Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: TlCoh+fN7eHKkBSEgS3wrkkccl+E5ITy8BZlbSIgOrg=
Subject key identifier: B2:5A:8B:14:C0:1F:2E:23:23:D3:06:A8:49:B3:DE:55:74:BF:E6:5C
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 019E1F7F643B84067C91767158EC2492DF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 17CC
Signing time: Wed 13 May 2026 04:01:42 +0000
Manifest this update: Wed 13 May 2026 04:01:42 +0000
Manifest next update: Thu 14 May 2026 04:01:42 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: CvoS6cfGbgtyaPRUzERwayZySrBGaEDedlRCIloiEC8=)
2: HWfGqv8oEWKGFm4N1ldYQYMduNo.roa (hash: uTYmV2Hm5c1uRirFhMhd0UK85oM2m8rhW7jcfLm/RrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:64:3b:84:06:7c:91:76:71:58:ec:24:92:df:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: May 13 04:01:42 2026 GMT
Not After : May 14 04:01:42 2026 GMT
Subject: CN=b25a8b14c01f2e2323d306a849b3de5574bfe65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:cc:9b:2a:3f:35:c6:af:5b:dc:00:94:36:
27:d1:9e:5f:aa:a8:67:5c:b3:09:e8:b7:68:13:77:
1e:5c:cd:32:8f:c8:f6:5d:0b:37:0f:5a:44:f1:3f:
85:1f:c8:33:82:6f:09:c6:22:be:96:bc:89:6c:a5:
e4:67:9d:29:b3:0b:99:c9:7c:c8:f0:c4:6a:14:04:
fe:a5:1e:53:90:e3:1e:3c:1b:a2:3e:3b:35:b7:d7:
0d:ce:e0:de:68:5b:c6:30:53:18:fa:c4:82:e3:1c:
94:00:ae:f3:e8:77:5c:db:7d:85:f1:a4:64:10:a1:
22:0f:45:1c:48:dd:b4:fa:53:c3:93:50:dc:75:e6:
30:3d:ac:a3:81:8d:b2:ba:39:e0:0e:66:07:28:37:
9d:57:09:90:8a:bf:b8:a7:40:9c:30:5c:a2:e5:8f:
4e:5b:2d:de:1a:07:2b:8d:2f:3f:27:0a:20:57:f5:
b9:cc:15:b7:b1:4d:de:bc:85:43:1f:07:40:1c:2a:
49:82:3d:4f:0e:b8:26:44:60:c5:a9:ac:c8:04:1c:
f2:f2:20:ba:9d:15:fc:eb:6e:25:de:5c:9e:b9:82:
38:fa:8e:7f:c5:b5:4d:3a:2a:17:17:7f:f2:13:53:
e1:1e:9b:51:76:4e:c3:a6:82:bd:c8:d9:ca:bf:c8:
27:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5A:8B:14:C0:1F:2E:23:23:D3:06:A8:49:B3:DE:55:74:BF:E6:5C
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:70:4e:66:b2:67:24:9c:98:38:d2:12:b0:0d:a2:90:d5:3e:
15:e5:1c:73:76:80:e6:c4:2d:6b:50:51:af:89:e4:46:95:b0:
e9:ad:14:89:09:45:41:c7:4f:ea:9d:ee:71:49:4e:1d:52:12:
6b:d7:c5:d0:81:3b:8b:07:ce:3f:ea:2a:53:20:83:b6:96:2b:
ed:a3:b3:78:9a:7a:5d:a5:88:28:89:e3:8d:ed:4c:de:69:4a:
19:b9:ea:01:b4:6b:8a:31:12:5d:0f:51:fa:9a:96:fc:6b:4e:
7c:ee:3c:a5:2a:95:95:4a:e7:fe:37:09:b6:fb:a8:13:47:d7:
a7:56:f5:95:0c:15:3c:3d:ce:ff:f4:b7:88:48:cd:a5:a1:80:
d3:fc:0f:4d:f7:09:36:c2:f9:8a:df:94:d9:e1:8f:3e:45:d1:
24:f9:f6:d9:2a:89:91:9f:7f:05:b7:62:84:a0:50:cf:44:87:
5b:26:11:57:04:97:2c:c9:09:fc:b1:21:04:d1:16:5e:1d:aa:
a1:24:c2:ff:c1:29:02:e9:b6:c1:24:97:3a:41:a3:c6:52:b4:
84:50:de:a9:f3:f6:ea:7d:d7:e6:55:8b:bc:db:14:2f:85:45:
5a:2d:1b:4d:4a:64:c0:bc:91:93:16:df:7b:e6:af:24:b9:a3:
cd:dd:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:38:52 2026 by rpki-client