5:4b:f3:11:ec:f4:2d:1c:b1:68:
62:28:c1:37:06:95:e4:96:a0:03:3b:d7:eb:93:d8:07:63:c9:
20:42:39:fc:2b:7d:58:40:19:57:83:b3:08:2a:a8:1d:20:37:
9a:d8:21:40:03:9a:b4:68:08:f1:6a:16:4b:72:39:56:df:37:
27:00:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:11:39 2026 by rpki-client