Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: /ZxnRowlCLj79Y/VwXQ6Co/0adykWJMzgE3VNj9IRdc=
Subject key identifier: 9A:5A:7E:CC:68:59:1A:BA:BF:9D:72:02:9B:42:38:B7:75:21:4C:7A
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019E1EA2D5A728C7167C02DD4B2AA596C46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0E93
Signing time: Wed 13 May 2026 00:00:48 +0000
Manifest this update: Wed 13 May 2026 00:00:48 +0000
Manifest next update: Thu 14 May 2026 00:00:48 +0000
Files and hashes: 1: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: QnEDIOdL+MhBYdykKrkpItN5Og7IWpaXrjopv/2hvD4=)
2: P1PmM2uLEOvejeMWTOPNfCrKCWw.roa (hash: BqT8twhQ0uEEmxqajzmTZrRL98ojMwqzfMIoqWLSqng=)
3: rETz40juPgcEcnRiiNd5Zkfp5E0.roa (hash: TAUP0+pgTh+woa/aSZUMYoWxSKIqt0xYGbzn00Yc33o=)
4: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (hash: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d5:a7:28:c7:16:7c:02:dd:4b:2a:a5:96:c4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: May 13 00:00:48 2026 GMT
Not After : May 14 00:00:48 2026 GMT
Subject: CN=9a5a7ecc68591ababf9d72029b4238b775214c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:87:78:91:c8:07:5b:b1:ea:72:7d:36:f9:
c8:c2:ed:1e:15:62:c3:d9:67:35:78:a0:a6:35:32:
2a:73:db:94:51:fd:38:bd:3c:45:17:87:47:9e:5a:
8c:fe:40:e5:2d:e6:06:ac:db:8a:28:8f:d6:25:2b:
9d:69:b5:2c:5f:d9:5d:a1:4f:12:44:1e:ec:8b:cf:
88:e8:31:45:70:e3:d8:4b:37:38:e2:b8:bd:0b:2a:
19:da:ae:35:0d:7b:06:71:a4:cd:e7:b0:33:85:52:
04:68:31:24:bc:f3:4b:dd:36:cc:8d:15:b0:67:52:
9a:ee:f2:8c:ab:12:f6:47:6b:63:58:1a:c5:a2:f5:
18:ae:bf:ef:21:dc:b2:67:da:84:84:5c:e6:b5:0f:
1e:66:c6:9e:8c:85:e8:b8:46:73:2c:fc:2b:05:a2:
c2:0a:cd:d3:8b:ac:50:f8:12:de:77:9d:d2:46:5b:
11:14:15:9f:28:20:9a:77:de:ed:58:71:95:b4:5e:
50:de:1f:40:dd:4b:73:51:b5:01:84:21:19:7a:19:
8c:17:31:f2:bb:2f:7b:fa:45:fe:d9:4c:22:6d:c7:
61:68:87:0a:0e:1b:90:fa:bc:59:36:e7:1f:2a:1e:
0b:ce:a6:13:d3:1e:73:eb:97:86:a4:1d:86:60:e7:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:7E:CC:68:59:1A:BA:BF:9D:72:02:9B:42:38:B7:75:21:4C:7A
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:20:1c:e1:b0:05:94:df:9a:4b:09:09:09:cd:19:d6:d0:bf:
10:a4:77:57:65:ab:13:81:85:cf:16:ac:3a:a4:e7:a9:1a:df:
1f:5e:1d:75:23:42:d1:6a:5e:3a:44:06:28:89:ef:6b:73:15:
3b:62:f9:2c:3b:ea:93:0f:fe:ed:5e:72:be:c9:e6:a7:7a:00:
cf:52:36:7f:e4:fd:d7:15:53:ec:da:23:e4:f6:26:90:19:5c:
ab:9f:4e:97:ed:cd:8b:2f:32:32:ca:d6:16:e5:5b:d8:03:db:
b0:36:4f:b5:13:3a:e8:c8:f9:50:cb:29:e5:e4:f6:00:25:17:
27:5c:08:4c:c0:48:68:a2:53:f8:13:13:e8:fb:b5:28:90:4a:
57:06:f4:ef:05:53:80:5b:50:70:af:1e:97:b4:b7:ea:07:b2:
3d:de:eb:a8:ca:19:6a:dd:36:0d:44:68:7a:a1:ec:21:46:8d:
20:9f:4d:0a:9d:e7:d0:51:c8:f6:23:27:0c:c2:13:09:e7:a6:
e0:68:18:45:2f:65:a4:48:bc:c9:d8:6f:e3:f5:4c:fa:c4:f6:
50:2c:e8:07:48:d0:03:9a:0d:f9:0c:0f:b9:14:58:b1:18:57:
3b:46:81:5e:8c:0e:3d:91:dd:a7:6e:76:ad:8b:d3:a7:6f:20:
60:e9:27:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:29 2026 by rpki-client