Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
File: osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft (raw, json)
Hash identifier: 6CdDXBufrLVRi+DFhhVGvd/T7ZqwkjoP7/DTNKx1GKA=
Subject key identifier: C4:E8:F2:AE:0C:DD:B1:8A:BF:40:BF:8A:BE:D2:4A:1C:42:2B:03:7A
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 019D2A04AF7B7BD5CEBBF944294AC8A2B0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 12:00:43 +0000
Manifest this update: Thu 26 Mar 2026 12:00:43 +0000
Manifest next update: Fri 27 Mar 2026 12:00:43 +0000
Files and hashes: 1: 6pgIGLkDK4SsPvd5O6nkCW0Aieg.roa (hash: e5J3SLEEVC0bCn42X4/k+intNwPoXVhopRIC0Xq8ZiQ=)
2: osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl (hash: to8kawqwVZ1HPjd8GgTx4AUtnE2qkNRX8KmiFCMI9Jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:af:7b:7b:d5:ce:bb:f9:44:29:4a:c8:a2:b0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Mar 26 12:00:43 2026 GMT
Not After : Mar 27 12:00:43 2026 GMT
Subject: CN=c4e8f2ae0cddb18abf40bf8abed24a1c422b037a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:5d:9b:dd:c5:9f:aa:9e:a4:d8:5d:e1:56:
cc:fe:02:43:7a:3a:c6:21:83:33:a1:50:bf:3b:80:
26:fc:f2:f0:32:3d:3e:4e:93:88:b7:8f:13:07:e4:
60:6f:59:ca:84:62:a2:2d:fd:7a:76:05:ad:58:69:
8e:58:16:b2:98:49:f6:ca:4b:1d:50:d3:fa:ff:20:
ec:58:ee:e4:33:27:63:0e:14:9e:0a:fa:2d:94:e1:
23:9c:2f:8e:65:7b:41:52:ed:8b:31:da:2f:97:c0:
45:2c:84:36:ee:85:5d:e8:6f:3e:fb:78:34:b4:dc:
14:38:48:13:fd:f2:14:21:53:5b:a5:c0:89:db:56:
56:c0:b7:8a:04:fc:75:ed:de:66:b0:b8:48:2f:9e:
ec:7a:87:4b:c5:be:0e:7b:ea:96:77:90:1c:bb:4f:
bc:54:8d:7c:12:74:4d:c7:86:7f:fb:e6:94:28:9b:
81:bc:86:a3:5a:ab:5f:68:8a:a2:ae:33:4b:b8:7b:
79:dc:04:59:6c:35:c5:ad:e8:85:17:06:8d:06:dc:
24:a6:42:85:7b:9b:b2:fa:be:d8:22:58:2e:5f:72:
80:21:1b:e9:0a:8e:18:05:86:30:38:4b:18:fe:9c:
66:22:f5:be:dc:3f:30:3e:ab:29:ac:4c:48:cf:6f:
b3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:F2:AE:0C:DD:B1:8A:BF:40:BF:8A:BE:D2:4A:1C:42:2B:03:7A
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ea:18:f2:16:ee:6a:d8:62:ad:d2:ea:8e:2c:3c:d5:79:09:
67:c7:ae:9d:50:24:ac:d2:e9:37:91:6a:15:0c:bb:89:25:73:
7b:ea:de:10:29:13:6e:7c:61:a8:06:37:19:83:70:b7:55:95:
57:c5:07:9e:8f:27:a7:aa:82:4c:33:6e:36:0b:f4:92:97:a8:
0b:df:02:29:a2:e4:1b:f1:c9:13:87:db:aa:88:3a:b0:00:f5:
f5:83:14:33:56:1d:aa:28:cc:6a:e4:ce:b1:c6:fe:23:c7:08:
3d:ba:74:43:46:f4:5a:b3:e8:3f:cf:0d:d4:51:a0:ae:30:b8:
fa:38:66:79:b5:e0:8c:70:bc:c2:02:88:cb:70:22:72:df:a2:
3c:54:94:cb:d2:43:8d:f3:d8:0c:1b:58:5c:b5:94:78:86:84:
ce:26:9e:89:2c:97:12:ac:6f:e9:65:88:db:c7:fd:d4:e8:b7:
c2:f3:b9:31:82:f7:27:64:93:31:c6:a8:4f:94:62:51:15:67:
b8:11:98:9c:58:b6:ab:b2:83:72:94:c6:93:89:69:fe:ef:4e:
9d:b6:94:0b:23:70:fd:ce:23:7c:14:40:54:cf:66:09:e6:7a:
73:c3:51:24:0f:1a:36:85:6f:08:10:f5:f1:59:25:67:67:f3:
3d:a6:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:00 2026 by rpki-client