Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: ZXPMx0O6Y8Mak0GEA85sxsPf8GOmUF2bdWQK8xLoFXo=
Subject key identifier: 61:52:E2:DE:3D:AF:E3:76:4C:15:F9:CA:77:D9:F8:1E:B9:B1:93:62
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 019F946DC6CF99BE77ED0BCBA2DA315CDE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 11BA
Signing time: Fri 24 Jul 2026 14:00:50 +0000
Manifest this update: Fri 24 Jul 2026 14:00:50 +0000
Manifest next update: Sat 25 Jul 2026 14:00:50 +0000
Files and hashes: 1: dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa (hash: VM5iSA8uwKH8wYL20uR8+pC8sXRM47ndx6laWeDwxAU=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: DExXn8+kyzEs6p8PDjFf+QjzmXkOXGS/6KDyea2y+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:c6:cf:99:be:77:ed:0b:cb:a2:da:31:5c:de:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Jul 24 14:00:50 2026 GMT
Not After : Jul 25 14:00:50 2026 GMT
Subject: CN=6152e2de3dafe3764c15f9ca77d9f81eb9b19362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:85:4a:d4:93:bb:48:a3:eb:a3:2d:32:45:42:
61:21:8a:80:db:d8:48:c3:bd:22:aa:32:44:d5:f8:
75:08:77:90:5a:c7:66:34:bc:74:ab:bc:61:86:fd:
78:d2:99:75:fe:1e:7d:d2:60:d5:3a:d0:cc:32:e9:
b6:d2:f8:5d:3a:77:2a:bb:02:b9:c2:e6:2a:43:91:
72:42:cd:f3:73:16:79:bb:a7:a3:dd:be:32:ab:50:
14:25:af:d4:97:99:a8:2d:05:70:d0:c8:22:f1:63:
6b:fd:d6:b3:c5:61:c4:d4:07:1b:39:28:18:a6:b7:
34:d0:a5:98:bc:21:5f:29:b7:6e:00:61:99:ff:65:
bd:5f:d5:d7:ab:6b:be:9c:3d:41:1d:14:f2:bf:64:
f4:2d:d1:cd:96:38:75:b4:df:87:ef:8d:58:4d:60:
5c:2f:9f:56:73:c2:2c:4b:b7:75:d3:c4:12:cb:7e:
1e:d3:97:9b:e8:76:b9:16:de:37:5f:a7:ee:ee:81:
1d:11:2d:95:42:82:4d:22:ec:a4:11:64:7a:aa:f9:
07:fd:e7:6c:e0:3c:b5:13:67:40:3b:ef:ab:98:8d:
7a:32:99:88:e5:0e:29:4f:e2:1b:8d:31:54:ee:6c:
fc:59:51:b4:e1:c7:51:db:73:be:e0:7c:59:65:6e:
07:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:52:E2:DE:3D:AF:E3:76:4C:15:F9:CA:77:D9:F8:1E:B9:B1:93:62
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:71:6d:35:ce:d9:52:b8:39:8b:25:10:52:be:ea:86:b4:8f:
82:4a:80:36:08:6b:2f:d8:67:87:9b:b9:11:b9:a5:18:45:94:
2e:ac:fe:b5:e4:b9:27:9f:ad:87:68:4c:95:a7:50:fb:67:16:
6c:3e:06:5e:56:98:57:16:a3:65:fb:1f:71:25:46:b0:a5:a2:
eb:1b:e1:7e:e0:d8:74:87:b9:b0:03:9f:e5:08:40:ac:03:2d:
5a:10:9b:af:3c:58:f4:9f:a7:43:57:82:9d:78:d6:ba:e2:72:
2f:18:7e:4a:53:c0:ef:29:1e:82:ff:43:a1:31:75:90:80:f4:
7c:30:f0:0c:c6:0c:11:f8:0c:79:56:0f:b0:4f:66:a6:ad:e7:
8b:6d:bb:dd:81:31:e2:a0:f1:9f:86:f2:9a:f6:5f:df:eb:5f:
1b:f4:8d:a3:d0:d3:66:a6:0b:70:1c:0b:4a:39:d3:f3:29:40:
44:60:95:74:16:85:90:2b:63:8d:92:90:2f:f0:4d:37:86:9a:
de:e1:a5:f8:52:c1:0e:d7:5e:06:d0:75:83:d0:40:4b:34:df:
a6:01:8c:a2:7a:89:1a:5d:09:7f:05:6d:bf:27:02:c6:fc:a3:
e1:98:a7:fe:4c:6f:49:a0:08:41:90:09:16:0c:bc:5e:3e:d0:
f8:1d:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:39 2026 by rpki-client