Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: 6LmMu1rV2NhCx4D0n2nXoYtVtBvSt17p70gOhkS538c=
Subject key identifier: BD:21:11:69:69:08:FF:9E:4F:D4:B4:FA:45:00:37:9E:48:A4:43:AF
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 019E1D90E522DFA1A2D775E4FE4EFFFCD3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 19:01:35 +0000
Manifest this update: Tue 12 May 2026 19:01:35 +0000
Manifest next update: Wed 13 May 2026 19:01:35 +0000
Files and hashes: 1: 3FSpgzAXC8p7jTixkHlGezHGwxw.roa (hash: q7VRVi7aquIaQFPQCNGSGp5HYmtRuqJk7SNBV0vpXjc=)
2: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: r7dApQUvL7tVaY9dlEUXO8HulNrFp6lRJrntqAm9Bug=)
3: wXIpuWNeJpplraRivZmQRjPoSsY.roa (hash: LFZwGG9uojAXiF1PDv3sxki5/LPjehfpl7jo7RdhMzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:e5:22:df:a1:a2:d7:75:e4:fe:4e:ff:fc:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: May 12 19:01:35 2026 GMT
Not After : May 13 19:01:35 2026 GMT
Subject: CN=bd2111696908ff9e4fd4b4fa4500379e48a443af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f1:67:38:25:f2:8d:d2:07:69:62:1e:e3:73:
bd:dd:6d:1b:18:57:94:c2:1e:3f:3f:34:a9:d0:37:
ed:05:b5:c1:d4:fa:e0:4e:69:a5:fa:cb:44:48:69:
fc:09:fc:87:77:9b:27:18:0f:91:d5:f2:b8:14:b7:
a5:19:8b:82:37:31:31:50:ad:ee:be:a5:1f:2e:44:
e2:f7:2d:cb:db:64:62:72:4d:bb:d6:bc:ad:bc:27:
3f:0c:9e:4d:d7:1c:4e:9b:29:1f:e5:79:47:d4:97:
8c:d3:43:9b:f6:d3:9f:e5:49:4e:d7:19:56:7b:73:
36:2c:a1:87:4c:65:93:76:c3:9f:4a:aa:5d:e1:d4:
64:6e:6b:55:07:4d:98:e1:3d:ba:89:5e:b1:db:8d:
eb:45:d3:97:d5:d4:65:13:79:54:c9:c2:d5:55:ac:
e2:e3:35:14:ea:16:28:39:db:bf:db:a0:c5:e2:45:
e3:87:9c:d4:3b:6d:3d:4a:e5:0d:90:ca:01:e2:3f:
98:93:6a:ba:d6:d8:71:20:49:8a:d3:68:d6:56:90:
15:ba:82:6c:58:2b:99:79:54:f2:80:76:f9:46:94:
dc:6a:3b:ee:57:09:d2:2c:33:c2:b5:3d:18:86:70:
91:f8:bf:74:cd:86:c4:06:0a:e7:f4:d9:e9:66:87:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:21:11:69:69:08:FF:9E:4F:D4:B4:FA:45:00:37:9E:48:A4:43:AF
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7b:71:10:58:3a:cb:77:92:c3:36:5f:3a:88:a4:15:96:a8:
57:f9:41:c4:77:15:df:c1:71:ad:22:30:9c:29:fe:0d:52:f9:
46:92:d3:34:a7:5c:91:21:fb:9c:76:b2:96:e0:f9:e7:e5:ac:
04:3b:8e:b0:5e:4e:dd:1f:15:24:52:cb:c8:ae:21:e9:bd:a7:
f8:e6:82:06:5b:4a:cf:e2:d6:77:0f:62:a9:ba:5c:dd:d7:77:
7b:fc:05:0f:bf:1e:ae:ea:1d:3d:15:ff:d2:71:97:ce:bb:21:
24:c9:81:73:f1:32:2d:99:86:30:d2:fe:b3:91:8e:48:2c:d8:
4a:a4:e6:31:40:65:37:65:3d:03:11:32:ba:54:14:dc:45:e3:
f5:6d:da:0e:90:f4:18:c6:4a:0b:13:dd:ba:dc:0a:ad:62:3d:
ff:16:aa:ec:e7:cd:fb:52:09:2c:d5:76:10:8f:e1:a6:3b:07:
52:0c:d7:5f:ba:c7:87:a6:35:76:3b:bf:09:06:f5:24:ea:e0:
b7:7b:ea:10:ac:61:73:2e:cc:0b:77:8f:94:af:96:3e:8d:06:
ba:fa:26:da:fb:5d:f8:bd:4f:7c:e8:2f:5a:5f:5d:7b:77:fb:
20:d3:07:53:06:35:82:ec:b5:98:a1:8c:2c:20:cf:5c:91:b0:
e7:f8:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:25 2026 by rpki-client