Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: +Y0U9aoAv9ZvWxqFzN1ARZ/AxBv2GMcUWIgBeuuBn4I=
Subject key identifier: BB:98:67:3B:81:A9:7E:F5:26:30:79:90:18:7A:C5:58:66:A2:BD:F3
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 019E1FB58FFD2A5202967203AE98B7A442C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 10F9
Signing time: Wed 13 May 2026 05:00:53 +0000
Manifest this update: Wed 13 May 2026 05:00:53 +0000
Manifest next update: Thu 14 May 2026 05:00:53 +0000
Files and hashes: 1: dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa (hash: VM5iSA8uwKH8wYL20uR8+pC8sXRM47ndx6laWeDwxAU=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: eaofb1lW4AIC2HqSNqI12+TYC3kQowHV64laCnm6VfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:8f:fd:2a:52:02:96:72:03:ae:98:b7:a4:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: May 13 05:00:53 2026 GMT
Not After : May 14 05:00:53 2026 GMT
Subject: CN=bb98673b81a97ef526307990187ac55866a2bdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:48:61:8f:c9:9a:02:14:03:9f:aa:9e:ec:
ab:8d:e2:28:b3:05:47:15:74:9d:76:3f:89:64:ed:
69:1a:c7:db:cf:c4:33:5c:8a:b2:3a:69:d3:3b:87:
0a:ed:cc:5f:99:22:b7:5a:c1:2c:aa:7a:c5:ce:04:
29:ec:76:c4:6b:1e:35:31:f7:95:7a:31:76:1b:83:
e2:ec:dd:85:d6:f2:63:0e:53:af:3a:f7:2d:6c:5a:
4c:26:66:07:e0:1b:81:dd:8e:82:22:e0:65:18:ea:
5a:61:6b:c4:a4:96:5b:a3:03:04:79:5b:bd:9c:51:
56:43:ab:ba:b0:4e:4a:55:ec:3b:0d:3a:24:ed:d0:
4d:c9:f9:2d:f9:e4:dc:1e:5e:74:64:30:27:02:94:
3c:f2:9c:c8:c0:52:ff:48:c7:93:3f:72:0f:95:43:
48:33:96:df:52:07:ef:5d:d3:59:2c:7b:60:40:72:
5b:81:b9:07:6e:77:c4:7f:86:e5:af:7d:cf:6c:64:
2f:60:fa:53:72:68:3e:ba:bd:28:06:27:1b:5c:da:
c6:d9:ab:a1:ff:55:ec:75:66:cf:16:a2:42:48:ef:
45:fa:36:47:07:d2:8d:93:97:0c:8a:ca:75:90:24:
ed:ef:ca:5b:5f:f6:62:9c:87:de:12:2c:f8:51:13:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:67:3B:81:A9:7E:F5:26:30:79:90:18:7A:C5:58:66:A2:BD:F3
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4a:35:b9:8b:47:0a:58:9c:01:81:4c:a6:93:5b:03:ec:fc:
d1:b6:db:b0:30:c6:49:af:7b:cd:bb:5b:1a:7b:01:7e:07:06:
d8:fd:6e:42:7c:c3:54:c3:1e:d4:15:38:82:df:e5:77:68:ec:
c1:a3:62:bc:42:4b:4a:e3:54:fe:5d:0e:04:74:73:c4:53:41:
b3:6e:2b:77:1e:19:08:e7:d1:15:ce:d4:1c:eb:05:2b:ff:7a:
70:01:1c:8d:64:15:a3:a5:91:e3:f2:3b:ec:be:fb:fb:1b:8a:
6a:f1:60:8a:0e:fc:12:2c:ca:98:45:76:b3:06:91:33:89:df:
41:46:13:a5:96:c2:ff:ed:4f:c8:39:3e:db:e0:cb:df:9c:99:
8e:f2:ab:28:6e:cb:18:7a:38:35:fb:71:66:0f:70:a7:88:e5:
5c:cf:ac:6a:15:d2:20:03:68:75:a2:22:fe:4d:d7:25:de:4e:
99:7c:27:65:b3:f4:54:6f:31:48:e1:2e:a2:d5:4d:60:7c:9a:
e0:06:28:ac:1f:05:32:29:4e:e8:c0:0a:86:9c:08:ea:93:d7:
14:94:23:bf:a5:27:f2:0e:b7:48:bd:7c:cb:9a:8b:e1:20:33:
b6:88:b0:2f:05:da:97:f3:9b:55:40:eb:d6:1f:31:13:de:3d:
68:23:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:53 2026 by rpki-client