Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
File: OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft (raw, json)
Hash identifier: uqZgdzJUYqQ1zxaCQc0kzUPg2+ldJc8XEOajj2j25ds=
Subject key identifier: B6:34:F9:EA:A5:69:67:6E:4B:AE:DA:52:2D:03:4F:5A:7E:73:F4:FA
Authority key identifier: 39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
Certificate issuer: /CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Certificate serial: 019E1CB52262AED1ED08F1008C31999591C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
Manifest number: 1896
Signing time: Tue 12 May 2026 15:01:33 +0000
Manifest this update: Tue 12 May 2026 15:01:33 +0000
Manifest next update: Wed 13 May 2026 15:01:33 +0000
Files and hashes: 1: OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl (hash: RxX6tCFErYHngIRHZQb4zYNEV/HCqYgeFcKxwyQPY8Y=)
2: TFyydJckZZxmvJ2kyZiqerxMndc.roa (hash: 1M8O0DEiBMTzRovUAkdLb42byd8jCd0k32zelG/wKMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:22:62:ae:d1:ed:08:f1:00:8c:31:99:95:91:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3979b435a3cfefe7c33a84b22f6033009a5225c7
Validity
Not Before: May 12 15:01:33 2026 GMT
Not After : May 13 15:01:33 2026 GMT
Subject: CN=b634f9eaa569676e4baeda522d034f5a7e73f4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:d3:2a:2e:78:60:46:d9:b6:63:4a:52:a7:
ad:7b:09:9d:e4:73:45:b5:6f:ba:09:d8:c5:f9:2b:
68:dc:f9:ec:16:65:00:7c:e6:98:06:04:7b:71:c8:
fc:c5:4e:5d:fa:36:11:60:fa:93:1a:31:3b:37:26:
ac:ac:85:a9:47:05:b7:17:5b:d6:a9:6d:24:ad:ea:
7f:03:f4:fa:65:4c:15:2e:19:3f:4e:b1:3e:c2:92:
bb:08:41:3e:dc:06:70:ad:68:ad:c8:c4:07:13:cf:
5f:e1:95:6d:08:10:fb:71:2e:fb:f6:dc:a5:81:15:
c3:77:d3:d8:9d:14:76:8e:ab:0d:91:5c:db:28:d2:
ae:13:16:23:e0:5e:54:6e:37:8f:09:44:c1:d6:09:
cf:c7:14:20:8c:da:b6:6f:68:59:4f:c0:9f:eb:44:
a0:a6:01:d7:e6:9c:73:03:69:01:4d:46:68:32:47:
e7:b3:31:6e:3d:1a:da:3d:3f:59:23:59:3d:68:51:
6d:a7:95:81:86:4e:87:f4:2d:47:4e:6f:cb:07:0b:
b6:ec:b3:58:68:99:80:cd:b6:c8:a9:fc:ba:13:1e:
03:f1:34:7b:63:b8:15:e3:ac:6e:3e:96:dd:c4:44:
7e:d3:e6:de:39:7e:df:00:46:00:0d:71:23:0a:7a:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:F9:EA:A5:69:67:6E:4B:AE:DA:52:2D:03:4F:5A:7E:73:F4:FA
X509v3 Authority Key Identifier:
keyid:39:79:B4:35:A3:CF:EF:E7:C3:3A:84:B2:2F:60:33:00:9A:52:25:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXm0NaPP7-fDOoSyL2AzAJpSJcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/73a71e-446d-41ff-aabf-d5bc239f6a98/1/OXm0NaPP7-fDOoSyL2AzAJpSJcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:54:72:31:2d:d9:e3:b3:05:e8:71:ca:b4:91:c0:30:53:51:
99:dc:e2:92:2a:23:1a:9d:a8:ee:76:d2:f4:56:9a:a7:1c:f3:
e6:c7:7f:88:ce:24:42:bf:2a:28:da:f6:3b:1c:58:81:02:27:
96:81:09:55:c7:69:45:35:9a:69:d5:dc:c7:9f:76:f3:fb:59:
df:6a:6a:91:65:3f:03:82:38:58:3e:ab:9d:be:2c:5d:f2:a2:
22:1d:c3:2a:54:21:dd:b1:9e:60:9e:56:d0:f3:cd:b0:5e:eb:
09:84:af:be:1d:ba:87:c0:0c:01:8f:31:76:03:71:e6:94:a2:
08:00:96:e7:53:27:22:3e:7b:66:95:f2:21:e4:e7:83:a8:f4:
26:2d:63:f2:9f:de:7e:a6:f1:28:9f:e4:3f:ab:e3:2e:66:79:
59:ce:37:61:3b:af:d6:76:82:9f:39:50:53:15:b8:ae:9c:f1:
be:b3:c1:ee:22:d3:21:8a:97:91:72:48:f1:74:10:53:3b:37:
db:1b:86:81:76:14:8c:ef:5a:7a:62:2a:64:9b:63:b3:c3:31:
f6:5f:50:56:dd:8e:d1:e7:4a:f8:8b:72:7e:80:08:94:6b:2f:
b2:50:e6:83:8d:85:f0:d1:77:43:d9:d6:70:36:87:35:e5:be:
fc:31:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:40:41 2026 by rpki-client