Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: z6ssJbuUv9Zg0y2u8ohmgXjJCR0OU/wW1jmVrY5qKKg=
Subject key identifier: 2F:FE:78:31:B6:ED:A8:13:0D:63:75:2E:D5:D9:C2:BA:F0:2B:8B:8D
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 019D3789688DCD4EA82C80D1E476E202D6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 03:00:45 +0000
Manifest this update: Sun 29 Mar 2026 03:00:45 +0000
Manifest next update: Mon 30 Mar 2026 03:00:45 +0000
Files and hashes: 1: 6pgIGLkDK4SsPvd5O6nkCW0Aieg.roa (hash: e5J3SLEEVC0bCn42X4/k+intNwPoXVhopRIC0Xq8ZiQ=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: EruYIGQYqAxs4X/oqwWopinXKZpRXQRNC+Y6zg+uxWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:68:8d:cd:4e:a8:2c:80:d1:e4:76:e2:02:d6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Mar 29 03:00:45 2026 GMT
Not After : Mar 30 03:00:45 2026 GMT
Subject: CN=2ffe7831b6eda8130d63752ed5d9c2baf02b8b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:5a:b4:ce:a4:5d:8e:b6:da:48:c9:d5:50:
5f:81:b7:ac:e1:99:ae:ea:52:27:36:04:ca:a9:ab:
8d:c0:c2:01:2c:6a:92:9d:01:20:46:2d:5e:5d:ed:
91:0b:7a:9d:72:56:be:81:e0:53:d0:a3:bf:80:8c:
40:00:2b:2c:21:35:fd:db:f3:1c:f5:47:2c:17:ad:
ce:0b:ef:c5:64:e7:df:94:c7:1c:9a:3e:32:ee:45:
40:c7:db:c9:15:5e:d5:31:17:96:70:af:c6:ad:7d:
ce:51:77:c8:ff:28:a7:a4:77:48:4c:07:92:75:bd:
0a:e6:8f:ef:2a:dc:1d:91:85:db:07:3e:5e:4e:71:
a2:84:49:1c:77:a0:62:da:93:e4:d5:ba:40:c7:7e:
00:2a:91:74:43:c5:27:ca:f3:9b:9b:84:23:45:40:
8a:bc:7c:b0:ce:b7:22:dc:27:07:72:42:8e:5e:bc:
ad:49:f8:7c:11:54:dc:e4:7d:0b:e7:08:74:ae:c2:
71:aa:cd:8e:a0:a2:47:91:73:88:44:39:96:3a:e2:
af:e2:a0:53:87:4d:bd:69:9f:63:bb:5a:47:af:83:
d8:d3:2d:91:b9:e7:9b:a0:56:18:e3:6d:e6:f5:47:
6a:77:78:3b:94:e9:93:54:79:3f:88:f4:d0:8c:f7:
38:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FE:78:31:B6:ED:A8:13:0D:63:75:2E:D5:D9:C2:BA:F0:2B:8B:8D
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:90:ea:87:7b:19:7a:e7:ff:4b:51:d7:b1:ba:4e:fa:a4:b1:
80:08:ea:d1:98:cf:46:d5:7d:d1:ee:89:09:cf:e2:04:ae:bb:
87:22:cf:67:ed:54:ee:e9:08:d9:be:6f:ff:49:d3:ef:d8:6b:
4d:7f:60:aa:21:28:9a:0b:b6:ea:fa:79:f1:3d:8c:69:fb:f3:
0d:26:58:bc:b0:21:ca:0c:25:06:d7:af:ac:75:f9:7f:f8:a8:
d7:1e:27:04:3a:a3:46:7b:4a:06:0d:54:99:ae:65:aa:74:06:
01:7f:78:9e:d7:69:7b:ed:98:87:ee:8c:b8:f2:13:43:63:f1:
33:84:11:be:7b:5b:de:d6:45:f1:47:c0:c4:8a:e8:4b:33:67:
43:12:66:34:85:8b:e5:46:e2:36:8b:fe:70:38:ef:b1:06:5f:
87:33:89:af:98:1b:90:d3:6e:76:31:8e:09:6b:29:68:2e:ce:
51:23:0b:03:2b:da:47:82:c5:f3:dc:74:93:e8:8d:b9:1a:1d:
51:ce:b6:75:de:65:0f:dc:92:c1:d8:4b:24:2c:ed:c4:64:28:
bd:38:ea:22:dc:66:6b:80:9f:a7:d0:f4:78:ad:08:38:01:ee:
a0:f3:e8:0e:b4:ff:23:50:38:31:98:8f:d3:9e:7a:8f:bc:24:
a0:bb:56:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iWiNzU6oLIDR5HbiAtatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyY2JlOWFiYTFmZjc1NjRkOTEzZWQ3ODY3MmUzMzcxYjdm
MzU4MjQwHhcNMjYwMzI5MDMwMDQ1WhcNMjYwMzMwMDMwMDQ1WjAzMTEwLwYDVQQD
EygyZmZlNzgzMWI2ZWRhODEzMGQ2Mzc1MmVkNWQ5YzJiYWYwMmI4YjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB1atM6kXY622kjJ1VBfgbes4Zmu
6lInNgTKqauNwMIBLGqSnQEgRi1eXe2RC3qdcla+geBT0KO/gIxAACssITX92/Mc
9UcsF63OC+/FZOfflMccmj4y7kVAx9vJFV7VMReWcK/GrX3OUXfI/yinpHdITAeS
db0K5o/vKtwdkYXbBz5eTnGihEkcd6Bi2pPk1bpAx34AKpF0Q8UnyvObm4QjRUCK
vHywzrci3CcHckKOXrytSfh8EVTc5H0L5wh0rsJxqs2OoKJHkXOIRDmWOuKv4qBT
h029aZ9ju1pHr4PY0y2RueeboFYY423m9Udqd3g7lOmTVHk/iPTQjPc4ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/+eDG27agTDWN1LtXZwrrwK4uNMB8GA1UdIwQY
MBaAFKLL6auh/3Vk2RPteGcuM3G381gkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzkt
ZGYzMjRjNGM2ZWVkLzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzktZGYzMjRjNGM2ZWVk
LzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5Dqh3sZ
euf/S1HXsbpO+qSxgAjq0ZjPRtV90e6JCc/iBK67hyLPZ+1U7ukI2b5v/0nT79hr
TX9gqiEomgu26vp58T2MafvzDSZYvLAhygwlBtevrHX5f/io1x4nBDqjRntKBg1U
ma5lqnQGAX94ntdpe+2Yh+6MuPITQ2PxM4QRvntb3tZF8UfAxIroSzNnQxJmNIWL
5UbiNov+cDjvsQZfhzOJr5gbkNNudjGOCWspaC7OUSMLAyvaR4LF89x0k+iNuRod
Uc62dd5lD9ySwdhLJCztxGQovTjqItxma4Cfp9D0eK0IOAHuoPPoDrT/I1A4MZiP
0556j7wkoLtWzg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:25 2026 by rpki-client