Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: n5MIwZkGUAErf2194CmIM9R/ZvjNLPwVxUCkiSOGJWY=
Subject key identifier: 37:CB:09:93:01:BD:9C:69:3C:6D:15:26:46:F8:CC:89:A0:2D:80:BE
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019E20FF6CF82357692F0FFE2DB4EFF293DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1918
Signing time: Wed 13 May 2026 11:01:10 +0000
Manifest this update: Wed 13 May 2026 11:01:10 +0000
Manifest next update: Thu 14 May 2026 11:01:10 +0000
Files and hashes: 1: DIVsIRBPLa5KM19DiQ-S3h1VqCE.roa (hash: kSZyrT+fJCQwFvN10ZkOoKoxL9IfHuMPa6PZb8CALKM=)
2: GqX_oWrB830HkB8zEb8oJqY0nyE.roa (hash: 6ssrrRVEAOtRkL5XSi7Zy1Qo7H6sQJBICDH4RJzRMoo=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: 7Guw4XesCEUqM3pxDc8evubvqsDK/3sJPmb019lu7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:6c:f8:23:57:69:2f:0f:fe:2d:b4:ef:f2:93:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: May 13 11:01:10 2026 GMT
Not After : May 14 11:01:10 2026 GMT
Subject: CN=37cb099301bd9c693c6d152646f8cc89a02d80be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:2c:54:0b:de:aa:a4:17:19:67:8a:35:26:
3f:ee:35:7c:45:cf:b9:60:3a:e9:80:33:34:25:a4:
95:c0:59:89:90:50:4a:b1:fb:9a:3d:c2:b4:27:7f:
b0:a2:56:b1:e1:94:6d:83:47:af:9f:de:e5:de:3b:
75:d7:a0:21:61:d4:e5:a3:a2:f1:96:40:39:bf:ae:
e7:80:de:3d:0c:de:6c:59:fc:c3:64:0d:39:87:d4:
33:71:b3:d0:51:e1:25:7b:69:dc:da:f0:09:58:40:
ef:2f:4b:44:25:b3:73:d3:57:93:3f:70:90:bc:6a:
f2:2d:17:34:4f:3c:a5:18:d2:52:a0:af:9e:ee:7e:
dc:72:9d:1d:51:b1:00:34:cc:ce:a3:09:3f:36:7c:
46:19:76:da:2d:84:d0:d2:48:70:06:7d:1f:d1:36:
ef:20:11:25:3f:73:61:0c:f0:49:0f:e6:ae:44:ff:
5d:ee:5c:1c:5d:85:fd:e0:91:65:27:60:de:c4:ce:
4b:dd:10:04:a2:41:e3:f1:b8:6c:51:0a:ff:89:fb:
7b:99:89:3f:20:90:d2:f1:7e:a2:f4:57:96:2d:53:
f0:bf:08:4c:f9:bc:07:97:85:13:e3:3f:22:ad:06:
29:33:1d:a6:42:77:0f:93:89:87:32:96:e5:41:20:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CB:09:93:01:BD:9C:69:3C:6D:15:26:46:F8:CC:89:A0:2D:80:BE
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c2:c9:1d:88:f4:5c:5d:5b:90:95:6d:f1:b5:e1:1b:58:89:
5c:7c:86:6d:a2:57:7d:79:56:b3:a3:8a:79:56:83:1f:91:5f:
be:dc:37:12:79:4c:3d:24:65:60:f0:59:8e:9c:15:01:39:9c:
c6:30:7a:8d:d0:5d:c8:cc:e3:08:7f:1c:be:70:78:fd:16:8f:
e5:75:71:9e:92:b5:7b:64:8e:6a:14:66:e5:a5:69:16:2c:2b:
d8:33:e4:40:fd:1f:76:44:4d:55:b0:b2:ad:80:42:45:91:4b:
52:65:be:b2:fb:95:54:43:4d:f4:bc:0c:45:cc:f6:45:a4:58:
e9:5a:90:c8:e5:04:59:44:4d:d3:26:36:1f:43:26:fc:c4:6b:
e0:66:3e:7d:b6:7d:b8:c1:f6:6e:b7:e2:cc:09:0a:57:ad:71:
cf:ea:53:75:f5:0d:fa:9f:1a:3c:48:45:e1:de:f3:19:e5:35:
a8:68:ad:cd:b8:26:d5:5d:e8:31:a8:6d:3b:87:de:90:cc:c5:
74:46:00:db:73:74:7d:82:40:b6:67:ac:16:ef:a7:1f:26:25:
54:16:58:a0:df:5b:d1:91:a2:e0:50:21:b7:3d:ce:64:3d:be:
34:a9:bd:a8:9d:08:1d:0f:6b:cd:71:87:31:bb:ee:aa:62:35:
89:15:77:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:28 2026 by rpki-client