Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: EKGdvTN3jxThOcWZHmSgqIBGFgM0XOLya9SXo9pM3Lo=
Subject key identifier: 1C:BE:BF:83:A3:5F:9E:9C:CB:2E:49:0B:9C:9F:8D:D3:6C:B0:EA:10
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 019CAAC6D043583DEE82038693B98C5EB5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0CBD
Signing time: Sun 01 Mar 2026 19:01:22 +0000
Manifest this update: Sun 01 Mar 2026 19:01:22 +0000
Manifest next update: Mon 02 Mar 2026 19:01:22 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: JtvqtxiyySjH6oZvAGDlrxN/n2NkYdx6ilQkA5Dx/QQ=)
2: kvD9VGLLMdV8Z-0U6xAPcdb9xNs.roa (hash: UOjHZulJJ0l7NjYIq2CISrUEi7sGsjxxCwq6ItXieZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d0:43:58:3d:ee:82:03:86:93:b9:8c:5e:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Mar 1 19:01:22 2026 GMT
Not After : Mar 2 19:01:22 2026 GMT
Subject: CN=1cbebf83a35f9e9ccb2e490b9c9f8dd36cb0ea10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:0a:58:55:ea:ba:e2:1a:b1:0b:ca:ea:d8:
47:09:3d:1b:4e:02:f6:01:34:80:7a:55:40:47:67:
bd:cb:77:c2:ce:79:4e:c9:43:88:cd:2f:de:1a:e0:
17:8a:bc:03:a0:4c:f3:c6:e5:87:df:6c:87:1a:70:
c2:23:34:d0:4e:1d:87:80:01:2e:fa:2d:65:4a:ac:
a2:c1:ab:97:d2:8f:a5:a7:13:73:e9:4f:a9:db:79:
70:23:0e:12:28:de:5a:c5:cc:43:af:ee:76:52:e5:
3c:46:88:f7:37:c0:95:09:90:de:80:a0:00:93:b8:
b5:bf:3f:86:5e:ed:d3:6a:87:b2:e7:cf:11:35:56:
99:ff:41:18:bf:9c:b3:4d:ff:eb:37:d4:70:f2:55:
4a:32:a8:97:9d:77:8c:3e:00:83:43:92:ae:b4:0c:
df:34:84:3a:01:5d:59:02:f0:1c:59:8b:65:cc:7d:
d2:03:3f:0d:63:27:6f:ce:1b:9b:8d:a7:2f:f2:23:
5a:3d:7a:b3:1f:a2:b5:7b:9d:bf:a8:a0:10:a0:34:
3b:15:16:6c:5c:20:a3:a5:33:3e:f1:5c:6e:57:59:
83:02:47:95:9a:a6:68:22:52:2b:11:f6:a2:3d:c4:
0c:42:62:f9:53:86:be:c9:a2:26:6b:10:40:bc:59:
fc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BE:BF:83:A3:5F:9E:9C:CB:2E:49:0B:9C:9F:8D:D3:6C:B0:EA:10
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:4e:e4:90:58:a3:11:19:7c:5d:79:41:4d:45:7a:b9:78:
0e:8a:a0:51:03:c0:ee:65:3b:21:e1:dd:3d:29:bd:b7:2d:e1:
06:55:c0:43:4e:05:34:f6:46:18:cd:60:ee:de:8c:97:b2:c4:
af:37:b0:7e:31:c9:08:10:38:9d:37:9b:4a:08:90:01:48:34:
cd:66:b1:dc:24:c2:f4:75:cc:06:d5:42:36:e6:f6:30:62:a7:
41:3f:9f:9a:06:53:71:65:49:cf:d9:4d:bb:e5:70:ec:47:f5:
f2:d5:15:d6:61:2f:5c:2c:76:5d:91:03:3a:82:17:00:8f:01:
a6:32:e8:10:8a:0a:98:20:0f:e2:13:b8:10:d8:0c:7e:98:a3:
47:95:37:3b:28:5c:1d:df:10:27:27:07:16:19:93:55:91:1c:
ad:78:10:51:d2:e4:28:42:43:53:e0:21:5f:67:52:a8:b2:cf:
54:ba:39:f3:c1:16:b4:da:83:35:64:29:cc:10:81:eb:94:f9:
5c:6c:60:a4:30:5b:b1:45:f0:04:42:74:f0:0b:e3:32:a2:87:
9a:1b:e9:12:6f:4a:9c:ad:ac:08:44:9c:a4:31:24:7f:2a:8a:
c3:b2:c3:7d:13:1c:4f:98:f2:05:08:7c:6f:64:c8:3b:ff:24:
e5:9c:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:31 2026 by rpki-client