Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
File: OSG38e7pDZnilCGKk4dTweotwmc.mft (raw, json)
Hash identifier: mQkulctUblkSDSj/p6lDVMWtVb76WXA6BX5k7JkxaO8=
Subject key identifier: AB:3E:71:4A:5B:34:00:AA:E4:0F:CA:CC:2C:CC:5A:BE:FE:74:7D:0A
Authority key identifier: 39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
Certificate issuer: /CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Certificate serial: 019DA3E65FBFA1585EDBECFD10DFABC5E302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
Manifest number: 1856
Signing time: Sun 19 Apr 2026 04:01:17 +0000
Manifest this update: Sun 19 Apr 2026 04:01:17 +0000
Manifest next update: Mon 20 Apr 2026 04:01:17 +0000
Files and hashes: 1: 68yVcmurp-TUH6bcEYJFrYBYlHA.roa (hash: GhcpVTrzvKoo7+y/CR4zZ8nvtr04ppIcAONYUpBet9U=)
2: OSG38e7pDZnilCGKk4dTweotwmc.crl (hash: X7oBh5VJhIDaaQDP6+0x3523yvYjkUfPuDFq1RJIaNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:5f:bf:a1:58:5e:db:ec:fd:10:df:ab:c5:e3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3921b7f1eee90d99e294218a938753c1ea2dc267
Validity
Not Before: Apr 19 04:01:17 2026 GMT
Not After : Apr 20 04:01:17 2026 GMT
Subject: CN=ab3e714a5b3400aae40fcacc2ccc5abefe747d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:1c:3c:a0:70:ab:9c:05:df:fb:26:6d:fe:
2f:4f:99:2b:dd:f9:64:6a:2d:5f:a1:73:20:71:2c:
84:56:2c:5c:ad:6a:7d:36:fb:48:89:1a:ed:fc:54:
ec:db:02:f8:9b:05:a1:0c:38:e9:55:01:d5:4a:e2:
da:c0:f7:12:ad:a1:36:7b:7e:b2:70:3f:4f:79:71:
d6:44:df:a0:56:13:25:98:8b:b1:fa:6d:3f:bf:07:
f9:24:01:74:93:bc:2c:cc:71:5b:b4:28:bb:50:ba:
65:62:9e:aa:fc:d3:a3:62:a9:c1:5d:f3:68:45:b0:
7b:cb:47:93:64:0d:d8:79:bf:6d:35:c6:ba:d5:39:
0a:77:59:85:3f:4c:04:47:f0:9d:42:61:47:ee:52:
f1:33:da:99:ac:d8:c6:c6:69:b8:cd:4e:68:7e:3f:
ec:d0:4a:24:da:8c:87:d9:53:60:0c:ff:c8:61:83:
f1:a1:41:e9:35:89:49:1c:ec:87:e8:f0:4f:37:2e:
0b:20:e4:af:7d:de:c2:02:59:93:02:76:31:2e:90:
a5:0b:a3:da:b5:58:b2:a5:8b:cf:92:75:3c:9f:21:
08:5a:38:20:8f:a2:d5:5f:1d:59:b3:36:84:4b:6e:
72:f9:3b:db:e8:00:c6:f6:64:09:50:5d:0f:b7:08:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3E:71:4A:5B:34:00:AA:E4:0F:CA:CC:2C:CC:5A:BE:FE:74:7D:0A
X509v3 Authority Key Identifier:
keyid:39:21:B7:F1:EE:E9:0D:99:E2:94:21:8A:93:87:53:C1:EA:2D:C2:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSG38e7pDZnilCGKk4dTweotwmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/be1db1-4dc4-463c-baf8-2441e10f6f8f/1/OSG38e7pDZnilCGKk4dTweotwmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8f:cc:98:08:3d:1e:b4:09:9a:25:d4:e1:f5:be:df:ae:19:
96:fa:4f:24:b9:a7:68:96:d8:56:d8:c9:25:a8:38:fe:65:54:
71:ce:3a:cc:cd:f9:70:89:66:1d:9d:f4:7f:a4:28:c7:48:4d:
9d:98:cf:a3:78:88:b9:6f:d3:05:d5:db:1c:c1:99:ec:e7:fb:
14:c6:54:a0:42:4f:61:ec:d3:f7:e3:8f:f7:77:96:2c:d6:cb:
48:12:93:00:8d:e3:b4:71:e8:95:33:ad:92:ed:b8:45:c4:ea:
10:b4:f9:9e:90:66:4b:dc:d1:ff:7c:49:b0:6e:b1:93:61:bb:
a0:5f:ed:0f:f7:be:bb:0c:4a:6a:48:bf:16:74:e0:86:c0:d8:
2f:0c:19:38:41:46:1f:74:df:1f:28:51:b9:0f:f9:55:c8:3d:
87:db:13:f4:27:54:fd:9b:1b:1a:24:77:03:d5:53:a6:a0:cf:
ae:44:45:39:4c:e4:14:01:17:da:fd:b8:68:46:e6:7e:34:c9:
29:fc:6a:f7:55:c6:8d:1a:8a:5c:57:40:7d:99:d8:da:28:07:
a8:b2:8a:8b:bc:26:78:ad:a2:79:fb:88:d6:61:e4:cb:89:38:
b8:0d:d6:71:69:2a:af:f4:d4:29:15:6d:97:9c:0c:ad:72:e4:
e8:2b:52:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:16 2026 by rpki-client