Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: kqvr3SsWQ2yB7F9gS+9R9A1x14km7U/DwkpAVhGucrA=
Subject key identifier: 6F:58:F8:42:6E:11:E8:F1:47:89:15:DF:51:FB:A6:6F:AB:B4:C3:29
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 019E1DFE898A264BB2C66CFED9BCCA508DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 055A
Signing time: Tue 12 May 2026 21:01:20 +0000
Manifest this update: Tue 12 May 2026 21:01:20 +0000
Manifest next update: Wed 13 May 2026 21:01:20 +0000
Files and hashes: 1: 9r8kEPo4Ro8lOBvQIbJAndcJdE4.roa (hash: 2P9k8xWZyyhAgwgcrLsXCdtwf5v3K304PlZNuStdbuA=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: BNuh/XO2YlqxIC9z/bSjLPBKI/vfqrdhKMdeWh0AivQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:89:8a:26:4b:b2:c6:6c:fe:d9:bc:ca:50:8d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: May 12 21:01:20 2026 GMT
Not After : May 13 21:01:20 2026 GMT
Subject: CN=6f58f8426e11e8f1478915df51fba66fabb4c329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:90:6a:e4:ed:08:3e:ef:f8:ce:f2:21:e0:
b9:9c:c7:5a:8a:e7:54:16:86:23:f0:71:a4:57:85:
05:70:02:56:95:aa:1a:3a:8b:30:db:42:7f:d9:06:
22:e6:05:23:65:e5:66:a7:3f:76:94:8e:1b:d3:ae:
09:0d:6f:61:b4:d3:f7:91:53:d8:5d:f6:5f:e5:42:
b7:68:8b:70:ab:c8:d2:1f:3d:42:f6:bb:21:90:ae:
40:f3:86:1d:a3:3b:aa:2d:8c:99:79:9d:e9:ca:b8:
44:20:dc:8b:fb:99:12:df:24:34:4c:59:31:e3:65:
9b:4f:37:d8:dd:e6:d3:48:44:73:36:c5:bf:7b:ab:
37:8f:c5:c3:93:4e:02:16:98:6d:6e:bc:2b:8b:ad:
ab:8d:ba:1b:a8:c7:7b:14:f6:f7:60:27:49:aa:54:
30:da:57:0c:8f:ca:a2:50:cb:79:a2:38:bd:55:d5:
c4:9b:46:af:eb:39:a3:bb:7c:c2:a8:9f:23:fc:f2:
c9:86:28:f1:1c:6e:1b:e4:70:c8:c8:4a:a7:43:62:
a4:30:44:5c:9f:91:e7:4c:9a:84:23:4f:e3:2f:39:
3d:f3:e6:1c:4f:44:bb:0f:f0:83:c9:41:a2:db:96:
22:0e:a1:3f:dc:a4:3b:38:09:48:99:d1:29:e5:b6:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:58:F8:42:6E:11:E8:F1:47:89:15:DF:51:FB:A6:6F:AB:B4:C3:29
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:82:16:01:87:a0:41:00:f5:20:e9:e9:2a:ab:1f:57:d7:de:
8e:b3:f5:6b:e8:2e:38:cd:1e:66:76:8f:32:78:60:e7:e3:cf:
8a:d5:49:1c:9c:ef:67:ad:ff:cd:f2:32:5e:d9:ae:d0:60:2a:
92:08:b0:d4:03:7a:7d:a5:da:82:9c:09:4a:07:99:7c:77:1c:
27:c4:e9:b1:66:00:0b:94:ca:93:43:5e:2f:a0:c6:ef:b9:1d:
a4:7c:43:14:50:32:34:3c:fc:d5:9d:18:17:67:e3:df:b0:32:
ba:5c:b9:2e:18:da:fe:e4:20:98:2b:78:be:2c:19:0d:69:04:
59:d2:56:09:a5:30:18:e3:e8:b9:55:ea:ce:02:69:71:ac:ea:
c9:d6:56:9a:01:8b:47:1c:93:4c:9b:21:e1:4a:77:74:1a:33:
d3:ab:6c:d5:6f:93:2f:6c:46:9b:68:1b:b4:f3:03:64:24:03:
2b:78:65:1e:be:5f:0e:a1:02:9f:42:25:72:58:dd:45:74:a9:
c6:fa:95:b6:62:9f:8f:ce:f9:fa:8e:78:0d:0f:4f:ba:c3:bf:
4e:64:bc:7d:2c:22:be:0b:21:ae:b2:3b:27:46:78:71:30:85:
2c:f0:b0:ae:53:96:67:63:91:4a:08:fb:e1:b5:1e:a3:04:41:
8e:d4:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:46 2026 by rpki-client