Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json)
Hash identifier: DzrTDlVmQV2AWqvP7DpXe3OMbFpBr44S0IaiVfi+OH0=
Subject key identifier: 69:71:32:46:64:B7:48:FE:85:EA:BC:56:35:94:4B:B2:C0:58:FE:94
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 019F122E189E0186870DEF032F4B630A46AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
Manifest number: 1990
Signing time: Mon 29 Jun 2026 07:00:38 +0000
Manifest this update: Mon 29 Jun 2026 07:00:38 +0000
Manifest next update: Tue 30 Jun 2026 07:00:38 +0000
Files and hashes: 1: 1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa (hash: 0SuBxS+MypW7tQqS+Vd164UE3Mog6uZxtvRyTqxyy2g=)
2: 8GBhK3bVlRQOFAtixnhblw9dtz0.roa (hash: Elx4FHBwVZYgkm1JIeK2z2bzVgpOiK+svowb8d+03qs=)
3: Ht-3eU-6fA21qs34Bonv8BlzKi0.roa (hash: SHmXfuv30aA74yHYHAz5YiuGYylJVJgZptDN2Z9Awds=)
4: M3vHCHT8MYq7bsVbbMiGgchbam8.roa (hash: Vt7ldpmQRkv3Kb6ff/P1S+oxu1usav3SKm+fK1JHXSY=)
5: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: 10xVZ9KflYX8u2O0Qj/YLYRUPRqZmTzZ8WSpWDsAfAY=)
6: UWAb0Mm5ky6mNvfi8l5lub5PcCw.roa (hash: rcYFsRpcKR+N5ImKsmiN6lJZFUsiQQePgWTGn6uyHLE=)
7: ZRMiToWEQzG6WIi6m4AnOd1M7xI.roa (hash: 6fkAR/ISjaDTmwgbqQuKZzjyVceMiviNtBf9crcDMYs=)
8: gN7oLamPRPMjPSwPSMvoNLq_dFQ.asa (hash: qLlK7kYrvgqNdvLdGkjuKmzCcNXL51g9eu+D1a6NcGY=)
9: uZTTho6XgSigY6M7r_D1NX2DLSQ.roa (hash: ivw0GUSdmhcgSVLXWkL84Xd3MeIdECHj+xV2zfbtO/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:18:9e:01:86:87:0d:ef:03:2f:4b:63:0a:46:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jun 29 07:00:38 2026 GMT
Not After : Jun 30 07:00:38 2026 GMT
Subject: CN=6971324664b748fe85eabc5635944bb2c058fe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:ea:8d:b0:1f:ff:c6:44:1b:44:eb:cf:2d:
0e:be:74:57:dd:d4:f9:4c:47:b4:14:23:30:a0:59:
fe:9f:be:91:6f:a7:01:0e:ab:42:e0:4b:f7:2e:ef:
e1:96:51:e1:9a:f0:bc:e9:34:bf:5e:45:62:7b:74:
b5:8b:ad:3d:8e:bf:a7:7f:11:4f:bf:52:03:1e:6b:
ad:e7:ad:24:6f:48:a8:be:ff:cc:03:8b:dc:88:fc:
c9:84:af:f9:3c:53:ff:a7:18:54:11:63:8e:2d:05:
8e:be:01:20:25:78:10:2b:69:50:35:2c:68:93:a3:
73:57:19:60:e4:f9:cc:db:2e:cc:74:7e:26:ff:e0:
6a:bc:d9:10:7a:7f:d7:69:72:e4:2e:48:60:4e:a4:
ad:fb:fb:e3:ef:3f:63:86:b1:d4:fd:7e:ce:c7:41:
0c:78:3e:a7:7d:20:85:9f:a4:e8:92:a1:af:a5:0c:
fb:31:f9:6f:6c:a7:a1:c1:4e:8d:97:ed:7e:e0:9f:
96:99:1b:a3:bf:ed:5f:2c:43:34:de:44:36:d2:67:
c3:7f:2a:dc:37:c6:b7:3d:f3:23:99:e4:bc:1c:14:
78:a4:c9:ea:eb:35:14:39:25:88:96:ea:63:ca:0d:
c2:86:b5:50:c5:e1:81:35:62:57:6a:34:dc:3b:a6:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:71:32:46:64:B7:48:FE:85:EA:BC:56:35:94:4B:B2:C0:58:FE:94
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bb:3e:ed:a9:6c:2a:0c:1f:89:eb:92:b9:b9:62:06:b2:f5:
76:42:72:be:0d:87:26:ec:58:95:07:81:8f:4e:c2:69:88:54:
d6:b1:13:90:fb:4f:12:d6:a9:b1:4b:f4:7b:a0:19:40:25:c9:
6b:71:98:4b:7e:5c:52:95:72:ac:83:99:8c:d6:79:d2:76:a6:
5e:57:1a:de:63:07:c7:53:8f:fe:72:3d:4a:de:bc:2f:ef:ad:
58:2a:cf:62:31:18:45:b7:f1:7c:55:d8:9b:9a:59:9b:d2:7f:
c4:41:35:13:08:3e:e3:05:44:e3:06:6c:9b:14:cf:21:d5:8f:
0d:b2:4e:d4:70:7c:c9:31:e9:f7:e3:85:2b:1e:93:8e:38:85:
67:48:af:b3:66:f3:83:9c:54:fb:52:68:11:d3:02:38:11:14:
6e:b6:3f:b8:bb:59:79:6e:34:95:9e:df:2a:96:85:6d:a3:a5:
2b:75:f0:56:49:eb:9d:4e:96:c6:ca:65:70:cc:ea:5c:90:13:
6b:8f:0a:db:6a:fe:c3:77:71:e5:83:c6:87:dc:6c:71:4c:ed:
be:26:bc:fa:7c:f5:56:a8:35:9f:79:0f:c0:d4:35:60:97:f7:
bc:04:e9:f3:ea:c7:a5:43:9b:43:b7:a1:79:a1:5b:ab:41:b8:
18:58:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:42:30 2026 by rpki-client