Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
File: OxRinHZc4axPaIlW47kPatjEtYI.mft (raw, json)
Hash identifier: 09K+XPDxeRfuUuGVYyYLyuNseOMpB3jEbIfVx2QvyqM=
Subject key identifier: 84:42:25:67:4E:E9:59:66:AF:9E:55:2C:42:26:5D:EF:42:D1:09:96
Authority key identifier: 3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
Certificate issuer: /CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Certificate serial: 019E1F1112CA6472BB208F3A8452A8CA99CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
Manifest number: 189B
Signing time: Wed 13 May 2026 02:01:12 +0000
Manifest this update: Wed 13 May 2026 02:01:12 +0000
Manifest next update: Thu 14 May 2026 02:01:12 +0000
Files and hashes: 1: 0yRcFcA3OBSplazAFaiD6lfC3B0.roa (hash: 2qPLWspuMTgkMxkS4l/YyisgXYynSeGYaJD2ttoyg+o=)
2: OxRinHZc4axPaIlW47kPatjEtYI.crl (hash: 0CbYDDqDgNK2cWQmHFvMI92AaMK5dDZ6nQCdedz4ZAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:12:ca:64:72:bb:20:8f:3a:84:52:a8:ca:99:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b14629c765ce1ac4f688956e3b90f6ad8c4b582
Validity
Not Before: May 13 02:01:12 2026 GMT
Not After : May 14 02:01:12 2026 GMT
Subject: CN=844225674ee95966af9e552c42265def42d10996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:9f:88:9a:9b:02:2a:f6:22:8b:7f:0f:7a:
da:87:25:f3:b6:16:43:5f:5b:8b:0d:18:3e:87:18:
b4:69:a2:f3:92:4f:29:70:c0:cc:9c:fc:d9:fe:68:
31:62:85:8f:4a:23:6b:de:1a:ea:73:3c:68:71:8d:
d8:25:79:25:fe:41:33:4d:07:c1:cd:41:06:11:e8:
90:bd:f5:79:4c:36:b5:b6:9f:dc:73:6f:d0:0e:4f:
4c:b2:a5:fa:26:3a:ec:b1:ce:7a:f4:f3:94:8d:ab:
57:91:aa:78:b6:be:8a:38:1a:38:c6:2d:38:06:b8:
7d:62:1d:03:47:7a:51:32:bf:4e:62:97:af:96:13:
94:d3:6e:39:64:62:ad:53:52:8a:a9:f2:d6:c2:27:
5a:3f:ae:e6:14:d0:ef:93:5e:68:06:1a:03:6a:fe:
d6:bd:74:b4:2d:c4:f8:26:fb:8c:7a:06:cd:cc:1e:
43:ad:63:a2:ca:4c:4c:32:4f:fc:8b:0f:05:1c:8d:
a9:50:2d:fb:b4:23:40:a9:27:96:ed:b2:76:c5:03:
0a:18:cb:99:5e:a0:0b:2d:64:64:00:e0:d0:24:93:
2f:2d:dc:ba:89:bc:b2:50:cd:a3:3a:5b:da:9d:fa:
9c:60:eb:51:ac:5d:ec:1c:08:9a:7f:33:b7:fa:e3:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:42:25:67:4E:E9:59:66:AF:9E:55:2C:42:26:5D:EF:42:D1:09:96
X509v3 Authority Key Identifier:
keyid:3B:14:62:9C:76:5C:E1:AC:4F:68:89:56:E3:B9:0F:6A:D8:C4:B5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxRinHZc4axPaIlW47kPatjEtYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a37f9c-1e6a-4665-a0e2-fe31100d081f/1/OxRinHZc4axPaIlW47kPatjEtYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:86:62:8a:8a:97:93:d5:6e:4e:c8:94:16:0c:86:06:15:19:
c1:d1:a4:c6:4e:10:be:dd:0c:be:a9:ef:74:db:a9:cc:c1:b2:
f6:46:53:a4:b2:f3:e6:66:87:d6:8d:17:cc:73:9f:a6:14:83:
fe:18:4b:1b:fc:a9:fd:ff:8f:fc:c0:5b:0d:18:6b:89:6b:f7:
aa:98:91:4e:c9:0a:77:a7:89:b0:35:a1:f0:64:cc:94:fc:23:
f8:b6:61:05:41:c2:a2:e9:3e:71:01:c6:8a:5b:ec:c8:a7:35:
13:b2:57:17:f2:9c:54:11:5f:d3:a6:d7:ef:73:00:2d:5f:06:
94:b9:8a:4a:a3:da:a9:77:6c:66:02:fe:69:14:1b:a7:ad:8c:
99:3d:e5:16:53:58:31:94:12:a6:e6:88:0f:53:c4:0b:62:2e:
d1:8f:4c:ee:bb:94:94:09:cb:f9:aa:08:4e:a7:cb:ba:29:05:
4f:e1:30:35:2c:e7:63:c2:1c:c8:79:58:33:b6:f0:70:8d:7c:
c3:1a:f6:af:2b:f9:f0:b9:cc:6b:8d:62:e0:4d:78:82:0d:01:
f3:1a:95:2f:17:aa:41:f5:f8:6d:e2:b7:82:95:d2:d5:ad:17:
10:d0:11:95:d1:93:0f:4c:e0:82:ee:a1:92:0a:60:26:3e:ad:
a6:b8:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:04:21 2026 by rpki-client