Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: P1Y1YwAWq4q6LBIig+v4onoouLtC37qRprSnP8uMvJ4=
Subject key identifier: E2:A3:21:30:8F:79:C4:C7:4B:BF:06:39:F5:E5:1B:3E:EA:21:10:BA
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 019E1E6C0BCB00D75A2B56C438901FECE3CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 1922
Signing time: Tue 12 May 2026 23:00:57 +0000
Manifest this update: Tue 12 May 2026 23:00:57 +0000
Manifest next update: Wed 13 May 2026 23:00:57 +0000
Files and hashes: 1: 7YBZcKVViMTWDrcb33ThKGDDu_M.roa (hash: IHCu4cQWdFxSyysMTzK5fSm+R+NUGrWc2Oz3D3xdFh4=)
2: GPGTgFwiYsVJWbSqO1-Vy4YA5-U.roa (hash: pErOAng/hMAVplt5BEW7zkhrPBcrawDRAlwBfNH3YGU=)
3: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: UgwH5ZUUTMb6RuCP+6OMHVpnNkZyg9QxElToDzME7aE=)
4: sVJDjJhq6PpPgC3tkCrKbUL2zY4.roa (hash: tor5JhTFRjiHebCba2vY5qi55/v5lhD35U/5+IqI8sE=)
5: tLFRg_bTx97O6i5WBrjpjR1Uclg.roa (hash: tAKe6SFpNg6TVOf+ij5N/AwpZZGW6IDo9qGmcBBSkj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0b:cb:00:d7:5a:2b:56:c4:38:90:1f:ec:e3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: May 12 23:00:57 2026 GMT
Not After : May 13 23:00:57 2026 GMT
Subject: CN=e2a321308f79c4c74bbf0639f5e51b3eea2110ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:ac:6d:d0:04:26:3f:83:f7:2e:1e:d8:64:
2c:76:c1:e8:aa:f6:f5:1d:4e:86:23:a5:f0:17:17:
e0:7f:30:b3:be:0a:f5:c6:72:f5:04:d1:39:82:11:
00:10:a1:f3:82:80:b7:d6:0a:19:9c:f7:9e:2c:d0:
a2:49:ad:6e:c4:bd:61:60:8e:84:f2:3b:91:98:75:
22:95:b0:c4:0b:c5:4a:61:bb:7f:9f:1c:f0:ef:6e:
52:f3:6a:d4:f0:88:c8:50:a0:0d:9b:15:af:58:ab:
49:ed:2a:75:dc:c4:3f:c4:09:62:50:3a:ad:02:7f:
c7:84:0c:28:75:f5:e9:7a:ff:fb:91:c7:62:40:fb:
d5:9c:f5:37:35:2b:5f:a8:5d:f3:15:6a:3a:22:da:
b7:43:c8:7e:d9:92:40:4b:fb:d9:0e:2e:5c:d4:3a:
89:cb:6d:5a:b7:d8:12:dc:06:7d:fc:d6:de:d2:d9:
32:10:8f:89:89:4b:3b:dd:0c:cb:54:b0:bd:be:57:
07:1c:33:58:dc:fe:07:a6:46:0f:8e:a2:ff:7a:eb:
22:1d:10:86:3c:4c:ea:b0:44:c1:93:72:d4:a2:38:
fa:b1:f0:d2:d5:8f:d2:ac:c6:99:1d:71:30:9c:db:
23:3e:b9:00:6a:bb:56:b0:1f:db:13:e0:b7:07:96:
2a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:21:30:8F:79:C4:C7:4B:BF:06:39:F5:E5:1B:3E:EA:21:10:BA
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:cb:03:9d:20:56:df:af:a1:22:75:21:1f:e5:0b:70:20:03:
ee:ad:2d:95:fe:54:74:f4:62:14:89:8f:e1:e6:56:19:55:57:
82:8b:6e:77:8b:bc:b0:78:10:22:ff:2b:7b:36:57:3c:cc:3b:
2f:71:62:d1:75:f4:e5:04:1a:43:10:fd:9f:b4:cf:85:5d:aa:
dc:11:c6:24:14:d8:c4:31:3f:cd:82:81:41:9e:d6:eb:95:80:
44:19:54:a3:68:e0:77:96:76:ae:27:5b:a1:58:87:b7:ac:25:
45:df:7e:c1:59:e5:28:b8:22:70:35:18:c6:9a:a2:37:06:da:
e5:57:80:bf:e4:7c:c3:d1:47:28:fb:9c:98:cb:cb:f1:4a:09:
69:a6:d4:3c:8b:a9:ac:c7:44:40:f6:e2:5c:45:03:af:19:e8:
e5:08:f1:0f:d0:69:b7:0e:cf:c4:9c:42:9a:03:b8:16:c7:85:
9b:1c:ca:3d:fd:55:79:ae:20:bb:50:34:df:50:15:22:f5:c3:
ad:7b:6c:e1:9f:5a:3a:5b:68:bc:f7:0a:8a:77:72:7b:08:c3:
aa:19:5b:ad:57:b1:42:97:8c:4c:7c:52:dd:9a:6d:bc:68:7d:
a6:0b:39:9a:0f:7a:21:d7:e0:c9:e4:ee:1a:cb:bb:39:f0:de:
04:01:c3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:16 2026 by rpki-client