Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
File: OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft (raw, json)
Hash identifier: 0xhWFBmOnstiOqJzsqdRjhikWYx6CKyCkc0ZRaOKXIE=
Subject key identifier: 5F:0F:3F:52:DC:39:91:74:57:FA:CC:8F:10:C9:B1:19:77:98:2A:09
Authority key identifier: 39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
Certificate issuer: /CN=3925df798706f90e6d8fd42049555024b73ed369
Certificate serial: 019D9C9AB9050E2BC638199023E90AC879BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
Manifest number: 021E
Signing time: Fri 17 Apr 2026 18:01:18 +0000
Manifest this update: Fri 17 Apr 2026 18:01:18 +0000
Manifest next update: Sat 18 Apr 2026 18:01:18 +0000
Files and hashes: 1: NfIoppfvh0qDRIBY8C0ICwJH8U0.roa (hash: hxCOHBmPPpfOoaRS3aXRLBOZUfatkQgbvRlv+0ElggM=)
2: OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl (hash: mjl/r1a4zOMDMBGBjADws3BPOObSiPafrKV3CuFsjt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:b9:05:0e:2b:c6:38:19:90:23:e9:0a:c8:79:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925df798706f90e6d8fd42049555024b73ed369
Validity
Not Before: Apr 17 18:01:18 2026 GMT
Not After : Apr 18 18:01:18 2026 GMT
Subject: CN=5f0f3f52dc39917457facc8f10c9b11977982a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:e6:f9:c8:40:4d:42:fd:4f:aa:52:14:44:
bf:15:c8:91:61:23:32:34:e6:07:4c:f8:86:8e:36:
fa:11:a3:9c:f6:44:60:9e:f8:81:e9:bf:11:3f:f3:
f3:93:09:7a:5a:78:60:aa:82:4f:40:21:c8:0f:2d:
6f:05:f3:c2:87:cb:33:ee:95:59:ab:1a:36:a1:87:
93:ae:a4:e1:51:7b:96:13:ce:e7:20:c2:3f:b8:77:
4c:fd:45:7e:e6:db:1e:8c:ca:69:57:d0:41:64:84:
43:44:74:e7:53:ab:2d:54:c9:6e:bc:57:f5:21:44:
1c:b2:04:bf:9e:9c:66:c0:75:93:0a:0d:ee:4a:86:
03:50:9c:b0:0c:01:b9:c2:5c:73:e9:39:3d:b5:c6:
e6:db:32:e1:b8:24:64:b3:eb:1a:c7:bc:c0:a5:37:
e3:5f:a6:81:d2:0a:44:a8:56:c8:d0:dc:d5:ee:53:
0b:f4:96:1c:6e:c9:19:6c:37:2b:82:27:01:05:4e:
62:57:0f:6d:e7:6f:fc:b2:1d:b9:b7:59:5b:6b:8c:
ac:24:29:99:03:1c:7f:72:48:40:c6:1b:40:9c:20:
05:b1:fb:85:6d:0e:d8:a2:39:61:aa:3c:3a:4b:12:
40:3b:dc:06:fc:3c:3c:8e:a3:48:34:4a:29:d3:07:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0F:3F:52:DC:39:91:74:57:FA:CC:8F:10:C9:B1:19:77:98:2A:09
X509v3 Authority Key Identifier:
keyid:39:25:DF:79:87:06:F9:0E:6D:8F:D4:20:49:55:50:24:B7:3E:D3:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSXfeYcG-Q5tj9QgSVVQJLc-02k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1c7cb2-769c-47ae-b5c5-08942b454998/1/OSXfeYcG-Q5tj9QgSVVQJLc-02k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:21:6b:1b:d2:3c:e1:b9:ef:b2:05:aa:37:65:8b:2b:71:8d:
58:c0:82:a3:f2:db:a0:97:5c:5e:9d:55:1b:f6:e0:1e:f8:15:
e6:42:13:f2:bc:78:12:be:27:ea:ac:49:a2:ff:b9:fa:bd:71:
2c:88:f6:97:96:03:8f:3c:f8:ed:52:3d:31:28:b6:b4:80:60:
b2:41:cd:3f:b2:9e:48:9f:5e:64:4a:5b:5c:1b:e9:e4:fd:7c:
f3:21:77:62:18:6e:63:ee:21:63:86:fb:b8:d3:12:3c:92:94:
58:c4:5a:ec:98:aa:c8:83:fd:a8:a3:a0:18:1d:f0:1e:43:e6:
0b:75:7d:c2:d8:49:48:9d:8f:6e:7c:e8:60:f4:be:cc:c9:6d:
6d:ab:f1:15:45:d7:c9:32:99:1c:b1:43:b2:ef:37:c9:8c:86:
d9:69:aa:fc:b4:9f:d5:be:1f:b4:c0:e2:e4:01:29:ae:42:73:
08:2e:2b:6b:a0:2e:f9:11:7f:ac:5b:44:7d:de:c3:2f:2f:c6:
fe:fd:ff:67:21:24:3c:fe:a0:35:89:ae:8b:95:75:d8:d7:6b:
58:eb:ad:ef:6d:e2:08:c0:bb:c1:08:e9:c7:77:7d:1c:bd:37:
2a:96:1c:15:c6:e1:84:6f:7d:7b:a7:fb:17:1c:6d:1f:8c:8a:
9a:a5:4e:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cmrkFDivGOBmQI+kKyHm7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MjVkZjc5ODcwNmY5MGU2ZDhmZDQyMDQ5NTU1MDI0Yjcz
ZWQzNjkwHhcNMjYwNDE3MTgwMTE4WhcNMjYwNDE4MTgwMTE4WjAzMTEwLwYDVQQD
Eyg1ZjBmM2Y1MmRjMzk5MTc0NTdmYWNjOGYxMGM5YjExOTc3OTgyYTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApurm+chATUL9T6pSFES/FciRYSMy
NOYHTPiGjjb6EaOc9kRgnviB6b8RP/Pzkwl6WnhgqoJPQCHIDy1vBfPCh8sz7pVZ
qxo2oYeTrqThUXuWE87nIMI/uHdM/UV+5tsejMppV9BBZIRDRHTnU6stVMluvFf1
IUQcsgS/npxmwHWTCg3uSoYDUJywDAG5wlxz6Tk9tcbm2zLhuCRks+sax7zApTfj
X6aB0gpEqFbI0NzV7lML9JYcbskZbDcrgicBBU5iVw9t52/8sh25t1lba4ysJCmZ
Axx/ckhAxhtAnCAFsfuFbQ7Yojlhqjw6SxJAO9wG/Dw8jqNINEop0wcH6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8PP1LcOZF0V/rMjxDJsRl3mCoJMB8GA1UdIwQY
MBaAFDkl33mHBvkObY/UIElVUCS3PtNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUt
MDg5NDJiNDU0OTk4LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xYzdjYjItNzY5Yy00N2FlLWI1YzUtMDg5NDJiNDU0OTk4
LzEvT1NYZmVZY0ctUTV0ajlRZ1NWVlFKTGMtMDJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCFrG9I8
4bnvsgWqN2WLK3GNWMCCo/LboJdcXp1VG/bgHvgV5kIT8rx4Er4n6qxJov+5+r1x
LIj2l5YDjzz47VI9MSi2tIBgskHNP7KeSJ9eZEpbXBvp5P188yF3YhhuY+4hY4b7
uNMSPJKUWMRa7JiqyIP9qKOgGB3wHkPmC3V9wthJSJ2PbnzoYPS+zMltbavxFUXX
yTKZHLFDsu83yYyG2Wmq/LSf1b4ftMDi5AEprkJzCC4ra6Au+RF/rFtEfd7DLy/G
/v3/ZyEkPP6gNYmui5V12NdrWOut723iCMC7wQjpx3d9HL03KpYcFcbhhG99e6f7
FxxtH4yKmqVOTQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:43 2026 by rpki-client