Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: 1KBAh7X7fQ9PEM7staZP2xy8UTLcCoy0r4USAAp5D6M=
Subject key identifier: 85:58:6C:35:A3:AC:D0:7F:01:15:2E:44:F3:B2:89:49:82:F0:A6:12
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 01A169B56312327A3A91DE24A0849D13957D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 12AD
Signing time: Fri 23 Oct 2026 17:00:57 +0000
Manifest this update: Fri 23 Oct 2026 17:00:57 +0000
Manifest next update: Sat 24 Oct 2026 17:00:57 +0000
Files and hashes: 1: dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa (hash: VM5iSA8uwKH8wYL20uR8+pC8sXRM47ndx6laWeDwxAU=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: ueiiWB6gVXj4/P7boG1DSncncDWwWV0iaXfxMTuQixo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:b5:63:12:32:7a:3a:91:de:24:a0:84:9d:13:95:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Oct 23 17:00:57 2026 GMT
Not After : Oct 24 17:00:57 2026 GMT
Subject: CN=85586c35a3acd07f01152e44f3b2894982f0a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:c2:38:60:d4:7c:9c:34:a4:b7:30:ac:d4:
ff:df:4d:da:b6:8a:89:1a:85:09:c4:d7:f3:59:ab:
b7:e7:22:e8:6a:fc:86:ca:fd:1d:b0:a9:67:04:28:
99:3b:33:dd:04:c2:af:55:1f:77:2f:44:9a:2a:de:
be:00:60:6c:59:56:3d:dd:2f:c5:1c:7d:2c:3c:8e:
b8:ab:97:c1:dd:4c:15:67:6b:bd:26:cd:b3:9b:a8:
96:29:46:4d:c7:79:5f:97:7c:07:3e:d6:5a:48:fb:
e9:d1:5b:56:ec:23:9a:2d:59:f9:bf:0f:53:f8:f1:
e0:91:cd:ae:f6:85:ea:0b:04:87:b5:22:43:fc:9b:
c1:ee:38:b4:38:8a:61:dc:36:99:8c:1a:1b:b6:2e:
9e:1d:9d:f8:d6:89:8a:6b:0f:10:70:49:36:cf:02:
a6:30:cd:a4:71:6b:7d:15:a7:07:70:6d:56:84:32:
c8:2c:85:03:a6:55:e2:73:f9:5c:d3:83:3c:cf:d2:
d7:8f:a8:a7:82:a1:b4:22:b6:40:5c:82:a9:7c:eb:
46:27:d1:a6:94:e1:b4:4f:08:ef:27:0b:80:cb:10:
ae:8c:81:40:aa:48:09:20:b0:f2:7b:d7:ca:18:71:
c7:2e:fb:df:ba:3b:94:ed:df:69:9a:16:45:b5:77:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:58:6C:35:A3:AC:D0:7F:01:15:2E:44:F3:B2:89:49:82:F0:A6:12
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:86:f4:bd:b6:1e:02:ef:33:9c:49:28:bf:cd:95:bf:a5:c4:
dd:7f:5d:c4:f6:a1:60:9f:8f:9e:54:54:2c:ac:2d:81:c7:5a:
8b:68:ae:b7:be:93:ab:21:42:16:bd:ed:a6:b1:02:05:17:19:
58:36:16:f6:9c:a4:54:12:ad:7a:e0:9a:a2:c7:3d:e4:47:81:
48:4d:23:e6:82:50:d4:36:5d:d8:1e:6b:05:29:bc:7c:0a:88:
ef:25:4d:a2:c1:a3:08:e6:b8:2d:05:f4:18:7a:4c:9e:b3:1d:
93:1c:4e:c7:aa:a2:21:2c:70:da:b3:32:af:54:8f:06:91:2d:
e3:f2:a0:ff:6c:4a:b3:f4:b9:f0:95:82:ca:62:db:c4:bd:1f:
88:fb:07:57:3d:03:89:9d:75:c1:5a:03:a8:a8:6b:38:f7:f1:
38:a0:7b:c4:6e:c3:c6:15:2c:cc:0a:3a:f0:1d:67:47:ae:07:
90:91:03:79:5d:3d:f4:a1:de:f2:71:4c:a2:14:9b:0d:2c:40:
ab:0f:1b:d1:36:fc:bf:5d:93:39:ea:59:ab:85:02:77:2c:1f:
b5:41:0e:61:5c:db:fa:76:ea:a5:25:c1:3d:66:dc:72:7b:1f:
47:79:a6:df:bb:22:50:6d:e9:0a:e2:39:47:c1:0f:45:d0:a2:
bd:99:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:38:51 2026 by rpki-client