Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: fx/+pfhc3Be85Ai7+ocqJPctS+hPUQ2QVnD5Ul1sFs8=
Subject key identifier: FB:F5:2D:DD:64:15:73:88:4D:D8:41:B8:AA:85:18:26:E2:AD:39:DA
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 019E20239823D6A14B24B9AE6C65B771A943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 1918
Signing time: Wed 13 May 2026 07:01:03 +0000
Manifest this update: Wed 13 May 2026 07:01:03 +0000
Manifest next update: Thu 14 May 2026 07:01:03 +0000
Files and hashes: 1: C53oCg7kRoBXocgajR_ZpGWJqn4.roa (hash: PkakGt0bbQY/2tn/r6YJVwwmAKETiXnq03+IjFLAZQs=)
2: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: ubnMq3aIveRewjp45o5eX9eqr2elvGSvbNUi6PDUjUE=)
3: SNyntTwsIIpefS6otR0nRSZTl0M.roa (hash: 7Q0juJOhLraTf25d8amnxUBMIjfjOKD/x6SVvjGWFnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:98:23:d6:a1:4b:24:b9:ae:6c:65:b7:71:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: May 13 07:01:03 2026 GMT
Not After : May 14 07:01:03 2026 GMT
Subject: CN=fbf52ddd641573884dd841b8aa851826e2ad39da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:35:a3:30:a3:f6:3d:33:02:e9:4f:33:22:
98:c0:0e:34:2e:84:aa:66:4a:ad:43:50:f7:db:39:
97:ab:4a:c1:13:e3:d1:e3:e1:44:c2:1c:58:ed:58:
ea:75:1c:96:ea:94:99:20:ca:0b:ad:98:2f:24:21:
79:30:71:d8:1e:ed:22:fc:a7:77:85:44:98:34:e2:
b0:7a:13:73:97:f3:af:a6:6e:04:5b:a2:84:c5:e4:
7b:c9:b2:57:51:9b:f1:0a:26:50:db:54:9d:52:ef:
07:3b:0f:e7:89:6b:c3:dd:f1:8d:77:0d:58:dc:6b:
81:b7:58:68:1a:48:1e:f7:f8:c7:21:f4:e2:99:bb:
c0:3a:79:21:e4:19:2e:ca:c1:46:53:91:6b:ab:6c:
53:23:3a:10:e8:a3:36:de:b9:19:f0:ce:af:7b:49:
ca:97:05:5c:92:b2:d2:03:db:42:8f:78:b4:e4:9d:
b5:2d:4b:74:a9:51:02:45:ce:f7:98:f9:f1:19:16:
1b:95:73:8c:6f:a8:33:ed:24:d9:a8:40:3c:e0:5c:
69:41:ba:95:6c:36:91:09:25:a6:79:da:0f:14:b5:
98:e8:fe:ff:10:09:89:f9:aa:0f:3f:57:f9:d7:92:
8c:9e:4a:9d:63:ad:84:44:fb:70:28:b2:43:27:1c:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F5:2D:DD:64:15:73:88:4D:D8:41:B8:AA:85:18:26:E2:AD:39:DA
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6a:db:6a:7d:1c:ca:ae:66:2f:83:30:5d:79:ab:28:66:80:
f0:9f:1c:a2:f2:cf:9e:0f:51:5d:c7:36:6f:ab:e0:1b:49:52:
3a:76:cb:6d:59:b4:86:58:bc:bb:22:93:50:a4:f5:86:8a:73:
7e:d4:0b:6b:91:fd:1a:c6:60:57:17:69:3b:48:09:05:ff:91:
df:33:18:cd:bb:74:d6:81:54:65:e7:1a:a4:9f:72:83:54:cf:
7e:4c:7f:5e:14:8a:ac:39:1f:47:2b:e3:68:0e:3c:b6:2a:3d:
65:74:5d:82:93:78:c0:92:21:ee:da:fe:e9:d5:1c:58:0e:39:
a0:c0:37:18:a2:d4:8b:9b:d1:a8:e7:81:da:9c:68:55:0c:29:
1f:18:e5:e1:18:1e:2c:e4:84:12:6c:11:dc:9e:53:65:53:a4:
59:d3:75:be:02:75:9a:8b:5c:57:06:d4:ec:72:69:4b:03:93:
b7:3c:93:e9:69:fa:e5:80:d5:99:30:c2:11:71:31:4a:bc:18:
8b:41:8c:49:d2:96:7d:ae:5c:5a:54:99:f9:23:cd:0e:1f:3d:
11:fc:47:df:87:1e:91:bd:42:27:5d:94:63:0b:c5:5e:24:a5:
45:b6:b4:22:f4:3e:a0:4d:2d:3d:b7:26:a3:42:68:d0:b3:44:
fb:08:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:24 2026 by rpki-client