Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: NgOd9wjBCNw5J2+fbmWwdCShqj2xcOYvtKR3L4xab8g=
Subject key identifier: 45:65:1A:3F:E8:2B:ED:92:F3:7F:AF:8B:7D:3A:E5:66:D0:7C:1B:AD
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019D992B63B3ACB9A57A880C0C32D8406E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 09A7
Signing time: Fri 17 Apr 2026 02:00:50 +0000
Manifest this update: Fri 17 Apr 2026 02:00:50 +0000
Manifest next update: Sat 18 Apr 2026 02:00:50 +0000
Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: cMquEv3ULb8VouBF0KbIkA4Zb3DL7e8894DveErVRYU=)
2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=)
3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:63:b3:ac:b9:a5:7a:88:0c:0c:32:d8:40:6e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Apr 17 02:00:50 2026 GMT
Not After : Apr 18 02:00:50 2026 GMT
Subject: CN=45651a3fe82bed92f37faf8b7d3ae566d07c1bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:19:b1:77:cb:e7:99:97:c5:f9:fe:a6:8c:4a:
56:72:3e:21:4b:29:06:0e:21:1c:b0:43:5f:13:0b:
43:68:dc:22:67:94:90:ab:44:25:77:b3:08:93:fb:
7d:84:06:92:53:13:a4:b2:d0:03:2f:fe:92:d7:0d:
02:ee:88:ed:49:f5:1b:fa:41:14:4b:07:3a:92:d5:
e6:1c:48:40:32:32:71:8d:df:45:ca:3d:b9:24:be:
6b:84:9f:29:cc:67:45:a1:eb:9a:87:e5:52:eb:5f:
59:61:48:d6:45:87:20:0b:eb:44:af:ea:9c:51:67:
aa:8c:e7:63:d5:ec:f3:06:c7:80:73:8b:69:6f:20:
2f:ce:cc:f1:91:b9:c3:7b:71:4b:3c:5c:b2:25:24:
51:6b:0e:07:7e:06:62:1e:48:b8:38:a5:78:8d:05:
a7:d5:8b:a2:e6:db:f4:64:2e:50:b4:26:70:37:1b:
b1:3e:2e:ab:f5:98:3a:e7:8b:bf:01:cb:ad:30:39:
82:b9:ce:c9:72:42:e0:60:c9:52:e6:8c:b9:72:8f:
14:af:a4:6e:c8:0e:30:27:29:2e:10:9d:29:91:19:
32:50:8a:c3:f1:a7:13:54:5d:c4:90:c5:e2:6d:c4:
fa:34:fb:fb:a0:22:12:f6:92:a1:9b:76:97:11:a8:
7c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:1A:3F:E8:2B:ED:92:F3:7F:AF:8B:7D:3A:E5:66:D0:7C:1B:AD
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7b:da:57:fb:11:8b:a1:5f:d0:ed:d1:70:ae:8e:3c:1f:e0:
bd:6c:2b:02:4b:61:75:38:04:fd:99:7b:da:07:56:81:78:13:
97:d7:8f:f3:9d:4d:e0:eb:30:56:da:15:22:94:d5:5c:c6:62:
d6:ae:68:2e:71:92:81:c2:44:3d:41:02:d5:dc:91:52:4e:d6:
bf:c8:f1:cc:7d:bb:cb:00:d5:68:4a:c7:6d:03:c0:a1:4a:ec:
4b:77:9f:de:2e:11:79:a1:e5:21:bb:8e:37:62:03:9f:de:60:
52:44:b1:a6:16:54:a1:7b:f0:f0:77:16:49:fe:90:af:52:95:
d0:40:d0:2e:46:86:f5:72:f3:04:54:ca:9f:25:17:1f:8e:70:
e6:55:14:bd:35:4a:24:79:7d:88:c2:b9:7e:39:e7:a0:95:6c:
38:00:d1:55:53:f5:da:18:45:d0:36:01:32:f1:8d:a1:83:2b:
9e:aa:27:bf:8c:bc:98:a2:5f:73:1b:a2:e1:43:9d:c8:32:1b:
3a:4d:6a:41:d4:a1:96:89:fc:d7:02:d5:fb:69:67:2c:b7:69:
41:d6:aa:91:15:bd:1a:93:72:e3:84:9c:6f:1a:29:df:01:a1:
ae:01:12:df:79:0f:bf:ca:c3:ad:8f:d9:d7:20:84:06:4a:4c:
3b:69:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:58 2026 by rpki-client