
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: VD8ehrrPe+qJXKUm6J0krY8aH1JiJ2aKqfK9CmIJKG4=
Subject key identifier: 8D:56:C5:5F:AA:6E:52:67:50:31:CE:7A:DA:F3:59:EB:DA:55:DA:99
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019EBEB647A20A5EBD4BBBD801FA899DFA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 0A3F
Signing time: Sat 13 Jun 2026 02:01:17 +0000
Manifest this update: Sat 13 Jun 2026 02:01:17 +0000
Manifest next update: Sun 14 Jun 2026 02:01:17 +0000
Files and hashes: 1: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: A4KCM3gj44IojOYzfgFqe2AGDWo+Vx9a/F+va/UaT/Y=)
2: eyPCCf2ZrNhsfHlGdwgwdQRwkmY.roa (hash: vFjoF02EXTWhJwtW01TNqh4eG++hwP/SJijut4DjC9Q=)
3: vzbqwyfkwTMuJSFJNHC04C2HwL8.roa (hash: vTVicy0euW6tSlGu6K2CtnvRiV0T/ffczunpGmAUAbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:47:a2:0a:5e:bd:4b:bb:d8:01:fa:89:9d:fa:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Jun 13 02:01:17 2026 GMT
Not After : Jun 14 02:01:17 2026 GMT
Subject: CN=8d56c55faa6e52675031ce7adaf359ebda55da99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:e3:df:3b:d8:18:f3:7a:f2:c1:d8:c5:67:
ce:db:47:75:d0:1f:27:00:62:a7:68:ce:6b:a5:a5:
cc:1c:29:24:2d:4a:3d:80:58:23:64:82:66:83:55:
a0:0d:49:a3:ba:f7:00:5f:00:6c:d0:df:af:fc:01:
ba:74:35:a3:eb:77:2f:0d:45:82:a8:85:21:71:c9:
85:50:de:6c:ae:e4:93:73:89:0e:46:2b:21:82:72:
fd:f2:c4:60:61:c2:1d:33:d1:52:dd:c8:93:19:0c:
cd:2a:90:d3:71:49:6a:af:b3:c1:89:54:6a:ca:66:
f3:f4:d0:a0:cf:35:d2:bb:8f:70:ad:05:f4:d2:0f:
b1:f9:84:d4:78:5a:78:7e:8c:c0:ef:53:38:e9:ee:
dd:c4:f4:78:10:0e:3a:bd:63:fd:e7:f1:07:57:61:
9e:2d:85:e4:36:15:05:a8:63:e1:cb:5e:53:e9:d8:
50:35:78:d1:27:53:0c:2b:d9:ec:64:1d:f1:82:20:
f9:de:8e:a7:48:92:ac:08:11:de:b4:8b:52:ab:75:
45:f9:07:4b:f9:90:4b:4b:9c:50:51:a7:b8:39:4f:
0f:a4:36:48:c9:4c:42:49:8c:e0:9e:12:d8:47:d3:
19:2f:91:e8:cb:78:d5:22:8e:2b:8b:92:33:e2:17:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:56:C5:5F:AA:6E:52:67:50:31:CE:7A:DA:F3:59:EB:DA:55:DA:99
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6a:0d:5a:56:3e:89:d6:c0:4f:43:b6:eb:7e:ba:70:26:13:
7e:b9:e9:a7:ec:50:c1:2f:d3:a9:6d:f0:3c:78:50:66:96:03:
9b:d5:7d:ba:25:49:cf:90:61:3c:01:da:23:99:44:76:1b:9f:
42:88:70:96:a2:8a:ac:43:a9:c8:8b:78:f0:0d:8e:5c:d9:8a:
e5:40:7f:81:8e:eb:f0:43:d2:d9:65:ff:7d:38:4b:51:4e:7a:
21:b7:8b:9a:a4:08:6d:68:3a:34:9e:56:46:b9:43:dd:f1:86:
10:2b:36:92:d8:8f:ac:4c:0c:43:db:07:76:f0:cd:c3:c8:31:
68:5d:cc:6f:7b:3d:ee:f2:d8:c0:71:0d:cc:84:8c:73:f9:21:
a7:1d:ea:1e:6d:ac:76:6d:a0:96:72:03:e8:39:34:d0:da:8b:
af:04:1d:f9:af:7c:75:84:f3:9b:05:37:3f:8c:f8:ca:c8:81:
6e:5e:dd:44:77:3a:27:ca:1a:5a:e9:1a:8e:08:5e:07:2a:67:
54:0a:d8:d6:b0:95:b4:7f:54:3c:d1:5c:a6:18:ff:01:fc:ed:
88:d3:9f:97:ea:a2:1a:9d:69:4e:d8:79:67:f2:22:8d:f1:0b:
a0:10:5c:85:63:c6:29:9c:e4:db:01:1a:84:d3:a9:99:79:27:
9b:98:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:08 2026 by rpki-client