Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: 1y+Wq4N0kYvopJM/a3Wa08wYMm44pTM1+/IJQozwxA4=
Subject key identifier: 17:D1:A8:EF:0C:83:7D:5F:90:26:9E:DE:6E:9A:B9:E8:7E:A8:8D:37
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019CAD225A875B49EFFD6A361E343047A2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 01A2
Signing time: Mon 02 Mar 2026 06:00:35 +0000
Manifest this update: Mon 02 Mar 2026 06:00:35 +0000
Manifest next update: Tue 03 Mar 2026 06:00:35 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: t8ERfvMhqV28ODgxi2AhVErJ/9lXAMzV6PTVwx/+Lk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:5a:87:5b:49:ef:fd:6a:36:1e:34:30:47:a2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Mar 2 06:00:35 2026 GMT
Not After : Mar 3 06:00:35 2026 GMT
Subject: CN=17d1a8ef0c837d5f90269ede6e9ab9e87ea88d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:1e:65:e0:16:d6:2a:c5:aa:01:4d:05:5b:
75:ea:8e:6a:a1:3c:4a:ca:57:13:31:3d:d9:9f:43:
8c:a1:83:bb:1f:fd:54:ca:f9:57:34:6a:5d:44:a2:
b2:59:60:8a:6e:07:92:79:3c:a7:18:c3:68:18:46:
c8:0b:c5:bd:5f:df:0c:3f:5a:bd:4b:02:e4:dd:03:
67:ba:ee:2c:d3:ec:f4:19:ae:e6:fa:1b:01:b6:11:
a7:7d:cd:27:84:78:5e:8d:06:ca:f5:46:60:99:d2:
3c:82:3f:71:e6:4b:00:33:e3:51:9f:13:42:6d:40:
89:19:05:e1:be:67:43:54:d0:d4:65:83:c7:dc:41:
83:98:76:04:0c:e5:df:72:64:f4:80:91:e4:38:29:
a0:82:dd:de:1e:24:3b:2f:54:76:b3:b5:b0:de:89:
e9:c9:b2:fd:ed:bf:c7:c2:cc:b6:95:15:04:e3:9c:
a3:43:65:c7:26:89:1f:89:0a:7b:ba:70:eb:2f:44:
10:4a:c3:25:8b:79:5c:7f:34:ed:55:36:ed:e7:ff:
65:c4:75:9b:60:ab:f6:3f:70:7f:e0:0e:5d:16:53:
33:52:be:cf:68:40:0c:16:94:f1:35:d9:4e:a3:ca:
66:71:25:72:48:02:a8:8b:05:ee:fe:b9:4b:f0:42:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D1:A8:EF:0C:83:7D:5F:90:26:9E:DE:6E:9A:B9:E8:7E:A8:8D:37
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b5:9e:0e:fa:bf:01:e2:6e:78:9c:ab:8e:49:15:9c:37:bd:
58:c2:85:9d:16:f6:20:df:09:56:98:b2:be:26:52:dc:8f:d2:
d1:b1:0a:0e:cb:8e:d2:37:6b:f8:5b:eb:b5:b0:31:b0:02:4b:
23:73:76:f1:47:d9:8a:ea:12:c3:e5:c3:0c:d8:79:1f:a0:bb:
a5:11:e2:66:c9:c6:f2:9a:f8:00:f2:61:19:da:82:5d:de:53:
ba:7d:9a:b2:57:f0:a2:d0:d4:0c:f7:df:53:78:ce:8e:69:47:
5c:17:b1:7c:4c:60:11:f3:c2:87:67:b7:38:c6:6d:a8:27:e5:
3f:5f:81:16:30:61:08:a1:13:59:c0:2f:15:e2:7d:ad:5b:95:
3c:39:6e:a2:f6:d4:ce:60:17:b2:24:91:5c:3f:b4:c2:ad:f1:
38:c2:ed:d8:94:f3:24:e8:88:17:92:9e:50:95:5c:bc:7d:53:
00:a3:bb:82:51:d4:e3:0d:d5:4e:e2:fb:9b:5c:8c:77:bb:36:
1a:4a:77:d3:73:27:46:59:dc:49:ef:c6:0a:7e:5a:9d:f6:77:
5a:14:20:2b:d9:00:e0:61:1c:3b:42:bf:13:c3:ca:65:eb:a8:
d0:57:c9:00:b6:88:2f:ab:b0:71:1a:bf:5d:ce:f1:4b:b9:07:
e9:41:42:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIlqHW0nv/Wo2HjQwR6K/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MjVkZjc5ODcwNmY5MGU2ZDhmZDQyMDQ5NTU1MDI0Yjcz
ZWQzNjkwHhcNMjYwMzAyMDYwMDM1WhcNMjYwMzAzMDYwMDM1WjAzMTEwLwYDVQQD
EygxN2QxYThlZjBjODM3ZDVmOTAyNjllZGU2ZTlhYjllODdlYTg4ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq4eZeAW1irFqgFNBVt16o5qoTxK
ylcTMT3Zn0OMoYO7H/1UyvlXNGpdRKKyWWCKbgeSeTynGMNoGEbIC8W9X98MP1q9
SwLk3QNnuu4s0+z0Ga7m+hsBthGnfc0nhHhejQbK9UZgmdI8gj9x5ksAM+NRnxNC
bUCJGQXhvmdDVNDUZYPH3EGDmHYEDOXfcmT0gJHkOCmggt3eHiQ7L1R2s7Ww3onp
ybL97b/Hwsy2lRUE45yjQ2XHJokfiQp7unDrL0QQSsMli3lcfzTtVTbt5/9lxHWb
YKv2P3B/4A5dFlMzUr7PaEAMFpTxNdlOo8pmcSVySAKoiwXu/rlL8EI3aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfRqO8Mg31fkCae3m6aueh+qI03MB8GA1UdIwQY
MBaAFDkl33mHBvkObY/UIElVUCS3PtNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUt
MDg5NDJiNDU0OTk4LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUtMDg5NDJiNDU0OTk4
LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLWeDvq/
AeJueJyrjkkVnDe9WMKFnRb2IN8JVpiyviZS3I/S0bEKDsuO0jdr+FvrtbAxsAJL
I3N28UfZiuoSw+XDDNh5H6C7pRHiZsnG8pr4APJhGdqCXd5Tun2aslfwotDUDPff
U3jOjmlHXBexfExgEfPCh2e3OMZtqCflP1+BFjBhCKETWcAvFeJ9rVuVPDluovbU
zmAXsiSRXD+0wq3xOMLt2JTzJOiIF5KeUJVcvH1TAKO7glHU4w3VTuL7m1yMd7s2
Gkp303MnRlncSe/GCn5anfZ3WhQgK9kA4GEcO0K/E8PKZeuo0FfJALaIL6uwcRq/
Xc7xS7kH6UFCyw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:45 2026 by rpki-client