Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: 9V5PaRxEzq8sDVT3UdeBju5OPMVISINhCjyRxckDxJA=
Subject key identifier: CE:4E:12:87:1A:32:D7:59:CA:54:65:0B:43:08:6C:1F:FF:11:FE:2A
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 019E216D0FBF492C7CE1840E59744BAE483D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 13:00:55 +0000
Manifest this update: Wed 13 May 2026 13:00:55 +0000
Manifest next update: Thu 14 May 2026 13:00:55 +0000
Files and hashes: 1: KalgMqPxE7vA7DP0hA4DsBQ8daM.roa (hash: D97KocjmOXeCpIu9eUlLkx7HYIqygCIPtcR0T7mqTEA=)
2: f8cxDtGsT2Ikp6eF_zj9ggqQBiQ.roa (hash: CbPEI2G5Y9W39zpXifforX4BNfoULMQ57Hb8GhyiU7s=)
3: gYIWsUvi3Tex-jz_h6e6eiEViZ0.roa (hash: Gb2ivhnS90IYgEWVgAR/fXTt/Lo6la3jpAyCRBH7e/o=)
4: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: 50ZKHMxZkRGFgAkbO07WYmdsOGTrbvct6WrG4zBPpEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:0f:bf:49:2c:7c:e1:84:0e:59:74:4b:ae:48:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: May 13 13:00:55 2026 GMT
Not After : May 14 13:00:55 2026 GMT
Subject: CN=ce4e12871a32d759ca54650b43086c1fff11fe2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:8f:b2:72:db:01:a4:f3:2a:d2:40:18:92:
23:ed:44:bc:b2:a5:89:58:ce:da:0c:f2:67:fe:be:
4c:4d:d1:2c:e7:a4:ea:26:b1:99:28:ef:5f:01:f8:
6f:dd:fa:82:fb:08:6f:90:94:f0:ca:e0:72:41:91:
3d:f8:de:44:7a:1a:80:9e:05:1e:77:b9:63:0e:00:
e7:6b:6f:d8:fa:2a:a8:67:a6:b6:17:d9:48:11:25:
da:31:cf:67:ac:38:f9:e0:1a:7a:41:d1:c9:fc:91:
3b:1c:1f:bb:cb:36:fb:e2:c4:76:aa:7b:c7:a7:2f:
fe:e2:68:f3:10:f5:dc:1f:53:89:79:a4:75:ab:f8:
90:ef:42:0f:e5:16:97:af:5a:03:49:fd:b3:82:f0:
7b:d6:79:86:13:19:e9:5e:b8:5e:38:3e:13:33:90:
95:e4:15:d0:ee:cc:92:f0:fd:48:aa:3f:c9:15:0e:
79:30:b9:99:ae:0d:85:94:12:92:b6:48:a4:41:c4:
37:ee:07:b4:c7:26:93:03:fb:f4:f1:a2:e2:42:a3:
0b:b9:8a:e7:4b:fe:c2:ed:4d:fd:f1:41:89:ea:34:
c8:77:e1:bc:97:e5:18:a9:71:df:33:77:e9:2a:e7:
57:4c:3e:79:4c:39:c1:1c:77:cc:f0:99:fe:99:4a:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:12:87:1A:32:D7:59:CA:54:65:0B:43:08:6C:1F:FF:11:FE:2A
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:84:98:ab:0c:78:f3:49:d2:ee:80:49:2c:9c:c5:9c:59:de:
81:df:6a:49:07:5b:1f:86:d4:e5:8f:71:d3:18:2e:3a:7c:3e:
63:20:60:f4:09:18:23:ec:46:8b:56:f4:0e:f9:7c:52:ea:67:
ee:49:f4:98:f8:d3:3e:39:78:bb:0b:4f:fd:04:cb:01:47:1c:
19:85:8b:cd:c4:8a:59:93:2e:b0:1f:43:a1:93:61:c5:f5:f8:
78:6d:87:c1:fc:81:68:ed:72:e8:98:7e:a6:0e:89:f6:e0:f9:
2e:55:a8:4e:1d:36:7c:53:54:64:03:86:a7:7d:01:18:84:86:
59:bb:60:28:38:87:9b:74:88:60:59:fd:93:b9:37:48:45:44:
70:40:69:61:7c:c0:57:33:51:a3:0b:3e:1d:c7:e0:af:41:30:
fc:05:ac:8c:17:a2:45:e7:19:f1:91:b4:c7:dc:cc:34:bd:2c:
23:14:8a:b0:16:75:f8:4c:85:0e:3e:a2:66:4a:ca:e4:de:ac:
dd:8a:c5:5b:40:26:e0:d8:22:be:f7:04:fe:7c:07:76:e3:96:
ba:8e:56:22:7e:90:bb:10:80:bb:c9:4d:d8:57:00:75:41:12:
0a:91:82:9d:d4:5a:39:34:e8:d6:86:2d:0b:64:ba:5d:59:92:
e0:d3:94:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbQ+/SSx84YQOWXRLrkg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjk4YjAxMDUzOTExNjA3ZWRiMmE3NjA5MGE2YWNlZDk1
YTNlZDUwHhcNMjYwNTEzMTMwMDU1WhcNMjYwNTE0MTMwMDU1WjAzMTEwLwYDVQQD
EyhjZTRlMTI4NzFhMzJkNzU5Y2E1NDY1MGI0MzA4NmMxZmZmMTFmZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksGPsnLbAaTzKtJAGJIj7US8sqWJ
WM7aDPJn/r5MTdEs56TqJrGZKO9fAfhv3fqC+whvkJTwyuByQZE9+N5EehqAngUe
d7ljDgDna2/Y+iqoZ6a2F9lIESXaMc9nrDj54Bp6QdHJ/JE7HB+7yzb74sR2qnvH
py/+4mjzEPXcH1OJeaR1q/iQ70IP5RaXr1oDSf2zgvB71nmGExnpXrheOD4TM5CV
5BXQ7syS8P1Iqj/JFQ55MLmZrg2FlBKStkikQcQ37ge0xyaTA/v08aLiQqMLuYrn
S/7C7U398UGJ6jTId+G8l+UYqXHfM3fpKudXTD55TDnBHHfM8Jn+mUogzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5OEocaMtdZylRlC0MIbB//Ef4qMB8GA1UdIwQY
MBaAFKNpiwEFORFgftsqdgkKas7ZWj7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTIt
YmJkMzExMTg2OTUwLzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTItYmJkMzExMTg2OTUw
LzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4SYqwx4
80nS7oBJLJzFnFnegd9qSQdbH4bU5Y9x0xguOnw+YyBg9AkYI+xGi1b0Dvl8Uupn
7kn0mPjTPjl4uwtP/QTLAUccGYWLzcSKWZMusB9DoZNhxfX4eG2HwfyBaO1y6Jh+
pg6J9uD5LlWoTh02fFNUZAOGp30BGISGWbtgKDiHm3SIYFn9k7k3SEVEcEBpYXzA
VzNRows+Hcfgr0Ew/AWsjBeiRecZ8ZG0x9zMNL0sIxSKsBZ1+EyFDj6iZkrK5N6s
3YrFW0Am4NgivvcE/nwHduOWuo5WIn6QuxCAu8lN2FcAdUESCpGCndRaOTTo1oYt
C2S6XVmS4NOUOw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:05:05 2026 by rpki-client