Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: +Z1LhtiLLIkwIyACl4IJNAQgXE3FLbKUfiv8UYXjVrY=
Subject key identifier: 7A:80:5A:90:5D:DF:34:55:36:4B:91:0E:1A:62:79:44:F1:D1:C8:1C
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019CA9B371912302C7F2D30E454FFD67224F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 092B
Signing time: Sun 01 Mar 2026 14:00:35 +0000
Manifest this update: Sun 01 Mar 2026 14:00:35 +0000
Manifest next update: Mon 02 Mar 2026 14:00:35 +0000
Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: Ew9+Vq7AibEIeRnngV1UjiUKfYciNo+N28qnXB4nIYM=)
2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=)
3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:71:91:23:02:c7:f2:d3:0e:45:4f:fd:67:22:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Mar 1 14:00:35 2026 GMT
Not After : Mar 2 14:00:35 2026 GMT
Subject: CN=7a805a905ddf3455364b910e1a627944f1d1c81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:a0:b7:62:4c:93:37:95:7f:14:7d:d2:76:
cc:a8:50:b3:1b:c7:16:e5:66:42:f7:75:d7:69:79:
60:a6:7d:df:35:4a:9a:06:eb:c3:fc:09:0a:9a:ae:
2c:eb:8d:24:55:0b:d4:2f:b7:92:27:ff:6d:da:5c:
e7:b5:20:8b:13:14:41:79:4c:bf:82:d6:f2:87:f2:
90:70:ea:7b:d3:46:ff:cc:e8:63:35:21:f9:70:65:
e4:49:32:69:5a:ed:e0:ca:83:40:5d:db:2a:5c:e2:
b9:f6:80:46:fe:7c:e2:af:72:c6:c6:26:20:3a:52:
fe:27:a3:29:77:1e:b4:f4:66:1f:af:11:4d:bd:94:
6b:c5:0d:d2:9c:f9:4b:68:50:64:ca:7f:ef:5e:cc:
c0:21:31:3e:79:79:9b:d2:fb:32:b5:d5:68:85:99:
8b:25:aa:17:19:29:db:e3:fd:4f:dd:04:ea:52:52:
1a:23:ba:e0:c1:d5:3f:76:6b:ce:98:15:33:2c:9a:
44:58:db:7e:0c:66:47:af:88:da:0d:9f:a9:e9:2c:
22:b7:89:bc:92:59:65:bd:ac:48:43:a8:d8:08:3b:
75:c9:56:1e:21:db:6e:aa:b7:ff:79:f3:9a:b3:2d:
70:9f:54:d0:4d:5e:d7:de:14:7c:8a:53:68:07:14:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:80:5A:90:5D:DF:34:55:36:4B:91:0E:1A:62:79:44:F1:D1:C8:1C
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:10:33:36:4e:04:2e:45:6c:4b:f6:93:79:46:8e:9d:16:f4:
97:96:f2:a8:6b:98:53:ef:90:54:97:b0:b5:a2:3f:ef:3e:84:
45:38:23:1b:89:67:c7:57:f6:0e:5a:0c:be:6e:20:1c:f7:d8:
e9:32:69:fb:bc:02:eb:cd:1f:fe:1f:df:55:7f:cd:e4:2d:51:
79:1a:c3:ff:01:63:3b:cc:ac:d6:1b:93:26:ee:f8:ad:58:2f:
44:7a:12:d2:66:34:37:6b:dd:94:f3:74:e2:8a:06:21:f1:a6:
72:1b:8b:61:e1:3d:8b:36:d1:e7:bd:26:36:5d:e8:00:a1:1e:
bd:50:d9:63:15:7c:99:92:0e:a6:41:d5:97:2a:13:d5:e8:cd:
3d:55:e3:c0:1d:6c:81:a3:aa:a1:a5:c0:f5:6c:26:88:dc:a0:
bb:e0:39:8e:bc:09:78:33:fd:da:83:4e:34:36:46:a2:12:3e:
37:15:39:e0:f1:d9:c5:62:aa:41:87:b0:26:db:b7:55:b1:c4:
a0:05:2c:d6:58:e8:8d:7d:5d:8f:46:9c:97:78:de:7e:45:81:
da:ef:84:83:c1:15:68:61:45:ef:09:54:82:33:ad:80:99:9d:
8d:19:fd:65:d2:e3:6f:53:28:72:c5:59:93:06:a8:c3:26:20:
2b:d7:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:18 2026 by rpki-client