Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: iplnCEmE3MF7yFbWoufComCX6cFHP2wfqA9UH1jAySQ=
Subject key identifier: 9E:84:B8:C8:F4:16:8C:85:43:EE:38:A2:A5:12:DE:DE:08:7C:81:BC
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 019E2091749FF24957903317C856F59CB8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 09:01:03 +0000
Manifest this update: Wed 13 May 2026 09:01:03 +0000
Manifest next update: Thu 14 May 2026 09:01:03 +0000
Files and hashes: 1: dz15OcBGpk_cfrn8xhk6BurTsy8.roa (hash: xEr9Xe5b8oihGpA9oK+zCpOpKPeDuBptibdAWRYh0iU=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: kG3QJdUsxbAwTrbcIiSQ0ZwvQE1hg7YIQ/r4rcLrzvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:74:9f:f2:49:57:90:33:17:c8:56:f5:9c:b8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: May 13 09:01:03 2026 GMT
Not After : May 14 09:01:03 2026 GMT
Subject: CN=9e84b8c8f4168c8543ee38a2a512dede087c81bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:25:08:16:6c:a6:fd:e8:e7:b6:df:72:49:
2c:16:68:09:2b:04:04:ad:c8:e7:6c:ed:5d:eb:91:
dc:1f:fc:16:97:46:84:3f:cb:9a:a7:5b:a4:38:62:
7a:f2:cc:6b:08:54:23:ff:17:c9:14:34:2c:f6:f2:
e7:84:bf:7a:db:26:bb:eb:e8:c0:96:00:8c:b6:7b:
e9:0f:bd:e8:4d:8d:b8:9f:89:51:4f:a0:f0:5d:5f:
d3:60:9d:e7:97:c3:15:be:07:de:6f:49:76:5c:01:
c4:1a:c5:a3:97:84:3b:6c:df:27:78:4d:e9:79:0e:
dc:0b:34:30:3a:20:26:95:0c:4d:7c:52:24:19:8d:
fd:3e:80:79:bc:5f:cf:7a:9e:f8:12:d0:29:cc:90:
73:b0:5d:74:c4:e9:8c:50:13:5c:52:9c:8d:65:a2:
ee:4b:33:f3:de:72:5f:80:32:00:83:2b:bd:8d:50:
ab:95:17:29:d8:b0:fa:fb:96:a4:15:91:a1:34:79:
0f:ca:7a:74:cc:f4:8c:bc:1a:79:fc:f2:30:cd:6c:
8f:36:82:b1:e5:b0:85:bf:73:b7:ad:e5:9d:ad:f8:
f7:6a:a8:f2:07:7f:17:ac:a7:b2:a4:6e:98:a9:95:
74:2b:10:84:98:cc:1d:e5:eb:23:2d:b7:d3:d0:e0:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:B8:C8:F4:16:8C:85:43:EE:38:A2:A5:12:DE:DE:08:7C:81:BC
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4d:ff:ae:8d:5b:79:25:e5:48:19:a6:81:3d:e5:cc:e1:7a:
8b:70:f7:c1:b2:5f:35:c3:e9:50:63:69:fc:84:92:da:f3:e8:
08:29:0e:ba:40:36:af:d3:aa:a2:fb:50:d3:72:94:34:a2:88:
77:95:45:7c:e6:eb:b4:70:ca:e6:60:5c:7e:2b:8d:61:93:1e:
5d:20:14:69:c8:9a:6e:7c:19:85:52:ab:69:97:96:1a:65:d0:
80:e3:65:cd:e6:20:0b:b2:57:c1:dc:c0:0a:55:d7:c4:ac:65:
a4:e3:8c:74:d4:c8:1b:16:9f:08:64:e0:5d:0f:f3:8e:90:6a:
f9:e4:bf:98:93:4b:2b:5e:09:86:93:8c:ac:d6:ee:dd:c0:6a:
f3:c7:45:95:92:d1:9e:b4:a1:f0:47:a7:37:ed:1c:c5:0d:6a:
eb:96:24:6f:c3:78:39:d6:4c:ad:d4:34:dc:77:fb:05:86:a0:
a2:9b:87:8c:2a:09:03:44:b7:98:b9:62:9b:b4:50:ee:31:15:
e9:f0:6e:90:21:48:d1:f1:f5:4b:73:c4:f0:e8:13:b5:1d:ad:
26:d1:8a:c0:64:ae:bd:7d:bf:df:8b:83:bd:02:41:92:26:b1:
61:df:21:ad:71:a2:83:6c:6b:f9:c1:46:6a:fa:49:29:1b:ec:
e1:cf:23:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:52:43 2026 by rpki-client