Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: uksOIB70N9BcAF8zJhPBBDkfKmVALJeiI7x6IZj7bG4=
Subject key identifier: AE:1A:F6:D3:4B:80:EB:FE:07:A4:93:9F:7D:3C:7C:8A:AD:58:A7:35
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 019E205A7205E38F197A653A61139984CED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 08:00:58 +0000
Manifest this update: Wed 13 May 2026 08:00:58 +0000
Manifest next update: Thu 14 May 2026 08:00:58 +0000
Files and hashes: 1: 1-DKuT0Y95446hJar0aywH5NXXto.roa (hash: 4mgppEdu742P8IDESBHDFQTYQI/R8xwD+SJ+IXCYWM8=)
2: 6M-8u5qByP1ggl6JEnWWtX94ybY.roa (hash: l+WD+P0RUvIhdtRWjkkKIzP6RPO3rfOXr22R2FZ6eyo=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: gsQgW0DVk8KE6YPV2N0XAdUgZVUslLZUtro+K5bIDcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:72:05:e3:8f:19:7a:65:3a:61:13:99:84:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: May 13 08:00:58 2026 GMT
Not After : May 14 08:00:58 2026 GMT
Subject: CN=ae1af6d34b80ebfe07a4939f7d3c7c8aad58a735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:13:39:51:41:1f:c5:b0:4f:37:d5:dc:53:33:
b9:11:e8:a8:e9:f5:33:25:09:bf:27:2c:50:af:69:
2b:7e:43:35:5c:9a:27:93:df:c7:9b:7e:2c:4b:ca:
7f:a6:c4:10:fb:d1:13:fc:a6:38:d9:36:5e:2d:ab:
79:f0:99:3a:b4:c9:be:18:8a:d7:03:d1:e5:6f:6d:
32:1e:73:3d:cc:aa:e8:e5:48:02:65:b1:d8:cb:67:
19:89:20:7a:26:67:5e:6f:5c:b9:5b:57:a3:9a:1e:
e2:93:76:7f:5b:27:20:e7:8e:40:7f:fc:8d:75:66:
9d:ce:79:6b:0a:03:ab:71:65:28:64:84:10:be:c2:
9b:db:f2:51:78:17:c8:40:b4:52:af:6a:0f:e7:f0:
4d:ad:fe:93:9d:2d:80:b0:c1:23:10:eb:62:46:c6:
2a:20:1b:06:df:93:0b:7b:b5:c7:92:8e:ab:b5:2e:
a2:ca:a3:eb:2f:cb:41:f5:41:ca:8b:f9:d9:20:d8:
c1:4e:31:ee:ce:7c:ed:63:1d:95:10:3f:ce:bd:6e:
5c:07:48:f6:c7:f3:ec:cd:55:65:dd:f5:02:40:1a:
3e:fc:47:ff:a0:ca:4e:80:8a:41:a7:6c:20:34:84:
c4:6b:8e:40:8a:e5:e4:b7:97:b9:4e:65:1d:08:fc:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1A:F6:D3:4B:80:EB:FE:07:A4:93:9F:7D:3C:7C:8A:AD:58:A7:35
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e8:a3:9b:ec:ae:91:76:a4:4c:3f:c2:18:da:78:22:ac:a7:
29:18:a4:d8:31:d4:67:d3:73:3f:67:08:3a:cd:6e:26:f9:3d:
d6:07:8a:d2:b9:30:fb:ba:2d:f7:2a:f0:e5:c0:50:6e:71:3c:
39:32:0b:d0:af:95:1e:59:e7:01:06:7a:da:2e:ba:06:67:e3:
00:8a:c8:51:91:cb:61:bd:17:dd:78:f4:37:b7:03:99:b6:6d:
a6:0f:ab:36:51:0e:b1:ac:7e:79:af:b2:3c:d0:0d:e7:f0:e4:
eb:2f:61:c8:50:ab:05:95:01:28:56:79:c0:00:21:3a:41:65:
89:71:19:e8:f8:4b:f7:7a:a2:0b:03:38:f1:c8:d2:d5:ec:3b:
f9:6e:3e:2d:4d:f4:8e:17:25:c5:6e:62:36:8e:e0:ff:96:b1:
ef:83:c0:d2:b4:83:b3:fd:d2:e0:64:9c:32:c5:4c:a4:fb:03:
80:26:56:34:c9:4c:d8:38:b5:3c:16:a9:b5:29:28:d8:c6:27:
b6:0c:0f:9f:4c:a9:80:a2:84:ab:7e:0e:29:94:31:dc:6c:0d:
0a:a3:b2:4b:6c:70:6c:89:3c:9b:80:f6:1b:7a:72:2e:e0:55:
76:16:34:e0:d8:cd:84:d6:83:8b:79:35:6c:c7:f0:67:07:5a:
db:c4:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:02 2026 by rpki-client