Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: KbnN5wjekuC309TLSnkNqpIcLECXEtDWh0Ey0QeNg+E=
Subject key identifier: B8:6C:2B:30:5A:03:E1:3A:88:0C:3F:BE:7C:29:E1:FF:D1:C0:3C:C8
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 019E1EA2AF95C854467F2C63F6B16A48574A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 0B48
Signing time: Wed 13 May 2026 00:00:38 +0000
Manifest this update: Wed 13 May 2026 00:00:38 +0000
Manifest next update: Thu 14 May 2026 00:00:38 +0000
Files and hashes: 1: 8CC9XG9ENZD8uSBjBaV6IrcWRcU.roa (hash: +cFHBDI2vSe8qYQNG7SSN4dtten2bWEf/OgE/4boopY=)
2: HscqlSP_T6jWomPIcWdE3IC4My4.roa (hash: /7wtYvtk4cUOoXmRq6scL7JJ5OG21YbveewB9o7fEHg=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: CXns2t6MIX5AOOc2qvqEdQcTZDa0+ZLSymwM2A6bgg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:af:95:c8:54:46:7f:2c:63:f6:b1:6a:48:57:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: May 13 00:00:38 2026 GMT
Not After : May 14 00:00:38 2026 GMT
Subject: CN=b86c2b305a03e13a880c3fbe7c29e1ffd1c03cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:e7:d2:ac:6a:e8:5f:ad:60:92:a9:33:20:
c0:38:0f:5c:4f:e7:37:c0:26:05:4e:ce:db:4e:19:
c2:5f:18:86:46:b3:d1:10:9f:ee:71:f6:0d:47:40:
82:c4:02:04:bc:5e:60:6b:1f:91:ff:8d:a6:3c:25:
13:52:f2:f4:ae:59:00:a7:fe:1e:83:1a:7e:f6:e8:
e2:55:53:db:d4:00:47:8a:ad:23:09:0c:eb:53:9b:
e7:a8:5e:25:bd:05:b8:08:23:bb:a7:e9:64:4d:eb:
dc:a4:4d:77:10:3c:a6:0c:a3:df:5e:bf:25:24:de:
16:61:ea:7a:5e:b2:bf:12:cc:ee:4d:97:38:9c:0b:
c5:8b:e0:46:54:2b:8d:c6:73:e1:21:ea:6d:3b:68:
6e:cb:1d:d4:a5:8c:8b:e1:f9:fe:15:b9:1e:25:95:
27:fd:52:b3:bb:85:13:8d:72:5a:c8:69:47:01:59:
62:f5:8d:5f:56:9f:d1:e8:97:23:7f:de:fd:d8:17:
6a:fa:35:01:fa:0f:88:f3:7b:a2:a9:63:4d:84:84:
a7:5d:14:11:10:86:f7:5c:9d:85:34:15:c5:09:0d:
a4:27:d4:63:ab:64:18:1c:1e:62:00:98:9c:b5:c0:
06:62:8b:2c:56:a2:d9:6d:1d:00:8f:d6:54:a6:b9:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6C:2B:30:5A:03:E1:3A:88:0C:3F:BE:7C:29:E1:FF:D1:C0:3C:C8
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cf:f8:33:51:55:65:d6:52:5b:b0:8c:ac:7c:77:98:9d:95:
d1:2c:a5:08:de:ee:45:c2:e9:dc:09:49:40:31:c2:a4:5c:49:
d7:82:c0:63:7d:f1:91:8f:f4:c4:d1:71:77:5e:14:88:8d:b7:
9b:59:43:db:98:58:8c:60:d6:43:64:29:19:a7:ca:83:56:b8:
b0:1f:43:ce:e9:d5:82:7a:d2:e9:c0:56:26:99:f7:87:da:07:
c2:7c:66:69:22:31:22:4e:4f:5f:8c:de:e4:83:4f:a7:39:67:
5a:a4:b5:f7:65:35:a4:df:d4:ca:8c:54:2b:d8:ef:be:c5:5b:
ce:8b:d4:d5:ea:67:78:eb:e1:22:8c:5f:00:8a:56:e3:f2:1b:
55:62:14:ff:41:75:1b:aa:2e:27:2c:5b:74:47:f5:51:fe:66:
ef:87:ea:1a:70:88:26:8f:b4:69:40:62:0f:ce:b7:cf:ad:fc:
c5:72:ce:48:87:29:d3:72:ed:b6:f0:50:ad:9d:ae:87:63:88:
aa:f8:fd:19:26:7f:5a:e3:bb:6f:b1:37:6b:a5:3f:6a:f7:3d:
27:23:62:cc:07:3d:7d:d3:f0:f4:ea:91:9b:d0:7c:e5:6a:99:
73:88:34:92:d0:e7:9a:6e:0e:87:f1:aa:a8:16:45:2a:54:71:
c4:4b:00:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:53:59 2026 by rpki-client