Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json)
Hash identifier: i/ilx8S9dqVvRbtfFk3F4xRaERd8WvpKDrElZ0le9Sk=
Subject key identifier: 3B:3A:6A:91:90:F7:96:BC:9D:B6:40:78:6C:6F:DF:32:16:82:1F:6F
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 019E1EDA5F32675590185CBDE2DDAA263E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
Manifest number: 1912
Signing time: Wed 13 May 2026 01:01:28 +0000
Manifest this update: Wed 13 May 2026 01:01:28 +0000
Manifest next update: Thu 14 May 2026 01:01:28 +0000
Files and hashes: 1: 1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa (hash: 0SuBxS+MypW7tQqS+Vd164UE3Mog6uZxtvRyTqxyy2g=)
2: 8GBhK3bVlRQOFAtixnhblw9dtz0.roa (hash: Elx4FHBwVZYgkm1JIeK2z2bzVgpOiK+svowb8d+03qs=)
3: Ht-3eU-6fA21qs34Bonv8BlzKi0.roa (hash: SHmXfuv30aA74yHYHAz5YiuGYylJVJgZptDN2Z9Awds=)
4: M3vHCHT8MYq7bsVbbMiGgchbam8.roa (hash: Vt7ldpmQRkv3Kb6ff/P1S+oxu1usav3SKm+fK1JHXSY=)
5: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: k88/sZR3sAXQ8PLehFw3wYmOJIl4g2N1oOwkstm8atM=)
6: UWAb0Mm5ky6mNvfi8l5lub5PcCw.roa (hash: rcYFsRpcKR+N5ImKsmiN6lJZFUsiQQePgWTGn6uyHLE=)
7: ZRMiToWEQzG6WIi6m4AnOd1M7xI.roa (hash: 6fkAR/ISjaDTmwgbqQuKZzjyVceMiviNtBf9crcDMYs=)
8: gN7oLamPRPMjPSwPSMvoNLq_dFQ.asa (hash: qLlK7kYrvgqNdvLdGkjuKmzCcNXL51g9eu+D1a6NcGY=)
9: uZTTho6XgSigY6M7r_D1NX2DLSQ.roa (hash: ivw0GUSdmhcgSVLXWkL84Xd3MeIdECHj+xV2zfbtO/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:5f:32:67:55:90:18:5c:bd:e2:dd:aa:26:3e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: May 13 01:01:28 2026 GMT
Not After : May 14 01:01:28 2026 GMT
Subject: CN=3b3a6a9190f796bc9db640786c6fdf3216821f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:fb:74:06:1b:4a:29:8f:41:d5:8c:08:76:
7a:b5:ae:6a:f3:61:33:ce:cc:cf:c0:9e:86:d9:ab:
1b:8c:4b:0e:47:9b:e9:db:89:50:3c:d8:10:2e:3d:
88:32:5d:ae:19:14:15:1b:b6:27:87:c5:3a:70:98:
52:db:3b:25:49:ee:8e:9b:cd:73:cc:57:1e:5e:28:
7c:5c:4e:08:5d:01:00:aa:03:31:86:53:ff:f7:db:
c0:8f:6f:39:42:9d:84:2c:c7:51:24:ef:88:d1:a2:
b0:0a:a6:1a:dd:5d:b2:17:75:88:98:5b:74:a0:dc:
c3:fc:a4:d7:d8:ba:e6:9f:ed:50:3a:55:b2:f1:87:
cd:b4:79:eb:1e:7e:a5:58:f6:71:0a:03:2d:cb:20:
d2:3a:66:1b:f5:59:42:37:d8:ea:9a:f3:3f:c3:82:
76:e3:44:be:1f:9d:55:db:4f:91:88:d6:40:7f:87:
bf:ba:26:2e:4d:10:9c:90:49:2a:e5:60:cf:b3:49:
a1:75:11:dc:b5:8a:a6:9b:c2:85:83:bc:5f:b0:d6:
5f:d4:61:08:92:89:3a:f6:8b:32:18:20:49:c3:77:
20:e1:08:7d:ce:58:cb:c8:31:28:54:a7:68:f5:c7:
cf:f0:29:d7:95:d0:09:9e:2e:33:5a:20:ab:6f:e8:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3A:6A:91:90:F7:96:BC:9D:B6:40:78:6C:6F:DF:32:16:82:1F:6F
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:72:1d:db:e9:cc:6c:58:b6:d6:08:e2:43:5d:55:91:fc:6d:
5b:c2:62:11:b5:09:73:3c:f9:6a:e3:40:96:86:40:03:d3:83:
d4:ec:d1:b1:4b:67:97:57:2c:80:e2:35:4d:c0:77:34:ef:9b:
71:2e:57:1f:da:ff:69:fb:c7:b3:2d:07:c1:fb:a2:4d:f8:63:
ce:f5:92:4c:64:50:17:d8:31:40:b5:fd:9c:d0:64:98:b3:e9:
fa:7f:02:fb:fb:70:bb:26:f1:4b:a0:94:d3:66:e8:ae:96:98:
6f:0f:c2:cd:a6:f9:ae:b3:ef:13:0a:d1:44:40:08:2d:87:29:
95:6c:90:9f:86:7f:cc:07:aa:f8:de:60:fd:cb:6a:ca:bc:3f:
a4:2b:e6:0c:bb:a2:77:95:25:e0:4e:72:18:0e:33:bb:58:18:
80:98:f5:fd:af:92:7b:6c:74:35:81:ad:2f:c5:71:88:be:6d:
84:a1:5f:86:15:e9:90:9f:02:a6:85:62:10:86:7c:50:db:6e:
59:64:44:21:bf:ca:65:98:38:cf:6a:bc:8a:d6:e6:f9:f8:9e:
ee:d7:56:02:1d:d9:84:b9:b6:3a:6b:b6:e7:ae:c6:1b:9b:f3:
27:d2:98:62:24:23:71:fd:e5:e0:54:8c:17:87:5b:14:7f:e2:
78:3f:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:39 2026 by rpki-client