Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
File: osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft (raw, json)
Hash identifier: MzYWsTJRYdiODUymMIw+6wIjeIZlcTsYEQvh3L/C50o=
Subject key identifier: C2:93:1B:54:45:78:2B:97:7F:4E:A2:31:75:0D:54:0B:2C:38:AC:BF
Authority key identifier: A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
Certificate issuer: /CN=a2c56441d83df94bbd0e60144a554639e40e0535
Certificate serial: 01A131B49F33888668777CEC28DB3DF1A212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
Manifest number: 1290
Signing time: Mon 12 Oct 2026 20:01:22 +0000
Manifest this update: Mon 12 Oct 2026 20:01:22 +0000
Manifest next update: Tue 13 Oct 2026 20:01:22 +0000
Files and hashes: 1: dvdR9JcJ1adEKhDQHP6JqbDnN2Y.roa (hash: VM5iSA8uwKH8wYL20uR8+pC8sXRM47ndx6laWeDwxAU=)
2: osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl (hash: W4I5ANffBBD2/2ok9yJi9/ByTydw1vvND+B1m+T60U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:b4:9f:33:88:86:68:77:7c:ec:28:db:3d:f1:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c56441d83df94bbd0e60144a554639e40e0535
Validity
Not Before: Oct 12 20:01:22 2026 GMT
Not After : Oct 13 20:01:22 2026 GMT
Subject: CN=c2931b5445782b977f4ea231750d540b2c38acbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:56:a9:ec:38:86:93:c4:8a:f1:c1:c4:c0:
7e:95:6a:68:b1:19:1c:60:ac:b1:a6:bf:1c:b3:7f:
16:25:37:4a:f5:c5:8f:cf:6a:c0:ce:ca:e9:79:08:
bb:ff:1f:4a:be:cc:13:28:3b:9e:72:5a:bc:ce:26:
b0:f7:91:46:7b:99:37:66:ec:9e:d5:04:45:64:fe:
cc:9e:7c:53:ac:08:8c:4b:34:a0:7f:cf:5c:00:94:
ec:54:ad:40:d9:3d:df:48:56:8c:bf:2f:8c:b4:e2:
d2:04:ee:f4:30:9e:80:83:c3:8a:a8:98:a7:76:dd:
95:af:ff:58:f0:28:54:40:bc:5e:4b:04:04:b3:6d:
70:40:59:2e:ca:bf:07:2a:e4:e6:c5:99:82:f0:38:
d2:87:e3:16:6f:e6:0d:3b:0a:01:78:6d:09:64:97:
55:e6:4a:eb:01:77:67:33:20:88:f0:c4:04:9a:67:
99:f0:3e:30:8d:21:02:7b:71:26:93:b1:e7:bf:fc:
e4:08:b8:11:6c:d0:64:20:e2:47:f0:4d:d3:bb:9b:
7f:3d:89:0d:8a:80:42:1c:7b:d7:0e:fc:65:b4:ee:
2b:4d:04:77:18:80:b9:dc:72:69:7c:90:d6:9e:8d:
e1:41:14:ac:6e:df:ca:6b:43:f5:7f:c4:0d:95:ad:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:93:1B:54:45:78:2B:97:7F:4E:A2:31:75:0D:54:0B:2C:38:AC:BF
X509v3 Authority Key Identifier:
keyid:A2:C5:64:41:D8:3D:F9:4B:BD:0E:60:14:4A:55:46:39:E4:0E:05:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osVkQdg9-Uu9DmAUSlVGOeQOBTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6211c4-5a9c-441e-b800-f65dddfa0e1d/1/osVkQdg9-Uu9DmAUSlVGOeQOBTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f1:5c:bc:39:0d:95:be:8a:e8:aa:fe:6f:67:5c:d2:e5:da:
1f:56:8a:3a:aa:fc:7d:df:d5:b2:5f:25:f8:bd:47:e6:d3:af:
5c:13:0f:92:76:a4:fa:65:52:ad:ab:28:1f:79:6a:d7:e6:cb:
cc:9a:4a:ba:15:39:db:e5:d6:a0:55:17:60:93:3b:ee:ef:e8:
2f:03:6d:3b:5f:fd:2c:8d:06:16:9b:1f:0c:bb:e4:38:b0:8c:
4d:a5:48:7b:08:ef:f8:71:13:c9:3d:e0:fa:92:49:c1:83:e5:
99:19:15:77:5c:22:55:44:87:af:ae:fa:74:44:cf:e3:18:8a:
2c:05:33:42:a4:10:34:ae:81:64:1b:be:21:4e:34:fa:27:a5:
45:c4:07:05:ed:67:70:f3:31:10:2a:9b:69:02:3c:98:25:7d:
7c:b9:5d:a0:b2:21:8a:40:ac:47:3d:6b:29:df:dd:69:9e:10:
06:d4:50:da:4e:bf:33:24:de:ff:f7:46:8a:ae:e8:fe:d4:7f:
b1:25:89:4f:3d:45:75:62:24:a1:eb:f6:48:44:14:eb:c3:8e:
5c:35:ac:ac:42:bf:31:b6:ad:de:2a:dc:cd:2a:70:24:cb:5c:
6a:e4:45:4d:37:4b:8f:8b:ce:37:1e:29:78:55:8f:97:f6:5a:
c2:86:c5:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExtJ8ziIZod3zsKNs98aISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzU2NDQxZDgzZGY5NGJiZDBlNjAxNDRhNTU0NjM5ZTQw
ZTA1MzUwHhcNMjYxMDEyMjAwMTIyWhcNMjYxMDEzMjAwMTIyWjAzMTEwLwYDVQQD
EyhjMjkzMWI1NDQ1NzgyYjk3N2Y0ZWEyMzE3NTBkNTQwYjJjMzhhY2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA179Wqew4hpPEivHBxMB+lWposRkc
YKyxpr8cs38WJTdK9cWPz2rAzsrpeQi7/x9KvswTKDueclq8ziaw95FGe5k3Zuye
1QRFZP7MnnxTrAiMSzSgf89cAJTsVK1A2T3fSFaMvy+MtOLSBO70MJ6Ag8OKqJin
dt2Vr/9Y8ChUQLxeSwQEs21wQFkuyr8HKuTmxZmC8DjSh+MWb+YNOwoBeG0JZJdV
5krrAXdnMyCI8MQEmmeZ8D4wjSECe3Emk7Hnv/zkCLgRbNBkIOJH8E3Tu5t/PYkN
ioBCHHvXDvxltO4rTQR3GIC53HJpfJDWno3hQRSsbt/Ka0P1f8QNla25bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMKTG1RFeCuXf06iMXUNVAssOKy/MB8GA1UdIwQY
MBaAFKLFZEHYPflLvQ5gFEpVRjnkDgU1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC82MjExYzQtNWE5Yy00NDFlLWI4MDAt
ZjY1ZGRkZmEwZTFkLzEvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC82MjExYzQtNWE5Yy00NDFlLWI4MDAtZjY1ZGRkZmEwZTFk
LzEvb3NWa1FkZzktVXU5RG1BVVNsVkdPZVFPQlRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvFcvDkN
lb6K6Kr+b2dc0uXaH1aKOqr8fd/Vsl8l+L1H5tOvXBMPknak+mVSrasoH3lq1+bL
zJpKuhU52+XWoFUXYJM77u/oLwNtO1/9LI0GFpsfDLvkOLCMTaVIewjv+HETyT3g
+pJJwYPlmRkVd1wiVUSHr676dETP4xiKLAUzQqQQNK6BZBu+IU40+ielRcQHBe1n
cPMxECqbaQI8mCV9fLldoLIhikCsRz1rKd/daZ4QBtRQ2k6/MyTe//dGiq7o/tR/
sSWJTz1FdWIkoev2SEQU68OOXDWsrEK/Mbat3irczSpwJMtcauRFTTdLj4vONx4p
eFWPl/ZawobFXg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 22:31:49 2026 by rpki-client