Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: DsFDj8X1CQJ3eUer3hmfZAFT1SEo9XFUcqtYXOxfTyg=
Subject key identifier: A7:CA:9D:61:C2:A6:DE:A1:6C:E4:C8:F5:CA:3C:87:A2:F7:17:36:65
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019E1FEC6CD168526601CDA7217B3EA1443B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 052D
Signing time: Wed 13 May 2026 06:00:48 +0000
Manifest this update: Wed 13 May 2026 06:00:48 +0000
Manifest next update: Thu 14 May 2026 06:00:48 +0000
Files and hashes: 1: 7jGC3eByRg_Kov58Z9afFa1zFhk.roa (hash: 01p3EgWoHQZuC7lRAyeIevnlE5QEkxh9vvqWiCkIFPs=)
2: JiK8psPNS7Q8TSWjkJH1pP9BmF8.roa (hash: 3M1URB5bq4S79c9mtyyaPbUG6/SErUNxltBv4XVCKoY=)
3: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: CPEGOlXnmqlkAtgIEO2ltY4ZWH22xJ8wggO5DOLZnAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:6c:d1:68:52:66:01:cd:a7:21:7b:3e:a1:44:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: May 13 06:00:48 2026 GMT
Not After : May 14 06:00:48 2026 GMT
Subject: CN=a7ca9d61c2a6dea16ce4c8f5ca3c87a2f7173665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:4f:03:ff:a9:da:51:61:b7:4b:91:41:d6:
fc:0c:bf:40:ce:d8:24:d7:40:83:4a:9f:7f:17:89:
44:d6:b9:6e:a7:90:a2:59:c9:b7:6c:8c:1a:74:3a:
a3:e2:65:cd:a6:16:04:da:91:65:e2:82:dd:2e:38:
8e:6f:d5:b5:eb:84:f8:bb:db:47:38:59:35:b0:09:
5c:2f:eb:e9:48:e6:82:ad:60:4b:07:68:8f:36:d3:
65:2b:c7:1c:cf:05:da:7d:bd:fc:ae:75:a1:12:dc:
86:8a:fe:9c:a2:1a:09:0f:ae:67:29:e9:79:4d:a9:
5c:91:1d:83:08:d8:39:ba:0a:3a:80:f9:82:fb:98:
ae:57:d2:0b:9e:94:00:41:9c:f1:13:c0:fe:45:0a:
26:1c:d0:a8:17:be:9d:f1:d9:12:0e:4c:66:b7:32:
c9:8c:86:cc:67:a7:32:eb:ed:1e:d2:22:36:d9:63:
a8:c1:29:54:46:27:ff:45:30:17:cc:c6:b7:a4:70:
b6:de:b5:fd:9c:31:28:c4:8a:40:54:a7:51:ac:a1:
75:f5:b0:d1:cc:26:45:59:fc:2d:a7:b8:a8:f3:45:
4a:ec:ed:99:ed:49:23:9a:d2:a4:15:6f:5b:30:83:
2a:f4:11:c7:6e:1b:15:24:c6:df:1e:29:93:96:07:
fe:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CA:9D:61:C2:A6:DE:A1:6C:E4:C8:F5:CA:3C:87:A2:F7:17:36:65
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ba:72:60:06:e3:e3:41:e7:e5:71:3c:e8:e7:98:d7:5c:38:
02:d6:37:be:1e:c9:9e:09:1f:0b:18:b4:e5:ad:d7:ba:11:69:
c9:a7:7a:28:ec:ed:ae:fe:38:ec:0e:de:73:73:59:b5:a3:ce:
9b:50:88:80:5e:5d:c6:42:ad:a7:66:8a:9b:80:eb:77:d1:de:
00:cc:68:b3:c8:eb:76:d2:0d:f3:25:44:3d:ec:e2:bd:d2:09:
0f:30:68:a4:3a:e9:d2:3d:0b:5b:c8:9d:a6:34:11:ae:8e:e7:
5a:ac:83:c6:c8:df:34:cd:40:62:2f:e8:a6:85:91:21:5a:e2:
75:65:0e:b8:be:4c:77:79:9b:e0:7a:97:e1:e0:f8:d3:85:b4:
15:50:52:ec:2a:70:53:66:04:fb:5c:a3:f3:dd:06:1c:52:23:
8e:db:0b:55:f5:7e:09:21:0d:88:cf:25:93:ce:98:b3:db:5a:
57:b1:95:e8:c6:65:9f:59:f5:00:cf:4e:1b:66:20:f4:42:4f:
5f:f3:cf:15:32:7a:0e:e0:74:e2:ae:3a:69:ec:6c:fa:92:32:
e3:62:c2:98:60:ec:f6:58:c9:77:a4:e1:d6:88:b5:1c:6e:22:
b5:fd:b0:de:7f:6c:93:04:87:1b:51:67:27:95:cf:5f:d7:22:
b9:5b:f5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:33 2026 by rpki-client