Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: ndp/CbuyP+rVSrmA/YD7w71nXVdQewDInPMs4rXYtrQ=
Subject key identifier: 8D:32:E4:48:11:D8:27:71:B8:1A:AA:0B:AB:2E:55:00:17:78:00:2C
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 01A17C28FA5EB38490DCE9F548272056490D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 07:00:22 +0000
Manifest this update: Tue 27 Oct 2026 07:00:22 +0000
Manifest next update: Wed 28 Oct 2026 07:00:22 +0000
Files and hashes: 1: QdCCFy0Che3zQ-ePH2OEt46GxG8.roa (hash: uUeKh+S8JSSLHm2QW0yzdqWBVQgBt2ppseQ+0eEMG+I=)
2: nBuGkgnRBT8Qjm-TUyDH9_cSUdU.roa (hash: h48y87G6eR9F9kAAK7RxKWZLvvNL/xDbVjxHO1JHOG4=)
3: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: g1ngP6aWBWk6UTBOgkJfKl8bhWLf6gT7fVx5zXY7Ol4=)
4: wRhyCIvuKiaEK5AlW4LAprlcyto.roa (hash: /I8FFaaDLJ/GnVybrc/DmyRULq5DViEzBfBe953Kypo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:fa:5e:b3:84:90:dc:e9:f5:48:27:20:56:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Oct 27 07:00:22 2026 GMT
Not After : Oct 28 07:00:22 2026 GMT
Subject: CN=8d32e44811d82771b81aaa0bab2e55001778002c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:b7:be:e0:49:6f:a8:4e:b5:fd:1d:45:de:
73:d1:af:3a:00:ff:65:d0:7a:77:ce:4c:c1:b8:d0:
53:50:75:6e:c1:ca:3a:5a:cc:ef:47:85:51:22:e3:
44:42:27:64:14:2f:f4:9e:e1:b4:44:4a:ea:c4:9e:
81:dd:71:21:a4:2e:c4:cb:d0:78:93:1a:e9:fc:b8:
fc:97:00:6e:91:79:d3:7b:88:41:ba:1f:fa:55:04:
d5:1b:b9:9e:62:7b:27:eb:05:d2:dc:e0:9f:f5:23:
7f:f1:b9:d8:2a:c6:29:74:6a:ea:58:e7:fa:1e:63:
b7:0d:e0:5c:16:a5:3b:64:78:54:2a:b5:7d:67:87:
0c:ec:7b:1c:85:9d:de:b5:7f:6a:df:63:5c:89:07:
92:77:cc:7c:78:f7:ab:4b:3c:ca:11:ba:db:a3:38:
05:35:fd:77:db:a4:65:4f:28:27:77:f2:a4:c7:8a:
09:db:61:7d:62:85:10:e2:cb:98:7d:77:9e:a5:ed:
81:30:c7:7c:51:11:c9:44:12:79:47:b4:cd:12:e5:
d9:be:5a:06:1a:8f:41:cf:5c:64:ab:ab:ac:bf:fc:
d9:3c:a9:81:ca:61:3d:e4:22:86:03:01:1b:2f:49:
75:07:82:e2:15:e4:3d:5b:89:c9:b2:57:13:d9:bd:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:E4:48:11:D8:27:71:B8:1A:AA:0B:AB:2E:55:00:17:78:00:2C
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:28:4c:39:23:74:39:9d:34:ec:37:f6:0a:55:0e:e6:37:ff:
e2:b1:5c:8d:33:72:39:df:d3:99:fa:3f:7d:33:24:bd:c7:91:
a7:a4:ad:a4:c4:f2:97:04:2b:f2:65:02:c5:63:f4:a6:52:90:
a8:30:a6:a3:ae:53:be:3c:e0:e9:30:64:b3:ff:7d:47:7c:2d:
91:18:dc:bb:ae:ef:bc:00:ae:f0:16:ce:fc:d9:31:97:ab:c5:
7f:56:77:9b:34:48:ab:5d:cc:df:15:54:3c:b5:03:59:ca:16:
11:2d:0d:38:1a:d0:e2:c8:ba:b4:07:b5:eb:cb:4e:fa:d9:5b:
8d:2d:e0:2e:43:95:55:e9:c8:e6:ef:44:32:b0:41:eb:78:3c:
b3:47:89:a4:83:07:0e:c9:bf:f4:ec:71:a5:82:2c:90:25:2d:
db:ff:63:5a:12:c4:43:68:3a:c7:08:c0:78:c1:28:b3:21:d8:
5d:04:9b:b8:d6:85:cd:02:eb:94:25:01:74:fb:ad:07:25:1a:
33:63:bd:d6:bc:80:2d:08:f3:af:2e:99:0d:c5:b8:c6:8d:4e:
d3:55:f0:a2:ce:05:8d:fb:2e:ab:25:94:4b:a6:da:fe:fc:70:
1a:ae:94:c6:2b:57:70:5f:f2:6c:51:56:83:71:9e:56:29:52:
08:d4:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:07:32 2026 by rpki-client