Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
File: OspQhYoYVv-gLpE1bxQjbnw4uFo.mft (raw, json)
Hash identifier: uD6HrBNkKtupywHMsfdNf2xnSdFVBMTzTK6y3R7Td8s=
Subject key identifier: 7D:C5:C8:76:08:E4:2D:6B:17:31:9B:D3:6C:46:9C:F7:B1:EB:6D:5F
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 019D2996DFEAAD12C438159B4832BFE64652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 10:00:46 +0000
Manifest this update: Thu 26 Mar 2026 10:00:46 +0000
Manifest next update: Fri 27 Mar 2026 10:00:46 +0000
Files and hashes: 1: 1-Kbt04jrxWC8fOlk1tBjawSZ5wg.roa (hash: 0SuBxS+MypW7tQqS+Vd164UE3Mog6uZxtvRyTqxyy2g=)
2: 8GBhK3bVlRQOFAtixnhblw9dtz0.roa (hash: Elx4FHBwVZYgkm1JIeK2z2bzVgpOiK+svowb8d+03qs=)
3: Ht-3eU-6fA21qs34Bonv8BlzKi0.roa (hash: SHmXfuv30aA74yHYHAz5YiuGYylJVJgZptDN2Z9Awds=)
4: M3vHCHT8MYq7bsVbbMiGgchbam8.roa (hash: Vt7ldpmQRkv3Kb6ff/P1S+oxu1usav3SKm+fK1JHXSY=)
5: OspQhYoYVv-gLpE1bxQjbnw4uFo.crl (hash: NVXdMwr1+uxQrAHdJ+Nl4y1wCalRMeoS88dAPs/pTAs=)
6: UWAb0Mm5ky6mNvfi8l5lub5PcCw.roa (hash: rcYFsRpcKR+N5ImKsmiN6lJZFUsiQQePgWTGn6uyHLE=)
7: ZRMiToWEQzG6WIi6m4AnOd1M7xI.roa (hash: 6fkAR/ISjaDTmwgbqQuKZzjyVceMiviNtBf9crcDMYs=)
8: gN7oLamPRPMjPSwPSMvoNLq_dFQ.asa (hash: qLlK7kYrvgqNdvLdGkjuKmzCcNXL51g9eu+D1a6NcGY=)
9: uZTTho6XgSigY6M7r_D1NX2DLSQ.roa (hash: ivw0GUSdmhcgSVLXWkL84Xd3MeIdECHj+xV2zfbtO/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:df:ea:ad:12:c4:38:15:9b:48:32:bf:e6:46:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Mar 26 10:00:46 2026 GMT
Not After : Mar 27 10:00:46 2026 GMT
Subject: CN=7dc5c87608e42d6b17319bd36c469cf7b1eb6d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:48:52:76:29:f5:e3:15:b3:3d:ab:68:40:45:
76:79:6c:3f:ef:66:36:a7:d4:a3:2a:36:59:be:63:
56:7c:09:5f:60:a6:58:38:b7:ef:7b:5b:b9:5b:20:
80:18:53:3d:dd:33:10:7b:82:36:a2:07:4c:48:ba:
34:cd:2b:fa:0d:ee:fb:68:40:4d:51:94:cc:f9:bc:
c2:3d:76:f6:86:d7:1f:7f:fd:bd:be:a8:72:03:b5:
21:33:b8:ad:c1:de:6c:f8:76:ec:3f:9f:77:56:51:
b3:49:e1:ac:96:d1:c4:e2:f7:a0:94:fb:d7:e7:66:
b3:1e:97:1b:c9:cb:5d:c9:29:f5:a0:ed:22:27:da:
1b:f4:d9:11:70:a1:6e:f9:80:86:e7:31:01:ff:8f:
3a:d2:21:9c:35:84:b5:01:98:e6:6f:c7:8d:ec:a0:
79:c6:7b:8d:12:04:61:3c:48:94:a6:64:fd:9f:60:
54:b3:7e:4f:a6:30:9d:8d:3a:44:95:f4:ef:e4:ff:
1f:28:25:f1:61:26:2d:b5:1c:1e:9c:c4:f1:cb:ab:
2f:e4:92:21:f2:01:87:8d:5a:de:0f:af:e2:17:4b:
7a:e9:84:11:e2:b7:e6:f1:c2:68:45:b1:a6:fd:65:
92:4d:5f:1a:81:ae:da:e5:25:ea:e0:15:a6:e5:03:
00:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C5:C8:76:08:E4:2D:6B:17:31:9B:D3:6C:46:9C:F7:B1:EB:6D:5F
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:3c:c3:6a:de:a6:f1:a0:69:e6:e8:1f:a1:72:77:ac:99:
32:25:8d:09:b3:c1:12:6e:41:72:15:99:dd:f1:64:e8:d7:12:
7f:a2:a1:81:f8:42:88:03:66:0b:18:b2:43:a8:1b:3e:b8:07:
6f:2c:26:c4:25:fb:30:cf:cf:09:38:3d:62:4d:50:a5:69:1d:
5f:25:20:87:22:24:0e:da:6a:ca:c6:02:5c:ae:36:e7:ad:39:
a8:99:79:01:84:7a:4b:2a:4c:6d:e2:0f:5b:c4:33:c8:a5:97:
e3:51:b4:a9:b1:15:49:7d:5e:b3:5a:5a:60:7f:5f:72:21:e4:
dc:05:50:3c:aa:0f:fd:84:b7:5c:9f:f5:30:52:98:34:4c:f6:
0d:ed:e9:f3:7b:75:70:c2:db:90:47:85:a8:5b:c9:f8:62:de:
6c:2c:04:38:d5:11:29:24:cb:35:55:1c:87:5b:ce:9e:e0:dd:
5e:46:94:2c:8e:e4:20:11:13:14:c4:db:ac:af:79:50:fb:60:
8b:80:2c:86:2f:0d:b1:91:e0:b1:6d:e2:91:72:50:51:c3:fe:
98:89:4c:e8:fc:e4:1a:0b:01:c7:fc:66:d7:d0:0c:e8:bc:ab:
4f:ab:1d:c6:2e:e9:37:35:fd:80:1e:7f:e8:35:96:8b:b1:99:
c3:5c:6c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:57:44 2026 by rpki-client