Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
File: O618kdgYkaWUfX4UpmhJEgY6Xdk.mft (raw, json)
Hash identifier: LIbmnyKEn7TzojzXJ83bWS68D8ypB0coSUpVSR8L08o=
Subject key identifier: 10:EA:61:54:00:00:E7:A7:1A:CB:37:78:75:F8:8F:A3:AA:5D:ED:3F
Authority key identifier: 3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
Certificate issuer: /CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Certificate serial: 019E1EA2DE1347E0E359CE6D10A53904BF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
Manifest number: 016A
Signing time: Wed 13 May 2026 00:00:50 +0000
Manifest this update: Wed 13 May 2026 00:00:50 +0000
Manifest next update: Thu 14 May 2026 00:00:50 +0000
Files and hashes: 1: GPjTkixHgXgtIDNDsyb7i-Nlleo.roa (hash: 0MyLo6ZK/tC1RGqYqyZYKLVLfr7W+2VBizLdr/A1dio=)
2: O618kdgYkaWUfX4UpmhJEgY6Xdk.crl (hash: ELNfj641xX/EUdmYzvKq2pnLMrpG7eNemQHWVll9Hmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:de:13:47:e0:e3:59:ce:6d:10:a5:39:04:bf:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad7c91d81891a5947d7e14a6684912063a5dd9
Validity
Not Before: May 13 00:00:50 2026 GMT
Not After : May 14 00:00:50 2026 GMT
Subject: CN=10ea61540000e7a71acb377875f88fa3aa5ded3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:d4:33:0b:a3:45:a2:c6:9e:b8:60:9e:a2:
18:6c:42:41:0c:f6:c4:2f:55:ef:97:98:aa:59:db:
17:ad:85:dc:67:43:4c:90:f6:68:4c:e6:20:c8:fa:
ec:07:fc:eb:79:48:ec:3e:8d:60:b3:d2:f8:7d:9a:
96:6a:06:7b:3a:91:df:30:86:56:86:b9:2f:49:7d:
65:54:8f:fc:91:4e:37:84:02:3f:56:33:13:85:95:
a5:de:98:06:61:46:54:5f:96:36:de:dd:b1:18:b2:
41:4e:ae:9d:2e:90:f1:81:ea:ef:de:42:39:4e:8f:
dc:32:e6:b9:e6:0e:80:85:06:01:ec:6c:c8:03:f2:
9c:74:c4:bf:be:af:50:87:7b:74:9d:98:27:4b:0d:
a2:3e:e6:9d:5c:18:c3:4e:1f:3f:a2:72:f6:41:42:
22:d5:c7:d5:00:22:d8:61:05:cd:66:a7:b4:76:bd:
dc:3e:ed:ae:4e:f4:32:d2:3e:ed:b5:26:37:ff:c4:
93:cf:24:4f:3a:13:49:90:0b:54:9f:86:89:52:7c:
1b:f1:78:d1:7e:2f:37:f4:62:d2:0b:95:40:f7:22:
29:f7:fe:ee:dc:e8:64:de:02:81:ad:f0:a7:b9:01:
b2:c2:83:22:2b:06:ed:5c:d3:33:7b:7f:81:ec:4e:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EA:61:54:00:00:E7:A7:1A:CB:37:78:75:F8:8F:A3:AA:5D:ED:3F
X509v3 Authority Key Identifier:
keyid:3B:AD:7C:91:D8:18:91:A5:94:7D:7E:14:A6:68:49:12:06:3A:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O618kdgYkaWUfX4UpmhJEgY6Xdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9493ee-7a05-41ef-bcf6-422022499aca/1/O618kdgYkaWUfX4UpmhJEgY6Xdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:da:76:97:ba:85:83:0d:14:4a:c2:5d:db:c3:b8:71:4b:b7:
93:27:a1:44:11:84:c5:53:8c:3b:e4:e5:64:05:93:d1:9e:92:
60:7e:ed:e6:23:aa:3b:cc:97:a2:17:c3:5a:60:96:33:38:9c:
eb:33:a9:cc:d2:ff:9a:da:c9:c3:ff:b9:d2:51:45:a1:79:bc:
78:3a:0d:82:47:df:ac:94:e9:91:29:81:4b:c9:60:b4:6e:12:
2c:e5:66:38:8c:77:a6:3c:a9:32:4d:51:c0:f3:cd:d9:3b:7f:
e7:40:63:97:8b:98:d8:e2:a2:68:c5:3e:5e:a5:da:cb:30:ff:
ea:c5:70:0c:cd:d6:37:80:b4:99:80:20:ea:8b:85:3b:68:dc:
58:19:84:6c:3f:a4:d9:02:1a:dd:70:67:68:a8:bd:22:46:cd:
f7:df:af:8d:c9:67:6a:d1:9d:af:48:1d:5b:2f:00:1c:08:3b:
05:51:5b:ca:cd:83:70:94:af:57:c6:76:35:8c:7a:97:57:3c:
a5:0c:a9:38:f6:24:59:3f:fa:9c:81:ee:93:dd:e4:73:ab:db:
53:9e:a7:16:7c:fc:36:cf:31:fb:81:b6:f5:ca:f9:f0:96:e9:
4d:89:c0:c4:a8:03:70:c5:9d:f3:fd:d2:73:37:00:2c:32:c1:
7e:1c:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:28:25 2026 by rpki-client