Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: GQvfbSnzj+dkj39uRwNMBIJRRkyBzUXa0XZG04r1B3E=
Subject key identifier: 99:67:F5:00:D7:99:AC:0E:B9:29:E8:1A:1A:65:67:E1:87:69:1C:EE
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 01A10580DE3274C80A1BE789F9C5675F2F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 03E2
Signing time: Sun 04 Oct 2026 06:01:33 +0000
Manifest this update: Sun 04 Oct 2026 06:01:33 +0000
Manifest next update: Mon 05 Oct 2026 06:01:33 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: nCAt9oD61xxls88U1/Dm+eKKPVQ1SNLQ4UiehHXlo24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:de:32:74:c8:0a:1b:e7:89:f9:c5:67:5f:2f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Oct 4 06:01:33 2026 GMT
Not After : Oct 5 06:01:33 2026 GMT
Subject: CN=9967f500d799ac0eb929e81a1a6567e187691cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:e0:5b:1d:67:98:d7:ad:ba:ab:4a:64:6d:
78:f4:f4:f9:8d:17:e1:7f:65:27:6e:eb:fa:5f:0b:
2b:50:17:67:ff:6c:97:c2:6c:65:3c:0a:a8:9c:f6:
78:a4:02:27:c5:99:10:2d:e0:2c:dd:00:97:1d:47:
7a:43:89:30:35:e1:ec:0a:1a:fd:0f:0d:0b:a0:57:
3b:f6:0b:36:84:e9:54:18:ae:da:e5:b4:1f:07:36:
d1:eb:0d:8f:51:fb:5b:6b:b4:96:63:7f:dd:f2:5d:
db:b2:9f:6d:d9:22:4f:aa:fc:a9:f5:b2:23:8e:d3:
14:ed:5c:cc:08:b0:85:39:5c:17:e9:70:91:1f:c6:
e4:f6:ed:17:b2:fa:09:e7:78:10:11:4c:42:67:10:
1f:9e:d1:2d:7f:9e:de:dc:6d:88:99:fa:25:45:d6:
94:71:1d:06:cb:c1:2e:f8:04:76:a1:9e:14:0f:71:
64:f8:0e:14:44:e6:14:03:cd:07:a3:72:43:80:96:
37:7e:52:8c:b7:95:0b:88:6a:08:36:38:f9:64:63:
57:bc:9d:ad:75:0b:64:1b:93:8b:30:2f:59:63:27:
40:89:56:83:64:8a:82:30:36:49:99:18:aa:8e:5f:
93:6c:5d:6a:57:d0:0b:33:cb:3d:f1:a1:35:87:9e:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:F5:00:D7:99:AC:0E:B9:29:E8:1A:1A:65:67:E1:87:69:1C:EE
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e8:ad:82:78:46:8f:29:c2:ed:c3:35:b3:91:17:77:f7:b0:
1d:9c:38:43:79:30:d8:f5:f3:ca:5d:f0:5e:6f:90:2c:23:f8:
ac:75:a9:62:fc:26:d8:da:46:d1:e2:2b:60:06:b7:78:75:1a:
48:6e:d1:59:86:4f:1f:03:6d:31:01:18:10:8c:44:c3:72:3c:
3a:60:96:55:69:69:f5:36:c1:78:b8:15:de:0e:7c:17:00:f9:
cb:eb:02:de:4a:65:99:6e:27:06:22:1c:70:46:58:63:65:bb:
8f:81:75:83:bd:45:34:37:93:12:67:ce:51:3d:41:75:79:a8:
e8:59:6f:ca:86:92:43:9a:87:64:ab:4b:35:18:01:b2:a4:0c:
b0:67:43:f0:f7:b5:61:23:d5:27:06:96:36:5e:ab:36:0e:ca:
b1:31:2e:f5:f6:7f:05:88:f2:8c:84:6f:84:c1:9c:b9:5f:56:
21:47:65:2a:05:63:1e:30:88:5a:b0:c9:a8:dd:96:2b:f4:7f:
8a:ec:b3:71:fc:96:55:52:ca:ec:57:fb:67:dc:a9:6b:96:7d:
6e:46:ec:4b:75:a8:6f:fe:0a:5a:21:82:6e:a9:c5:9a:d1:04:
74:a3:73:fc:e5:b3:85:70:7e:db:0b:7c:2c:34:fb:74:f7:a1:
1d:81:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:22:28 2026 by rpki-client