Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
File: OC5TMDOzzpXklyvyOC3awpPC3AE.mft (raw, json)
Hash identifier: DNoDVLmxikR4lnc04w2YQZYc84PAPqwzceCJElgz2V4=
Subject key identifier: 15:31:7A:10:BF:7F:4D:E1:AE:A4:34:79:E1:FC:ED:7D:82:E4:81:1D
Authority key identifier: 38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
Certificate issuer: /CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Certificate serial: 019E1D90BD9E05E6C4BD531E77B77EFBC702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
Manifest number: 0C65
Signing time: Tue 12 May 2026 19:01:25 +0000
Manifest this update: Tue 12 May 2026 19:01:25 +0000
Manifest next update: Wed 13 May 2026 19:01:25 +0000
Files and hashes: 1: 16Wly6tf9ZCRlJ1eLRRr8Q4xzIw.roa (hash: Kp7oiL6STzpmE+EAdvQJo2k6GaSB6dYQxfvWJmxfMsM=)
2: JTe6rZdralZYMfrallY8D9l18pI.roa (hash: nAhU2MmHuPgFOMieOuqyCTSQGexpWdZSuDuOtmxyLp0=)
3: OC5TMDOzzpXklyvyOC3awpPC3AE.crl (hash: K+FpB8UDgb9rLQPWWi1tYoi4pH9teQIRUqpZMrV0qAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:bd:9e:05:e6:c4:bd:53:1e:77:b7:7e:fb:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382e533033b3ce95e4972bf2382ddac293c2dc01
Validity
Not Before: May 12 19:01:25 2026 GMT
Not After : May 13 19:01:25 2026 GMT
Subject: CN=15317a10bf7f4de1aea43479e1fced7d82e4811d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:60:dd:6c:c8:de:2c:6b:40:ee:34:18:ab:d1:
3b:67:e9:1e:7c:e9:48:41:b5:0b:8b:a5:67:be:73:
51:4e:72:bf:f1:58:90:70:47:c7:26:84:dc:cb:2b:
b7:3d:ad:33:69:d1:87:71:3d:78:99:fc:8e:7f:34:
59:91:fd:42:73:ae:1a:30:9b:67:7e:e1:0e:88:15:
e0:1b:63:12:94:5a:0f:16:ae:f5:a6:35:3c:05:31:
25:02:14:f0:d6:3f:87:6b:5d:de:0b:b4:a2:34:96:
1f:70:e4:77:21:7e:6b:38:38:72:25:22:d7:a8:27:
74:01:48:04:db:46:c4:c9:e2:1d:bc:86:b9:d0:0b:
6b:c0:fc:ab:ba:89:39:7b:48:ce:6d:2f:3e:ae:07:
85:99:e0:86:29:1b:24:61:ff:d2:b4:12:cd:71:27:
37:e1:2b:73:4e:f8:43:3a:c8:ed:e5:5b:f3:72:d5:
ad:4d:8f:50:fd:60:55:0f:fb:76:57:18:54:a4:eb:
36:8e:03:fc:78:1f:97:89:e8:3e:24:0f:41:77:3d:
de:e2:f8:af:bd:05:a2:d1:8f:84:b1:97:da:e3:d5:
0f:56:8a:f2:e1:b3:b4:46:56:18:c1:46:89:09:99:
b5:3b:f1:ed:3a:78:b7:bd:a6:a4:12:8e:4c:41:9a:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:7A:10:BF:7F:4D:E1:AE:A4:34:79:E1:FC:ED:7D:82:E4:81:1D
X509v3 Authority Key Identifier:
keyid:38:2E:53:30:33:B3:CE:95:E4:97:2B:F2:38:2D:DA:C2:93:C2:DC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OC5TMDOzzpXklyvyOC3awpPC3AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a0fae1-40ee-4191-b2d4-eaa090514b52/1/OC5TMDOzzpXklyvyOC3awpPC3AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d3:a2:c9:d9:9a:2f:6d:e6:97:2c:c9:0b:5a:b3:5c:81:ee:
2c:cf:9a:6a:8c:f1:d6:4e:ac:27:72:a3:f2:68:1a:d5:28:42:
d2:94:4a:fd:16:e8:3a:d3:1f:fd:22:55:89:c7:03:ef:ca:9b:
76:72:ee:ee:77:2b:02:2f:b0:b0:39:5e:85:5c:dc:f5:11:a3:
0a:31:cb:68:37:21:cb:aa:fc:e7:61:b6:ba:93:5d:c7:3c:77:
1c:06:06:bc:16:85:9c:00:97:3a:0b:01:e7:8d:9e:56:3e:f4:
41:89:f1:9a:81:9a:08:95:ea:1b:78:40:68:52:60:d5:73:c1:
01:18:29:b2:5f:26:34:51:1a:86:f8:b2:4e:17:ff:3f:45:e4:
39:88:e5:22:89:eb:5f:3a:37:14:d0:7a:14:05:32:da:b3:1f:
6a:76:c9:43:2e:6f:94:ad:ce:23:a6:72:13:aa:94:52:54:27:
e6:ff:66:ad:bf:05:7f:90:cc:79:27:5d:8b:c1:7b:39:51:21:
a6:44:86:b0:0c:e0:38:8c:84:bf:e2:89:3e:a7:03:89:fb:55:
e4:84:1d:51:50:d6:ee:22:2d:7a:5e:83:f9:72:94:f2:1d:d0:
53:c1:1e:c5:8c:99:95:d9:df:8a:9d:b1:7b:e4:36:54:96:1c:
71:56:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:31:26 2026 by rpki-client