Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: 7STtkTsvJfW4iQFjFmhgXLtaU7O7RjcqoN0Z8kXZ0CE=
Subject key identifier: 12:A8:BE:33:3E:B7:08:75:EF:08:FF:AC:D7:72:91:CF:90:FB:EC:6D
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 019E3117EA136687B23D02228EE8619FF0B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 1102
Signing time: Sat 16 May 2026 14:01:51 +0000
Manifest this update: Sat 16 May 2026 14:01:51 +0000
Manifest next update: Sun 17 May 2026 14:01:51 +0000
Files and hashes: 1: dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa (hash: VM5iSA8uwKH8wYL20uR8+pC8sXRM47ndx6laWeDwxAU=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: YXJFMSaG64gwzRuBHVpinwUgdxFrs5+mCCtexzsWPh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:ea:13:66:87:b2:3d:02:22:8e:e8:61:9f:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: May 16 14:01:51 2026 GMT
Not After : May 17 14:01:51 2026 GMT
Subject: CN=12a8be333eb70875ef08ffacd77291cf90fbec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:90:d2:2e:c3:74:21:9f:1f:d9:56:5b:c6:
cd:38:af:d7:c3:9f:4d:24:e9:fb:c5:f3:b0:8a:d4:
55:ee:d7:d3:d5:44:0c:22:97:41:26:2e:b6:e2:26:
11:06:37:4c:8d:24:01:50:4c:02:ea:a7:83:ed:9d:
91:f2:b6:3a:3d:64:f8:47:06:e5:e6:7f:5f:f1:98:
43:aa:d8:ee:4f:d0:49:77:5d:1b:54:5f:68:de:d8:
56:c6:d7:c4:4b:b0:6e:8c:2f:6a:db:e3:f7:8c:52:
80:af:e4:7f:e4:5b:db:d1:64:50:f8:9c:92:ed:26:
fc:e9:76:11:20:9b:98:e1:99:36:4e:fd:49:5a:af:
98:9f:f5:d6:3a:2e:b5:b4:c1:11:53:6c:2d:bc:35:
83:58:e0:69:21:10:8e:e8:f1:7e:44:bc:d8:a8:4f:
84:f8:a4:dd:cc:3c:7d:e5:8b:c9:36:cf:c1:5d:fa:
9e:86:e3:37:22:fd:c6:5a:84:da:26:2d:4a:14:27:
4f:5c:94:d3:1d:90:79:ee:04:15:29:63:c5:5a:61:
5c:0e:ad:52:73:ef:71:4e:2d:d6:39:3a:02:aa:3a:
a2:d6:d7:5d:05:3d:4e:9f:80:b3:45:d3:fe:7c:e8:
f5:51:94:45:27:eb:8c:d1:53:89:9d:e7:42:b8:73:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A8:BE:33:3E:B7:08:75:EF:08:FF:AC:D7:72:91:CF:90:FB:EC:6D
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b1:a5:91:cd:6e:9c:91:1e:1b:41:d4:52:a5:26:35:5b:ae:
6a:cb:15:a7:da:4d:10:05:38:de:f3:07:f3:d9:10:2e:dc:b0:
af:c5:54:ad:ef:13:10:34:f4:ef:70:d3:d3:c3:69:75:a9:51:
51:b8:5d:a3:f0:b1:cb:84:d0:1e:52:ab:66:b4:bb:f5:f5:92:
a7:d0:c2:ec:3a:42:d9:e2:dc:20:e0:9c:fc:e9:ce:b8:e9:0a:
3b:ca:78:fd:34:15:3a:bd:e6:a9:45:fa:83:ef:7f:84:dc:8f:
48:7c:46:cd:fd:a4:12:51:62:dd:a0:5a:af:91:f3:94:1a:ee:
7c:ba:83:14:48:52:8a:dd:f8:b6:9b:25:b9:40:9e:0b:c1:6a:
d7:6c:fa:66:35:86:16:ce:b8:ae:aa:69:b2:e0:1e:a5:f8:24:
08:84:23:19:75:8f:60:c7:01:22:a6:38:26:84:5e:7a:0e:cd:
16:b2:e9:36:83:82:30:2e:74:ef:a1:e8:75:56:a0:1f:07:45:
8f:8b:01:6f:a5:4f:fd:d1:7c:c1:d8:9c:e5:be:34:c5:2d:9e:
c5:45:c1:45:ef:cb:be:c2:44:9c:a8:0a:cc:de:73:c0:e5:9a:
43:cf:d0:dd:48:36:ae:f1:e7:89:46:d4:f3:c5:53:8d:d8:d7:
82:ac:f0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:47:20 2026 by rpki-client