Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: UTrPl8egTz4v66rkhvVsC0SO5qLhmArpMAtbeDjHvow=
Subject key identifier: BB:5F:16:A0:8B:18:43:B6:D0:E4:42:FD:DC:A8:3A:8A:58:E4:8E:D2
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 019E20244A4529A082F0FC1D51550A37ED9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 07:01:49 +0000
Manifest this update: Wed 13 May 2026 07:01:49 +0000
Manifest next update: Thu 14 May 2026 07:01:49 +0000
Files and hashes: 1: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: JYBnEaawaWwfX6hy/5viJ+ZID4n2DM/QDvwNyCuWPQc=)
2: mBkIIhBUokxiDs7U62dP6EGJ28A.roa (hash: KThHm1xgh12oiiD8xAb/mt2PPatVJSHJqHsKnrjqp7Q=)
3: uEzMp8gZyoHebkBdiY9KRs9lacE.asa (hash: x7WXJvWldueVaogAt4aCHUIb6RJurPgI+nLyD+k45kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:4a:45:29:a0:82:f0:fc:1d:51:55:0a:37:ed:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: May 13 07:01:49 2026 GMT
Not After : May 14 07:01:49 2026 GMT
Subject: CN=bb5f16a08b1843b6d0e442fddca83a8a58e48ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d4:6e:43:65:5f:fd:dc:f4:15:01:a8:c4:e9:
a9:99:4f:62:58:3d:03:7a:2f:24:51:fe:5b:f1:d2:
33:78:c0:3f:e8:84:ec:ca:21:dd:d8:79:db:ae:36:
c0:af:2e:78:d2:1e:0f:b3:01:71:c3:e1:27:aa:95:
84:5b:21:54:2e:de:60:30:cf:66:a6:fe:85:1b:ae:
2b:c9:b0:82:50:10:03:54:53:a6:eb:df:81:41:0c:
d4:25:e5:c8:ca:ff:03:27:21:95:c5:06:8e:0e:a7:
2f:1a:51:a0:ea:38:f4:64:df:4c:d8:5e:86:7a:81:
a6:67:d9:9d:05:18:e8:4f:86:6c:00:96:65:0b:88:
fc:59:5c:17:10:8e:f0:08:96:94:47:c2:1e:3f:c1:
49:77:04:b5:21:1b:75:63:33:2b:9b:d6:40:16:93:
7e:09:88:f4:98:82:2c:ba:87:8b:a4:7f:17:91:15:
99:88:34:fa:fc:0c:8e:ed:a5:ce:91:b1:e1:9c:3c:
9d:6c:64:88:03:39:2f:73:a7:7e:53:b7:55:3f:76:
e6:1b:dc:c0:7a:19:6c:02:60:ce:a1:f5:15:2a:ee:
96:1f:6e:a7:27:1b:0c:5d:d6:c5:18:12:f8:16:1f:
e3:f1:f3:6a:ac:e1:45:4f:37:7f:58:43:7f:03:93:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5F:16:A0:8B:18:43:B6:D0:E4:42:FD:DC:A8:3A:8A:58:E4:8E:D2
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:35:cf:08:89:cd:0f:ed:8f:03:a3:3c:e7:81:21:d7:84:38:
d7:a1:5b:2f:1b:72:d6:25:7a:6c:fb:5e:b1:90:51:4a:b5:19:
e7:09:e6:17:66:71:44:a2:be:5f:5d:b3:59:8f:4c:03:c7:2e:
4c:ee:26:10:55:42:5a:1c:28:7c:91:ab:65:fa:89:a3:8b:d6:
bb:a4:d5:bb:28:32:cb:3e:30:ae:a7:7a:82:ad:ff:0f:86:8a:
49:13:9f:f8:f8:46:95:32:21:30:42:53:58:0e:5f:82:ac:95:
0b:16:ba:d9:dd:60:1e:3d:d2:88:34:64:86:53:fe:1f:1e:5c:
10:d7:4e:72:dc:a0:c4:92:85:eb:fe:79:e8:dd:36:46:fe:10:
5b:bc:d9:29:72:f5:93:45:71:37:26:9d:05:50:6f:38:e4:b4:
58:4e:8c:0f:6c:0b:99:c7:95:c3:05:80:30:e5:f7:be:30:cf:
0b:a6:e8:fd:a7:5b:70:1e:86:20:76:1d:f0:91:3e:9e:09:7f:
20:f9:4e:8d:88:aa:a9:64:d4:0b:70:25:a1:c4:a5:a8:84:91:
aa:dd:0e:e5:17:ac:40:86:11:16:1c:d4:df:ab:74:f4:76:16:
ed:50:51:42:14:e8:67:f6:0b:9f:ec:0b:1e:95:61:32:d3:78:
be:ab:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:58:02 2026 by rpki-client