Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json)
Hash identifier: Ic82H4IxBvLTvsYassQHOOvIM9LN4pIM6VrG5RjEJtI=
Subject key identifier: CB:EF:53:95:06:1D:16:74:55:A4:A4:F0:79:9B:3F:7F:08:01:AD:23
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 019F8EA25906168E1E0761252B77A42A92BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
Manifest number: 19D1
Signing time: Thu 23 Jul 2026 11:00:31 +0000
Manifest this update: Thu 23 Jul 2026 11:00:31 +0000
Manifest next update: Fri 24 Jul 2026 11:00:31 +0000
Files and hashes: 1: 1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa (hash: 0SuBxS+MypW7tQqS+Vd164UE3Mog6uZxtvRyTqxyy2g=)
2: 8GBhK3bVlRQOFAtixnhblw9dtz0.roa (hash: Elx4FHBwVZYgkm1JIeK2z2bzVgpOiK+svowb8d+03qs=)
3: Ht-3eU-6fA21qs34Bonv8BlzKi0.roa (hash: SHmXfuv30aA74yHYHAz5YiuGYylJVJgZptDN2Z9Awds=)
4: M3vHCHT8MYq7bsVbbMiGgchbam8.roa (hash: Vt7ldpmQRkv3Kb6ff/P1S+oxu1usav3SKm+fK1JHXSY=)
5: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: 6OAHqS6hoUwwswKJlJAxifXKHdXBWTfCGP7Gb/7ZLfI=)
6: UWAb0Mm5ky6mNvfi8l5lub5PcCw.roa (hash: rcYFsRpcKR+N5ImKsmiN6lJZFUsiQQePgWTGn6uyHLE=)
7: ZRMiToWEQzG6WIi6m4AnOd1M7xI.roa (hash: 6fkAR/ISjaDTmwgbqQuKZzjyVceMiviNtBf9crcDMYs=)
8: rYS7w8wnF_-j44c8j1WfgKjtKKE.asa (hash: n450hohXx2pz0sqF43zAXBZOksnxUdKDcqwLQe9av18=)
9: uZTTho6XgSigY6M7r_D1NX2DLSQ.roa (hash: ivw0GUSdmhcgSVLXWkL84Xd3MeIdECHj+xV2zfbtO/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:59:06:16:8e:1e:07:61:25:2b:77:a4:2a:92:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jul 23 11:00:31 2026 GMT
Not After : Jul 24 11:00:31 2026 GMT
Subject: CN=cbef5395061d167455a4a4f0799b3f7f0801ad23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9e:a6:14:4f:7e:20:0b:f6:3e:e4:4e:d9:8e:
de:0c:76:85:b3:b5:95:9a:97:07:bf:50:33:13:b9:
15:3f:8c:bf:5f:3d:7f:44:d9:0d:8f:28:ed:28:6b:
57:35:9f:78:7f:c7:f3:c0:88:1d:03:13:67:81:89:
07:e7:31:fe:c9:76:d4:7a:8d:c3:ba:af:e6:ae:82:
2f:80:68:c3:df:fa:fd:03:f1:5e:f7:d0:d9:7f:92:
21:ad:0c:d3:ad:05:16:4d:99:19:aa:75:20:4e:26:
24:e9:a3:da:ed:f8:7c:f4:d1:4b:60:ae:2e:45:0e:
35:d6:df:b7:a8:bc:e9:27:49:4c:6c:2e:a4:c7:3e:
f8:71:0e:a1:33:75:a7:6e:d0:c9:1e:62:a1:2c:2f:
4f:04:42:b1:28:80:7a:c3:e0:cf:ec:43:88:1b:09:
a6:96:6e:97:44:24:51:a7:c1:7f:01:07:20:05:8e:
e1:96:8d:19:c3:84:6e:d3:2e:58:10:43:2f:0a:d6:
99:eb:9a:bd:3b:8e:a0:97:d4:b3:12:cc:ab:3b:4f:
27:3a:79:33:71:d2:59:e1:09:3c:39:ee:be:99:e7:
fc:2c:a1:96:e7:eb:ab:db:d0:9d:21:3f:20:0c:e1:
95:50:0d:8d:fd:16:e9:d8:64:b3:85:a0:20:0e:0e:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EF:53:95:06:1D:16:74:55:A4:A4:F0:79:9B:3F:7F:08:01:AD:23
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e8:c2:d7:8e:38:08:84:92:a8:42:c8:71:01:a0:97:ce:63:
60:5a:ea:17:d1:4b:56:c4:e2:fe:bb:5f:c5:a0:6f:2a:83:00:
cf:1c:1d:a7:4e:a7:0b:8c:54:60:47:ab:0d:72:cc:0f:6a:20:
6b:71:bb:db:2c:05:4b:9d:93:4a:f8:ee:84:e8:ba:ef:56:77:
6b:0a:54:38:55:01:1e:8b:de:66:33:0a:52:75:87:f4:49:3e:
e3:e7:45:db:56:37:95:4c:93:ef:95:f5:09:63:56:69:3c:2a:
71:e5:51:15:4e:6f:9a:e5:87:d8:af:34:2f:b9:05:6f:6b:b1:
f8:89:ca:e6:6a:16:a2:5e:b8:f4:ef:b8:89:17:70:4b:86:65:
ea:3d:e7:e7:08:ab:05:56:c7:00:65:3c:62:8b:e3:68:2a:24:
65:4d:6a:67:e0:26:51:81:25:32:38:22:c2:cd:58:35:d2:b5:
7e:3e:75:39:40:18:dd:ab:67:a7:07:c2:94:61:01:12:86:12:
67:2e:6b:43:56:74:0f:01:a0:8e:31:72:dc:4c:f6:03:db:73:
6d:fd:bd:29:3d:f0:f5:29:3e:74:ec:de:19:a9:34:be:60:ae:
88:71:8b:f9:ef:af:15:df:65:d1:d8:7b:eb:0c:e7:3e:18:d2:
eb:f0:85:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OolkGFo4eB2ElK3ekKpK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2E1MDg1OGExODU2ZmZhMDJlOTEzNTZmMTQyMzZlN2Mz
OGI4NWEwHhcNMjYwNzIzMTEwMDMxWhcNMjYwNzI0MTEwMDMxWjAzMTEwLwYDVQQD
EyhjYmVmNTM5NTA2MWQxNjc0NTVhNGE0ZjA3OTliM2Y3ZjA4MDFhZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p6mFE9+IAv2PuRO2Y7eDHaFs7WV
mpcHv1AzE7kVP4y/Xz1/RNkNjyjtKGtXNZ94f8fzwIgdAxNngYkH5zH+yXbUeo3D
uq/mroIvgGjD3/r9A/Fe99DZf5IhrQzTrQUWTZkZqnUgTiYk6aPa7fh89NFLYK4u
RQ411t+3qLzpJ0lMbC6kxz74cQ6hM3WnbtDJHmKhLC9PBEKxKIB6w+DP7EOIGwmm
lm6XRCRRp8F/AQcgBY7hlo0Zw4Ru0y5YEEMvCtaZ65q9O46gl9SzEsyrO08nOnkz
cdJZ4Qk8Oe6+mef8LKGW5+ur29CdIT8gDOGVUA2N/Rbp2GSzhaAgDg7kwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvvU5UGHRZ0VaSk8HmbP38IAa0jMB8GA1UdIwQY
MBaAFDrKUIWKGFb/oC6RNW8UI258OLhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEt
MzMxZDdmYzc3YmQ0LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xMmI5MzctODkwZC00N2I1LWEwNDEtMzMxZDdmYzc3YmQ0
LzEvT3NwUWhZb1lWdi1nTHBFMWJ4UWpibnc0dUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+jC1444
CISSqELIcQGgl85jYFrqF9FLVsTi/rtfxaBvKoMAzxwdp06nC4xUYEerDXLMD2og
a3G72ywFS52TSvjuhOi671Z3awpUOFUBHoveZjMKUnWH9Ek+4+dF21Y3lUyT75X1
CWNWaTwqceVRFU5vmuWH2K80L7kFb2ux+InK5moWol649O+4iRdwS4Zl6j3n5wir
BVbHAGU8YovjaCokZU1qZ+AmUYElMjgiws1YNdK1fj51OUAY3atnpwfClGEBEoYS
Zy5rQ1Z0DwGgjjFy3Ez2A9tzbf29KT3w9Sk+dOzeGak0vmCuiHGL+e+vFd9l0dh7
6wznPhjS6/CFKQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:03 2026 by rpki-client