Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
File: OAonDZR7c0BD17LSUhTx3DDwEd8.mft (raw, json)
Hash identifier: M/5o2wBFDuumB9wvk10cv9vPory0mS2KtrXC1DQdUHM=
Subject key identifier: 23:A7:5C:C9:78:F2:AD:11:7E:8C:2D:D5:22:B6:E5:6B:5B:74:74:29
Authority key identifier: 38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
Certificate issuer: /CN=380a270d947b734043d7b2d25214f1dc30f011df
Certificate serial: 019E1D90518FC58E20CC4DC3EC429C341F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
Manifest number: 0107
Signing time: Tue 12 May 2026 19:00:57 +0000
Manifest this update: Tue 12 May 2026 19:00:57 +0000
Manifest next update: Wed 13 May 2026 19:00:57 +0000
Files and hashes: 1: NxhSUvfOXXEFbfZPGuAjsjHBuoA.asa (hash: lQuAqzmZHKPPnlJhgUigZTqLHkETETb1Ge6jDBuicw4=)
2: OAonDZR7c0BD17LSUhTx3DDwEd8.crl (hash: 7+gQ6RlfiTJbwitormuTl/nvu+cl943VETQeIugP+UQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:51:8f:c5:8e:20:cc:4d:c3:ec:42:9c:34:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380a270d947b734043d7b2d25214f1dc30f011df
Validity
Not Before: May 12 19:00:57 2026 GMT
Not After : May 13 19:00:57 2026 GMT
Subject: CN=23a75cc978f2ad117e8c2dd522b6e56b5b747429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:48:5c:7d:0e:d4:cd:e8:cc:71:ce:01:85:af:
18:15:2a:90:17:21:15:c0:f1:5c:f3:40:b4:89:a1:
05:9a:aa:90:53:04:f1:58:ba:ea:b0:48:c9:b9:c9:
13:7c:0d:af:8f:76:b4:af:36:cb:a0:21:e5:d7:7d:
7e:c6:6d:fa:ea:b6:9f:5d:57:b1:5b:1e:76:65:ff:
cd:64:dd:5a:e4:9d:90:08:36:0d:dc:df:f5:2d:21:
74:6a:bd:f9:58:9b:98:84:bf:a4:3c:01:6e:83:77:
d2:d6:3d:97:55:40:56:47:76:ef:a2:a4:a3:79:d8:
ec:b3:7b:ea:16:5f:ee:0c:4a:17:d8:61:e9:f5:88:
f3:07:e0:a3:65:75:be:0e:13:42:1f:3d:16:0b:57:
d6:0c:6d:a4:5b:00:b8:69:61:dd:6a:a8:cd:a4:ee:
44:09:be:f6:ac:6c:19:07:fd:57:78:a7:15:6a:68:
63:88:58:f7:09:fd:31:0f:24:2a:cb:ac:f9:ea:03:
c7:ee:a4:84:f0:d6:3c:c0:14:50:18:5c:cf:72:45:
8e:25:df:20:06:95:58:46:23:e9:f4:21:ef:80:da:
26:6d:02:86:1a:b9:a4:4d:5c:07:ef:25:f4:f9:ab:
5c:90:63:a3:2c:37:4b:49:d4:1c:58:db:cf:ab:a0:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:5C:C9:78:F2:AD:11:7E:8C:2D:D5:22:B6:E5:6B:5B:74:74:29
X509v3 Authority Key Identifier:
keyid:38:0A:27:0D:94:7B:73:40:43:D7:B2:D2:52:14:F1:DC:30:F0:11:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAonDZR7c0BD17LSUhTx3DDwEd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/453ce9-7389-4951-a76e-890d0bbea624/1/OAonDZR7c0BD17LSUhTx3DDwEd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2e:25:52:63:f5:68:95:1e:dd:0f:e3:1b:20:16:a7:73:4d:
a2:b9:98:7c:3b:0f:ef:bc:33:5a:54:c0:5e:53:b0:71:be:9d:
e5:d8:59:5a:35:6c:be:25:7e:f5:f8:b7:5a:82:79:04:7f:4e:
ff:04:bc:e9:b3:20:56:ab:c4:b3:86:db:75:a6:3c:55:5f:4f:
3a:ff:b9:35:b5:c2:4b:f9:de:cf:40:03:5a:53:c2:65:8c:5f:
4b:e6:be:59:df:d4:d1:e6:65:8d:64:13:3a:bc:23:4b:ed:db:
c9:94:bd:0f:76:fd:de:4c:b4:d5:d5:c6:df:8c:05:32:50:58:
de:f4:a8:00:05:b6:50:3e:b7:93:32:cd:a1:e4:33:68:db:c1:
d6:60:df:90:02:dd:eb:70:e5:54:15:9e:51:e6:78:86:8e:61:
fc:cb:33:c3:20:5a:86:d1:3b:81:9f:ce:41:4a:47:37:24:ac:
fb:5f:b8:ee:8f:d6:69:1b:1b:6c:55:e0:c9:1c:3b:de:21:b3:
55:17:a4:0f:3e:8d:d8:26:2e:ec:b8:e1:ba:56:fc:e3:22:9d:
97:73:5a:87:5f:86:f9:2f:5c:e1:90:bc:e4:ff:0b:9b:ca:3e:
96:83:96:ff:1a:68:05:21:76:c9:d9:a5:6a:bc:d5:d6:2d:39:
c3:39:fa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:14 2026 by rpki-client