Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: W+c55Ah502ihJsPBLvgs1BFtpTvXRSVE/RUSgOoOr8A=
Subject key identifier: FC:8E:B1:3C:A5:D0:7A:A8:99:B6:13:75:E1:A7:E1:E9:B6:42:39:FE
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 019FAC75AC10813D10DEF83B646FEE8D2758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 1964
Signing time: Wed 29 Jul 2026 06:00:20 +0000
Manifest this update: Wed 29 Jul 2026 06:00:20 +0000
Manifest next update: Thu 30 Jul 2026 06:00:20 +0000
Files and hashes: 1: 5oWhiFwGFcfXZHnE2d1SP87QB8o.roa (hash: PLgcqNiJpgmQue599/AjXnaE7M6VZQryMqw5mChZ3GI=)
2: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: mEbkuv7clCb7HFJEpFmyzU4C7byOi8jXbvbyA3ie19U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:ac:10:81:3d:10:de:f8:3b:64:6f:ee:8d:27:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Jul 29 06:00:20 2026 GMT
Not After : Jul 30 06:00:20 2026 GMT
Subject: CN=fc8eb13ca5d07aa899b61375e1a7e1e9b64239fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8c:d3:b7:fc:44:9d:4e:88:58:a2:cc:2b:cf:
de:ac:bd:cb:a9:17:15:19:54:f2:34:dd:e2:d7:dc:
b0:c0:cc:65:3a:4d:c3:84:3c:e7:4b:72:69:48:ec:
ce:0e:a4:f7:ae:e8:38:d0:85:7f:1f:bb:7c:8e:81:
19:ba:55:2e:54:9c:f2:89:ac:73:b2:ef:b1:62:e1:
a2:7a:48:93:df:13:02:ef:33:2a:3c:f1:18:e4:ce:
47:60:a2:24:4f:68:da:3f:77:a8:fd:61:1c:49:3e:
00:76:b1:7e:0f:7b:9e:e8:01:05:9a:73:8a:37:b9:
b0:16:19:28:e6:aa:58:84:f9:fd:75:8f:71:8d:c4:
7d:43:d3:ba:d3:1c:eb:08:56:f0:24:60:23:d5:83:
39:7b:fc:1c:01:e3:fa:06:db:8f:03:31:69:d1:29:
32:3e:cd:c6:b3:82:be:b6:ab:6b:3c:be:91:d3:54:
67:f1:3e:d0:53:84:aa:44:d0:50:c4:5a:55:10:71:
ea:0e:f6:82:31:63:a5:06:ab:a2:7b:ba:21:78:0a:
92:21:fb:0e:0f:92:90:30:d7:6d:6e:cf:8c:d3:ba:
4d:7d:46:64:8f:40:fd:60:89:b6:19:ff:91:5c:01:
c9:e1:2e:e2:b1:27:0c:08:18:88:77:25:fd:7c:ca:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:B1:3C:A5:D0:7A:A8:99:B6:13:75:E1:A7:E1:E9:B6:42:39:FE
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d2:38:6c:ef:1c:a0:1a:82:dd:2f:16:ac:40:4a:6e:63:6d:
70:e8:86:2f:01:72:31:de:3f:df:5c:1b:b1:4a:15:90:3b:df:
5a:31:e0:ca:ab:00:8d:c7:05:11:70:bc:16:7e:59:56:15:60:
4b:5e:00:80:dc:c8:13:cf:47:f9:fa:02:22:ab:aa:aa:4d:55:
b1:d7:b7:de:ff:d7:fc:47:ef:6a:28:aa:70:8b:25:31:89:e0:
31:8f:86:7a:98:c1:11:d0:16:18:f9:55:ec:94:f0:91:42:2a:
79:33:5b:c8:ea:5a:32:b0:2c:94:6c:d8:0c:85:5d:8c:28:9e:
21:9f:6f:e7:ce:2c:ac:aa:fc:49:60:c2:90:5e:9e:63:4f:56:
91:d6:08:5e:b7:5c:35:1b:28:03:9d:53:83:af:dc:f0:b4:00:
37:fa:30:8b:c9:c0:45:e2:91:93:c2:c9:ec:df:58:7a:ec:32:
06:8a:00:ae:9d:a4:c1:d6:d6:b0:a3:d6:7c:f3:fb:be:3a:4b:
99:fd:2d:ef:61:08:72:5a:b6:92:76:1c:14:76:fb:7e:99:bd:
d6:4b:99:15:c2:e1:b2:fe:49:ff:e3:4e:01:c2:d0:16:f9:4b:
82:0c:55:b0:1c:26:8e:9c:a8:a4:00:2a:ba:89:12:32:51:6e:
87:ea:b6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:22:10 2026 by rpki-client