Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
File: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json)
Hash identifier: +o6s8HOqt8H67j1mjqoNIrZ2M+8H7I1gng9d9FSqqc8=
Subject key identifier: 37:C3:91:C9:40:D0:94:C4:60:CE:56:E2:8C:82:86:3C:01:93:08:4D
Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
Certificate issuer: /CN=a36619427c283fa3b2bb7b45cc35a51286398961
Certificate serial: 019E20921AE36FBB65B11881F89013FAD8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
Manifest number: 01BB
Signing time: Wed 13 May 2026 09:01:46 +0000
Manifest this update: Wed 13 May 2026 09:01:46 +0000
Manifest next update: Thu 14 May 2026 09:01:46 +0000
Files and hashes: 1: kFGche0sUMJjtQYWtRrXVgbIroM.roa (hash: 34UZsa7v3vzkYl287UK/ejNXOYJMH9D9QG1MuCDxpCg=)
2: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: +e9ae7JoVEVYZQL6jg4UnxbVB9BwMhBMi3GKbGvf2PA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:1a:e3:6f:bb:65:b1:18:81:f8:90:13:fa:d8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961
Validity
Not Before: May 13 09:01:46 2026 GMT
Not After : May 14 09:01:46 2026 GMT
Subject: CN=37c391c940d094c460ce56e28c82863c0193084d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9a:9d:83:d8:9e:f3:79:88:8d:d2:8a:e2:41:
16:fa:be:8d:ab:61:e0:09:97:79:14:07:06:02:d4:
7e:46:50:bc:a4:cf:3f:2a:e3:df:06:4c:5c:41:07:
3e:a8:80:9a:e4:20:f4:16:25:de:71:2e:74:5d:5c:
cc:a9:97:eb:fd:fd:88:d1:05:d1:35:17:e4:70:ab:
6f:36:1b:5a:a1:7f:2f:05:72:e7:23:02:ae:78:c6:
6e:0b:eb:97:b0:d4:71:40:d5:8f:db:3f:1b:c4:45:
97:6e:56:20:63:d0:5c:49:55:63:34:c2:51:a2:c2:
d4:ef:ca:45:b4:77:a2:c4:3e:fa:d1:40:b9:4a:70:
e5:93:1a:7f:0a:d0:c1:2a:70:84:08:df:fe:47:b6:
a2:ab:55:4d:12:63:61:42:5a:6f:36:59:50:a4:7c:
a5:1f:d8:65:76:19:af:59:ab:6d:24:95:e3:41:19:
bf:78:ba:49:60:c8:d1:5f:af:85:84:8c:42:85:98:
cf:3a:a2:36:6c:83:08:b9:6b:fe:f2:e9:fb:c9:09:
f9:e5:81:a0:fa:55:0e:76:df:5f:d0:fd:18:55:43:
e9:80:f7:8c:3b:40:30:a9:85:e0:b7:63:5b:db:f4:
e0:34:56:de:95:90:4c:4b:e8:ae:0e:1f:c2:5a:a8:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C3:91:C9:40:D0:94:C4:60:CE:56:E2:8C:82:86:3C:01:93:08:4D
X509v3 Authority Key Identifier:
keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ac:47:bc:0a:4f:b9:7b:eb:c3:bd:36:4f:9b:90:26:8a:63:
07:f8:bb:d6:f9:92:f4:c5:ae:e5:69:8b:04:6a:05:a1:1e:19:
db:25:e5:ee:51:4f:31:b9:f5:ae:9e:bc:8e:6d:43:63:98:81:
d9:a3:b1:ce:78:06:4e:75:62:43:b3:13:2a:1e:06:7d:11:88:
25:00:81:b5:db:43:5e:f1:1a:26:9a:e9:06:d9:66:53:22:dd:
74:2b:69:18:70:e6:2b:57:76:c3:c9:c0:4d:98:92:d4:7e:80:
23:35:5d:4f:d2:e1:16:20:9d:7c:db:27:f9:ce:28:2f:07:39:
00:f0:ad:9b:73:c0:90:29:76:f6:37:a1:a6:da:95:1a:03:4c:
2e:30:44:00:4b:9f:0f:4c:93:2d:f1:fe:8d:04:94:68:c8:4c:
14:8e:41:87:02:54:7d:ca:9b:3d:c7:3d:a1:95:d1:08:9f:2c:
a1:72:cf:ad:30:dc:eb:07:6d:e5:bc:d3:ba:38:eb:44:9a:41:
81:d0:42:90:8a:38:41:a9:92:2c:72:41:5a:a5:2f:f0:dc:0c:
35:77:50:fd:9c:cc:86:7e:6f:9c:11:0b:55:a1:35:b4:06:40:
e9:e5:0d:d3:e7:44:05:bd:55:cd:15:31:e0:1b:21:1d:ef:e1:
30:5a:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:09 2026 by rpki-client