Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
File: OI6WKEDNMWjdLqOW_mgSdiiurCc.mft (raw, json)
Hash identifier: yVs6ix13q0eXAo08eKkCRsCDuiKyV7ZYzNDs5pfCZ7E=
Subject key identifier: 8C:3F:97:3A:48:90:53:F9:45:8B:88:2C:D0:AB:4B:BF:F4:FC:AB:33
Authority key identifier: 38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
Certificate issuer: /CN=388e962840cd3168dd2ea396fe68127628aeac27
Certificate serial: 019E1D90FE01AABE2BB8F97F9989C4917801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
Manifest number: 153A
Signing time: Tue 12 May 2026 19:01:41 +0000
Manifest this update: Tue 12 May 2026 19:01:41 +0000
Manifest next update: Wed 13 May 2026 19:01:41 +0000
Files and hashes: 1: 1sinQA6h7dImfS-hLQXdEPPUS7o.roa (hash: FB9LZtBueOj4bnnfbHb5xfT5GN4Z8riVIdnhcL0WA+Y=)
2: OI6WKEDNMWjdLqOW_mgSdiiurCc.crl (hash: VQHeIm62C5Lk0Ipgx8oKAlVNHIEL8GWbgYRs/c5Vd+4=)
3: og_3NkCcBQ0oU8RRrSWYxb27Fds.roa (hash: wOJ++TjkHyH6m97Cjc42HJh2+OZY1t57lzlz/LkoCjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:fe:01:aa:be:2b:b8:f9:7f:99:89:c4:91:78:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=388e962840cd3168dd2ea396fe68127628aeac27
Validity
Not Before: May 12 19:01:41 2026 GMT
Not After : May 13 19:01:41 2026 GMT
Subject: CN=8c3f973a489053f9458b882cd0ab4bbff4fcab33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:2c:b5:59:7b:2d:90:f1:81:4f:78:11:51:
82:60:29:71:6c:11:bb:a3:b0:3e:14:6a:1d:06:72:
9f:7f:8b:96:d1:3a:f1:a9:3b:f6:a9:58:5d:1e:00:
b5:b5:3c:18:92:6f:de:f3:6b:7b:c3:7a:aa:43:74:
0d:ad:13:08:ee:44:b6:43:b9:9b:49:90:67:60:d4:
99:7d:18:73:91:d4:60:c4:0f:d1:e3:de:27:a1:93:
c3:2a:fe:eb:61:29:07:51:3b:53:4b:99:a9:07:09:
93:6a:e1:80:8c:ef:b1:41:0a:a3:6a:36:f5:32:7f:
00:25:c2:5e:6a:c2:da:4b:1b:f0:81:37:dd:5c:4d:
6f:f0:0c:4d:c9:86:b7:0b:95:e8:3b:30:42:a7:fd:
4b:dc:d1:99:f2:56:18:12:61:01:32:0a:98:e1:65:
af:3e:9c:0a:90:b7:fc:03:b2:27:1b:da:1d:e7:ed:
ee:10:75:6d:e7:36:5f:82:68:ea:09:44:37:07:ae:
f6:b1:97:df:a7:85:76:1d:17:79:a1:e9:ff:08:f5:
9c:d4:1a:54:6b:18:d0:7e:79:b3:f6:cd:ff:21:68:
19:05:c1:cc:b0:a4:a3:c7:6c:f4:fd:2a:4b:92:ce:
b8:c4:7f:95:2e:b1:94:3e:97:af:20:b1:20:1e:0b:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:97:3A:48:90:53:F9:45:8B:88:2C:D0:AB:4B:BF:F4:FC:AB:33
X509v3 Authority Key Identifier:
keyid:38:8E:96:28:40:CD:31:68:DD:2E:A3:96:FE:68:12:76:28:AE:AC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OI6WKEDNMWjdLqOW_mgSdiiurCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/55ea3e-d7e2-430c-af8a-c321840c1faa/1/OI6WKEDNMWjdLqOW_mgSdiiurCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4d:9c:86:72:e6:18:55:2f:74:fd:ef:f0:98:64:e2:2f:7b:
df:e0:0c:a1:fa:17:73:c9:b4:66:fc:dc:05:47:36:c5:67:f1:
32:1b:ba:67:37:d6:34:76:7d:8d:83:ae:1e:93:bf:b1:8f:25:
10:72:d5:dc:e5:38:ba:f4:c6:b1:7b:ee:2a:80:78:f6:6f:01:
0f:6e:cc:ef:72:ef:f6:07:2e:cd:ad:ed:2a:e4:cb:7f:eb:a2:
23:81:f4:26:32:cd:48:cc:d3:cc:ef:ea:11:15:92:26:67:91:
62:0f:45:8a:c0:8d:aa:4b:ed:88:3b:d7:4c:f6:2d:9b:8b:40:
a4:74:74:60:af:ac:f1:c9:69:06:96:3f:17:1f:9a:2e:1f:7f:
7d:74:25:02:61:59:7c:db:9a:0e:05:80:83:78:f6:50:ea:ce:
67:e9:2c:03:74:53:2a:13:ad:b5:e3:d9:a3:6c:b0:0d:6b:00:
79:15:8b:40:42:9a:66:71:5a:87:6f:cd:42:1e:63:b9:1c:1a:
c3:a8:13:34:7f:88:d1:2f:23:18:0b:ea:fb:a9:93:2e:22:da:
5d:e6:69:6b:cd:d7:a2:15:f5:22:e6:e8:da:91:fa:1f:0d:3d:
7b:1a:11:c3:0d:1b:41:11:a2:73:17:68:4f:e1:ad:66:99:7b:
b2:54:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:29 2026 by rpki-client