Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
File: oHkxBpr_ycmd5RjIJgYOGctHWmo.mft (raw, json)
Hash identifier: GxZ+b2jemLseTWywaNjJeNN7CaGcBVASu2J1MxY+9NA=
Subject key identifier: C1:F1:93:FF:6E:47:BA:C9:C2:52:7E:C7:4E:91:3B:27:BA:CD:19:A8
Authority key identifier: A0:79:31:06:9A:FF:C9:C9:9D:E5:18:C8:26:06:0E:19:CB:47:5A:6A
Certificate issuer: /CN=a07931069affc9c99de518c826060e19cb475a6a
Certificate serial: 019E216CF9AC4DA747025940D10E27D32878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
Manifest number: B1
Signing time: Wed 13 May 2026 13:00:50 +0000
Manifest this update: Wed 13 May 2026 13:00:50 +0000
Manifest next update: Thu 14 May 2026 13:00:50 +0000
Files and hashes: 1: 2nCCDGIY-zgjtBGd6Ratic4BUZk.roa (hash: ypGUracRtSQozaYCuAAYU3ve4jp+TLuRdz+sdn4iE+c=)
2: oHkxBpr_ycmd5RjIJgYOGctHWmo.crl (hash: qehEw7jsxuQpylL052321memaE6iYzNTmCPOwiC5Kww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6c:f9:ac:4d:a7:47:02:59:40:d1:0e:27:d3:28:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07931069affc9c99de518c826060e19cb475a6a
Validity
Not Before: May 13 13:00:50 2026 GMT
Not After : May 14 13:00:50 2026 GMT
Subject: CN=c1f193ff6e47bac9c2527ec74e913b27bacd19a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:38:92:51:43:46:3c:d3:da:d9:60:75:b5:c9:
f5:21:83:96:11:1c:b1:3b:ae:a1:60:00:55:51:d9:
a5:65:1b:df:88:70:bf:3a:c8:12:a6:a1:66:5b:7f:
68:54:0b:4c:9e:da:b7:35:21:62:32:44:df:ba:f8:
07:aa:d7:ff:66:e9:93:3e:a8:89:bf:11:1c:40:43:
f4:b6:4c:ed:8a:a7:35:3b:a2:38:d7:95:91:0b:21:
a1:f0:72:0b:21:88:cc:31:07:14:2f:c8:32:04:08:
08:fa:e9:1f:dd:85:1f:20:f8:66:ce:3c:2c:f6:53:
8e:f5:8d:92:ac:98:82:8f:2d:b9:7d:62:57:37:bc:
52:1d:2e:77:1e:a3:01:2d:de:14:7f:ea:e4:ae:3e:
29:71:4c:01:71:2a:9e:74:fc:02:57:79:c3:fe:3e:
66:82:0d:b9:19:68:82:e9:78:09:43:dc:7c:1c:f5:
e9:86:b7:84:8d:a3:33:ab:4a:a5:d2:d8:e1:e3:a7:
b9:08:ea:a7:5e:d6:51:75:a1:df:98:ee:75:a4:21:
3d:17:0a:5c:d3:df:0f:65:11:6e:ea:74:af:db:de:
68:dd:ef:12:67:cb:2c:bf:8b:35:a2:71:65:61:d6:
49:8f:8a:62:db:7c:60:e3:3c:1d:0a:cd:44:38:ed:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:93:FF:6E:47:BA:C9:C2:52:7E:C7:4E:91:3B:27:BA:CD:19:A8
X509v3 Authority Key Identifier:
keyid:A0:79:31:06:9A:FF:C9:C9:9D:E5:18:C8:26:06:0E:19:CB:47:5A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHkxBpr_ycmd5RjIJgYOGctHWmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/624d06-870f-4b4d-ad75-15876d952275/1/oHkxBpr_ycmd5RjIJgYOGctHWmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5c:51:f7:f3:ca:4e:53:64:ac:45:22:c7:16:4f:59:3b:cf:
ea:c3:c1:3d:0a:74:3c:d7:c0:7a:e9:16:41:15:11:02:35:5b:
a1:1c:db:15:8a:fc:78:ba:c1:a2:70:1d:cd:90:31:0f:63:e8:
cc:72:0e:47:e3:2c:b4:bc:d0:6a:45:62:50:da:25:80:50:b2:
13:66:df:7f:4b:e9:51:4d:69:ef:de:61:95:fe:25:2d:9a:f3:
a0:92:e1:7c:21:8b:6f:db:0e:86:0a:de:5b:d9:f0:5e:99:2c:
c6:5f:a2:6d:3c:02:03:1f:99:f3:73:7e:55:25:e1:d1:7d:4f:
80:ef:1d:0c:5c:7d:e0:7f:b5:eb:39:3c:da:19:36:33:49:1a:
ef:ab:e9:13:d0:10:a4:2d:9a:5f:e6:8a:43:66:81:90:1c:e0:
ef:52:6c:4a:80:f8:e4:c9:bc:c9:70:01:03:a6:15:99:89:7b:
86:dd:23:28:f6:6e:cb:7e:2e:69:b5:31:3e:7f:ba:1d:09:20:
59:13:12:96:1f:5e:64:59:52:7b:34:84:0f:be:ba:fb:10:9e:
e2:67:df:e8:67:af:61:c2:3f:6b:57:b8:4b:3f:69:85:d4:53:
80:05:34:64:57:59:72:97:cf:e9:58:76:c0:00:0a:b8:e6:ba:
25:b1:88:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:35 2026 by rpki-client