Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
File: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft (raw, json)
Hash identifier: syiEqysMa8kNrDVpSyOwbh8h+lKm0eOOSN9ybRgg6zc=
Subject key identifier: 72:9F:A8:68:0C:72:B7:3F:63:DA:DF:10:C9:BA:04:FD:D6:50:89:BF
Authority key identifier: FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
Certificate issuer: /CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Certificate serial: 019E1EA34EA8A066CCD5590131628735F003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
Manifest number: 0495
Signing time: Wed 13 May 2026 00:01:19 +0000
Manifest this update: Wed 13 May 2026 00:01:19 +0000
Manifest next update: Thu 14 May 2026 00:01:19 +0000
Files and hashes: 1: 01o9QMK5i2W56VtXZmgzP-ILrQ0.roa (hash: LXimHsOHFBMbCTOin8TpUsouIX59ySFRAHVGtSHFCUU=)
2: 1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl (hash: 6m3A7dWhtJCW6gDSLzGSu+swIoXsHZX3HYvOPcAwta8=)
3: 56DqMz97HUtongb-LYKLfwuTWh4.roa (hash: ogBhrs4GCRrendagpUDedYundQuUrPiR+N6SxNY/RzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:4e:a8:a0:66:cc:d5:59:01:31:62:87:35:f0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa8cb946fe8601a0fd2a1b3e4382b6b1dc044f57
Validity
Not Before: May 13 00:01:19 2026 GMT
Not After : May 14 00:01:19 2026 GMT
Subject: CN=729fa8680c72b73f63dadf10c9ba04fdd65089bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:8d:a6:f3:4a:1e:f9:b0:cf:cd:94:b9:af:
f9:86:aa:b9:e4:12:cf:49:3e:31:bb:4c:ac:47:cc:
51:6d:d2:ed:ce:b3:3f:73:fd:07:a6:02:f5:80:8e:
8a:f1:60:07:af:5d:e5:76:f8:a4:87:f6:48:c8:ed:
b6:8b:1d:85:1e:45:38:fe:85:29:58:db:41:62:b2:
8d:7c:dd:c4:00:99:02:9c:42:49:8c:4a:05:e4:54:
05:23:bd:52:46:35:cb:10:d8:b8:95:71:d7:30:96:
ca:09:d5:79:95:ae:a5:d1:5b:c2:5b:51:22:d4:93:
f9:d3:6d:9a:e5:63:66:71:df:e1:6d:24:2d:f8:2a:
85:fb:30:cc:59:cb:62:74:5f:71:98:20:29:75:fe:
53:8d:58:2b:7b:bc:1b:8d:ac:77:cb:e1:4b:85:23:
e0:7d:dd:e4:68:49:7f:f6:95:5d:00:86:f8:e6:57:
44:48:e6:62:f0:13:53:99:5a:7f:5b:f3:00:d1:96:
e7:e6:58:77:e8:2a:00:f3:5b:c8:63:da:d0:55:9e:
6c:fb:39:e3:a6:45:44:a1:f6:ba:e2:f2:b0:57:8b:
2d:37:b3:70:87:7c:51:a2:14:51:b3:17:4f:c6:31:
b1:7a:5b:0e:9e:c2:bd:83:36:7d:d9:64:37:48:93:
dd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9F:A8:68:0C:72:B7:3F:63:DA:DF:10:C9:BA:04:FD:D6:50:89:BF
X509v3 Authority Key Identifier:
keyid:FA:8C:B9:46:FE:86:01:A0:FD:2A:1B:3E:43:82:B6:B1:DC:04:4F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d2270-5c6f-42cf-a560-94a6ef01d047/1/1-oy5Rv6GAaD9Khs-Q4K2sdwET1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:79:d3:d1:cf:f3:31:f4:70:52:36:c8:73:f0:81:a4:e7:89:
d6:6f:15:f0:94:41:5d:2a:68:c3:5e:50:5e:83:d4:f6:2b:32:
57:80:ed:f8:34:d3:76:e5:3e:d0:c3:5d:9e:64:f7:fb:bc:ca:
58:88:e9:3c:b4:f7:26:15:c3:fb:08:e2:44:de:35:85:b4:01:
61:43:6a:58:95:55:40:b8:17:32:4e:d7:36:17:6d:f3:82:b0:
b5:e2:61:74:93:da:07:22:de:44:35:b2:03:56:1c:cc:45:72:
c5:70:ec:1d:ed:99:f0:9f:96:ef:81:5c:4b:1f:d3:0d:ec:ae:
d4:d8:07:3f:73:30:01:ee:5a:ac:4c:f4:35:f3:32:3e:e6:e3:
c3:85:68:8c:af:a3:a5:8f:af:36:0d:6b:f8:30:e8:dd:d3:04:
73:ed:f7:9b:4d:0a:ba:9b:78:77:87:f6:c5:27:79:e6:04:67:
96:16:16:4d:d3:2f:c2:df:70:ef:29:dc:f6:98:ed:dd:65:b4:
ac:37:56:c0:2b:d2:4b:93:e9:41:16:b7:2c:9e:48:71:19:64:
4c:25:06:67:41:6f:d5:5a:d2:5f:cd:1c:6d:a2:84:b5:04:96:
42:66:25:0e:d1:00:8c:b4:76:f7:c1:12:c5:60:93:31:38:7d:
4e:c8:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:45 2026 by rpki-client