Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: hHbZTvlxEzNK/ZyiDk8hvUMvS6cdKCSUfzLtG2WtjBw=
Subject key identifier: F7:45:59:0A:B2:50:F7:A1:3E:F7:FF:A6:FC:57:E0:77:2E:30:5F:0A
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019FADBFD4CEFE4B91F3846127FB436F99DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 0330
Signing time: Wed 29 Jul 2026 12:00:57 +0000
Manifest this update: Wed 29 Jul 2026 12:00:57 +0000
Manifest next update: Thu 30 Jul 2026 12:00:57 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: cT2IDRB9S0yVBGO1O8Lkr9YPfUnZYwOKdO2NzUAp7sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:d4:ce:fe:4b:91:f3:84:61:27:fb:43:6f:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Jul 29 12:00:57 2026 GMT
Not After : Jul 30 12:00:57 2026 GMT
Subject: CN=f745590ab250f7a13ef7ffa6fc57e0772e305f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:31:47:ca:26:cc:ea:00:8e:b7:55:52:13:
55:75:52:bb:f6:17:0a:36:ff:17:cb:da:c1:07:75:
1d:2f:95:08:a4:2d:da:fb:04:42:9c:e6:44:57:d4:
a7:0d:ed:1d:56:23:23:83:6d:d7:ed:d7:81:3e:f2:
72:2a:b5:11:4d:76:40:47:17:cb:34:3c:46:cb:45:
58:53:e5:41:07:07:43:45:9d:2f:c1:8e:a7:e4:8e:
43:55:81:29:d1:ee:a9:08:08:5e:69:87:ec:65:e7:
d1:ea:5f:47:03:8e:85:02:63:92:29:fe:92:b7:be:
aa:c6:00:45:57:4b:34:68:7c:f4:c9:00:94:fd:06:
4c:04:a3:3e:fd:56:4e:f7:1e:4a:1c:1d:8a:82:f2:
42:f8:5a:71:ee:02:dd:6d:cc:9f:b6:01:f8:3b:44:
57:dc:1f:fe:ea:91:eb:45:ae:33:36:57:24:08:b3:
fa:2d:78:e8:0e:12:ce:96:38:08:ce:3a:02:8b:41:
75:9d:a8:85:c2:47:2f:d0:29:83:db:3b:3a:5d:80:
1d:09:8d:69:e9:d5:1f:4d:c6:76:34:4e:b8:1e:fe:
c1:c4:83:16:27:f7:73:76:9c:ee:54:cd:26:eb:4c:
a2:95:52:da:42:2e:be:21:98:44:4c:93:ea:fa:77:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:45:59:0A:B2:50:F7:A1:3E:F7:FF:A6:FC:57:E0:77:2E:30:5F:0A
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:01:9b:e7:4c:15:5e:96:5a:ea:f9:e3:b6:41:06:8b:ea:01:
a9:ac:0f:56:78:77:c3:77:0a:29:48:5e:85:8f:28:8f:a0:83:
1e:3e:d6:d5:01:58:da:25:ec:f2:a5:fc:b6:0d:8f:6e:4f:57:
fb:41:bb:63:d1:91:fd:82:d6:57:30:ca:5b:bf:3d:b3:f5:c0:
13:2a:47:90:fe:4e:85:ae:7c:b5:a4:2f:31:a0:79:7b:4f:77:
f2:91:32:21:78:5e:8d:17:dd:01:0d:5a:ae:f9:18:66:cd:d2:
66:f8:f5:83:99:f0:d1:2d:5d:a9:af:8c:33:3a:a8:d9:ac:ba:
9f:c4:f9:3f:1e:f0:49:c4:1c:a8:a0:dd:ed:b2:5f:93:9d:b6:
6a:01:4e:85:5e:ed:2b:90:b5:9a:d3:48:11:56:ac:de:f5:87:
68:a1:bc:e4:c1:f3:c2:69:ad:b1:b8:0f:65:e6:00:09:47:a8:
8d:d5:d6:56:17:ea:42:9d:8d:3f:67:9f:01:8c:f7:5d:01:1d:
54:d1:ca:a3:75:eb:b2:df:12:f2:a2:66:13:1a:37:6a:ab:ab:
84:94:91:8c:f2:f6:ce:26:5c:f4:45:2b:ae:a7:ad:0d:08:e7:
b1:e2:af:da:34:0f:39:90:98:30:46:9e:91:cf:ff:5e:d4:f6:
ab:01:ea:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:35 2026 by rpki-client