Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
File: OsREa6mbQ4kezx9_os2wLhSjRPM.mft (raw, json)
Hash identifier: OxBMb9qH/mea1kC39xaAZcTWzK5ZmH3LKTeete8jxGc=
Subject key identifier: 13:BF:F5:42:BF:CF:82:EE:94:48:BE:81:F2:5F:66:5D:09:FD:43:CB
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 019D9850762353554938F924D2A34ED8E8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
Manifest number: 0D38
Signing time: Thu 16 Apr 2026 22:01:42 +0000
Manifest this update: Thu 16 Apr 2026 22:01:42 +0000
Manifest next update: Fri 17 Apr 2026 22:01:42 +0000
Files and hashes: 1: OsREa6mbQ4kezx9_os2wLhSjRPM.crl (hash: 8IjnI1yDKrCPa184KkbKXHpo7XEVuB9Mn/a3alMOOHc=)
2: kvD9VGLLMdV8Z-0U6xAPcdb9xNs.roa (hash: UOjHZulJJ0l7NjYIq2CISrUEi7sGsjxxCwq6ItXieZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:76:23:53:55:49:38:f9:24:d2:a3:4e:d8:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Apr 16 22:01:42 2026 GMT
Not After : Apr 17 22:01:42 2026 GMT
Subject: CN=13bff542bfcf82ee9448be81f25f665d09fd43cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ea:37:f3:79:a2:c5:b9:56:38:05:df:a6:df:
32:37:14:37:02:2d:b5:08:1b:f0:dc:3e:b0:72:ca:
f9:d9:a1:ad:be:6c:17:7b:62:0f:62:be:60:0c:a3:
0d:c4:d0:f9:03:bd:2a:bf:99:6a:f9:9c:a7:b4:92:
5c:65:18:21:f0:ad:e9:f1:65:78:30:d8:a7:00:66:
61:76:29:d4:df:a4:5c:b0:e9:71:c3:b6:70:52:d3:
37:c6:ae:8d:df:ae:74:81:35:0e:ef:1e:49:7e:22:
bf:a7:c2:7a:8c:51:b9:4c:f8:b8:a0:07:be:4f:d6:
c0:f4:db:bb:f3:f2:bb:36:c4:61:1f:5b:d5:31:d6:
f0:cc:fa:74:94:fe:e1:b8:a2:c4:11:aa:8c:4f:38:
11:c7:3d:84:f2:6a:d4:81:26:98:2e:20:32:7c:38:
f2:13:b6:34:eb:fb:1c:ae:1c:7a:3c:a1:ed:d6:7c:
27:fd:95:98:92:c8:2f:4c:46:97:9a:ac:8c:83:77:
eb:d5:19:d3:ea:50:c6:b1:e0:a9:99:b1:d6:29:d0:
48:3d:f3:4d:d1:86:18:8d:7a:8e:f0:6b:69:1a:21:
93:5f:a2:42:5a:34:fa:b1:1a:a1:31:b0:67:02:9b:
ef:fe:21:0c:5e:0d:57:63:60:09:7b:24:e7:37:8d:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BF:F5:42:BF:CF:82:EE:94:48:BE:81:F2:5F:66:5D:09:FD:43:CB
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:28:e2:32:7c:39:41:6c:0d:6e:3e:31:56:ca:ec:9c:c7:99:
d6:63:42:bc:c5:e2:dc:b0:80:3f:29:05:58:28:85:bd:0e:f2:
09:ce:05:de:b8:2a:8e:d2:55:6b:96:9f:f5:04:20:d0:1f:35:
97:d3:85:c5:85:62:20:ce:96:6e:f9:41:d3:16:3d:b7:d8:d0:
2f:5f:47:e6:97:51:9c:86:ab:e2:ab:0f:9e:ad:eb:9b:1b:00:
9a:cc:9f:65:5e:e0:56:ac:27:50:03:11:05:3b:1d:1f:34:eb:
25:1c:c0:e1:35:5f:58:e0:28:20:42:91:e5:89:b8:d8:5a:f9:
6e:f5:9b:8f:7b:14:7e:1f:19:5c:e2:c8:e3:df:d0:43:41:91:
26:2f:6d:77:2f:b1:55:ea:49:58:7d:82:63:cb:c3:ca:cc:3a:
e4:30:f2:99:91:46:1a:a4:5d:4d:7c:6b:67:a7:f8:40:c4:0a:
23:ef:17:cb:66:d4:c8:9f:eb:b5:9f:90:ef:4c:0b:47:b7:73:
24:77:4b:07:05:e1:5c:83:46:5d:29:de:96:2d:8e:c4:c9:10:
04:35:42:56:0c:97:c9:7a:24:20:87:77:2d:10:cc:c6:56:1c:
e9:99:3a:1d:5d:61:27:3e:e1:e1:4c:da:10:b9:fd:1d:f0:3a:
30:da:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:18 2026 by rpki-client