Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: IMaku0+e+efHtsVKl/tA+jBtP6hh7uXMcpjZhqgeM38=
Subject key identifier: 6C:E3:8D:BA:72:33:5B:53:29:3E:3C:51:0C:18:58:08:6C:7A:FC:79
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 019E1D59ADE802B1D0D7F5D6E1180EC515AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 0844
Signing time: Tue 12 May 2026 18:01:16 +0000
Manifest this update: Tue 12 May 2026 18:01:16 +0000
Manifest next update: Wed 13 May 2026 18:01:16 +0000
Files and hashes: 1: 3MFj15oSeUJYuJbY2U542UoSXGM.roa (hash: j9Y9LVF9WUhE5Tw8LMdWTvxog1CGJJ1rf8AUNlTnbFI=)
2: FGVsTKcXFHABDa_e0HM9Faa7r2M.roa (hash: 2Iqm//83hIlnGhnfsyksmZkIg0tX+MTyrQg6DXUyYdQ=)
3: SwB1iAgYjly4csbv4jz0oadyUZk.roa (hash: TuHJEn/9Xw5181UZ/VH/apXlrIOdLQGvmuNms8pxlNU=)
4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: Kt+CNSl9SymuKyVtFbozk9pjbYKhIcYRQoQQud2QCrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:ad:e8:02:b1:d0:d7:f5:d6:e1:18:0e:c5:15:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: May 12 18:01:16 2026 GMT
Not After : May 13 18:01:16 2026 GMT
Subject: CN=6ce38dba72335b53293e3c510c1858086c7afc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:d5:e9:14:c5:ff:29:df:8b:ce:1a:44:67:
ee:af:a4:8a:01:2f:49:bb:6d:db:81:ca:30:51:93:
ce:21:13:15:91:6b:ea:95:6d:56:2c:4e:c2:ec:0a:
80:23:25:84:b7:1a:47:4c:9b:72:0d:96:3f:c9:10:
c0:6c:7e:a9:4a:91:17:79:e0:2a:74:12:45:fa:41:
09:16:78:31:b1:b4:db:a7:d7:21:a0:b9:c1:f7:5c:
5b:6e:1c:5a:30:04:57:bd:fa:cc:13:c9:11:1d:71:
5c:03:73:a6:1b:18:04:d5:e5:42:74:4b:4d:44:77:
15:4d:58:bd:fe:79:cc:37:75:f6:27:ce:b1:a7:07:
5d:cd:81:45:60:f5:b3:13:e9:75:c3:04:69:c8:9a:
87:d3:24:ca:7a:88:e8:e9:b5:ef:28:fb:8d:3c:99:
b6:a1:25:49:05:7b:6c:9c:db:e6:36:c5:a2:2c:1b:
ea:d6:e1:3b:84:94:29:ae:d7:3f:9c:0c:a5:cb:fc:
fb:ef:3a:ed:79:90:77:2d:c0:cc:43:a8:41:65:69:
4b:18:fd:03:af:b8:3a:d0:9c:57:4a:3e:ab:a6:6e:
0c:d1:bf:2f:84:93:9d:5c:dc:b3:06:6a:ea:61:f3:
9b:c7:75:71:52:4c:71:31:83:0f:9e:ac:98:31:92:
fa:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E3:8D:BA:72:33:5B:53:29:3E:3C:51:0C:18:58:08:6C:7A:FC:79
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:22:7c:fa:42:ec:25:7d:3e:6f:60:74:8c:05:6d:b1:10:9a:
a0:21:5c:42:28:58:d9:e2:06:76:91:4c:00:6e:c1:84:70:b1:
a1:f0:d3:3b:78:b8:70:fb:81:2f:7d:e3:87:4a:77:be:cf:7b:
4d:5f:3e:54:81:f3:94:b7:c6:bb:3a:f4:1c:7a:9e:12:f2:9f:
51:bb:59:49:55:6d:0b:af:34:85:1e:7d:97:73:16:2d:80:90:
c4:47:ee:c9:ad:ff:9b:6f:7b:9f:09:20:5a:fd:9d:bd:bb:b0:
83:4f:56:d6:60:33:56:3b:e0:4d:b2:25:a4:f9:30:ec:07:8d:
a2:12:bf:0b:a4:32:15:78:49:b9:76:ca:51:b0:8e:44:64:0d:
2f:d5:00:eb:4e:5f:c2:9b:73:c3:1e:1f:03:69:2f:1c:b6:a3:
b0:e4:41:d1:ee:29:52:bc:47:3b:61:7c:e0:c1:72:72:b1:f9:
c7:e1:0d:35:e0:a7:d4:10:47:b5:15:4e:89:e8:47:35:e9:91:
f5:63:f4:94:68:c2:5e:66:b5:4a:e5:c7:96:46:f7:c7:26:f6:
c7:7a:b9:89:0a:da:bf:7f:d1:ae:9a:97:8d:f9:22:6c:95:34:
fb:d8:64:a9:a1:7a:3b:42:2a:cf:14:aa:06:6b:f0:e8:cf:a0:
a1:73:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:09:51 2026 by rpki-client