Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: IOpbjIYoEdpJeatQsKn8DABw9AC+p3AReJkVbI3RkeE=
Subject key identifier: 2E:77:C8:23:36:59:3B:B5:8E:BF:28:59:28:AA:E8:E4:54:28:84:BD
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 019E1ED9CA394107B860ED6DB71C56313533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 01:00:50 +0000
Manifest this update: Wed 13 May 2026 01:00:50 +0000
Manifest next update: Thu 14 May 2026 01:00:50 +0000
Files and hashes: 1: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: MpUEtIzp5jo7BzO9MpM2CUpId+HLyO/GwyzibgQxo+Q=)
2: sbWj3cDEvspo2pzFM90qmBN7XGY.roa (hash: ZCuFftw5Wl2QKtDaCFVmcabJrAkBRibR6g/1SyLs2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ca:39:41:07:b8:60:ed:6d:b7:1c:56:31:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: May 13 01:00:50 2026 GMT
Not After : May 14 01:00:50 2026 GMT
Subject: CN=2e77c82336593bb58ebf285928aae8e4542884bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:9f:06:1d:c2:6e:21:84:cf:15:5e:c0:6f:
3f:8f:ec:d8:30:8e:b9:c5:79:08:69:1c:c6:41:d8:
d9:5f:5f:a5:12:eb:12:d2:56:e7:fd:66:36:d1:11:
54:44:6a:c8:1b:2c:4b:d0:79:f9:15:fa:7b:8b:02:
ed:8c:83:e6:c9:1b:7a:5f:64:2d:47:a9:0d:17:d2:
3e:c4:bf:5b:da:bf:f1:6b:76:67:ae:b3:3c:2c:44:
0c:9c:7e:52:14:1d:f6:fa:d7:60:a0:c2:52:30:42:
e6:37:f2:9a:af:58:f7:7a:7e:52:77:f0:e9:21:76:
5a:a8:b4:ea:e8:05:27:88:8a:94:50:dc:3e:5a:13:
16:70:9e:9d:80:20:86:10:37:c5:52:8e:e5:0d:dd:
d5:ce:6a:cb:83:d2:37:40:d0:ac:c3:27:59:fe:46:
00:a2:f0:f1:68:32:a8:35:2d:ee:da:40:72:dd:20:
c6:64:a8:d1:02:f4:27:d9:f2:e9:fc:ab:93:18:15:
76:3e:d9:0b:a7:e8:5d:1e:2f:4d:61:11:fc:83:c0:
b8:6b:df:da:d7:7c:57:07:95:cf:50:16:0d:7c:80:
af:0a:2b:92:22:8e:9e:ce:4f:0d:da:54:7c:6f:8e:
6d:a2:09:7d:60:cd:f5:58:6a:c6:a0:da:0d:42:6b:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:77:C8:23:36:59:3B:B5:8E:BF:28:59:28:AA:E8:E4:54:28:84:BD
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:40:79:12:ae:03:e1:9b:56:f3:9c:70:bb:a3:ea:32:cb:8a:
5f:e2:c6:51:39:22:b0:01:43:79:07:4b:41:5a:7d:a5:6e:e6:
96:be:48:02:36:3f:28:1f:56:fc:9b:82:f9:93:a9:dd:b3:3d:
90:9a:0e:31:8f:44:8b:30:51:93:d7:47:35:b6:b7:a7:96:a1:
cb:d2:4c:7b:5d:be:52:ea:03:53:f6:6c:3f:d0:b5:7d:e1:29:
ae:b9:7a:7c:21:22:59:c3:e7:dd:d8:9c:75:d7:b1:87:32:ef:
70:2d:ef:d4:20:51:15:98:c3:a5:47:ef:36:41:b6:5a:a8:b2:
91:10:a2:ef:2a:b9:5c:f1:90:ea:6e:82:8e:35:ad:32:e2:1a:
c2:63:7c:2c:26:76:21:69:37:92:ce:34:dd:ac:31:7d:bd:88:
47:e2:50:bb:3e:43:7a:1b:3b:73:87:b0:fc:7d:14:36:cd:1c:
e6:21:e2:ff:80:b0:05:8f:58:f3:0c:6f:e4:dd:e0:02:65:95:
58:b7:ea:b9:e0:f2:31:e7:61:79:95:06:e2:93:0f:f5:df:1e:
6c:2c:ac:ad:72:8a:16:42:e4:c3:92:7f:ee:5f:61:2b:c8:42:
13:a8:3d:68:74:ab:2f:84:36:61:a8:c8:1e:21:2d:15:16:01:
5c:3a:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:26 2026 by rpki-client