Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
File: 5ozobUCegkN2Vg_jsaFo8roAguM.mft (raw, json)
Hash identifier: vwnv8A7CPczhS67OWzpKBcwkExRP87ZPY7TvyCF24Q0=
Subject key identifier: 25:E4:F9:30:4A:B3:FD:3A:1C:09:17:28:BD:80:5E:31:DD:E7:E1:1B
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 019E1DFDE53EBBD33743CF074F412EA6D41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 21:00:38 +0000
Manifest this update: Tue 12 May 2026 21:00:38 +0000
Manifest next update: Wed 13 May 2026 21:00:38 +0000
Files and hashes: 1: 1nHUlwt2X9A095aW8Ml7tVPj8v4.roa (hash: eAfz7g6fQcUQW5klBUU8wHwhbjDDEZDHt243j4/4j64=)
2: 5ozobUCegkN2Vg_jsaFo8roAguM.crl (hash: TjdXePQppr7PzKSXp/H2U75QK3udteA9scIaQzWH3fE=)
3: Nq0UTD_SclIG9HFMOsAxBcWAB9U.roa (hash: znYnyo3jsEa5JPCdrns9UrjveBbD2qT9TL2pzWDyjTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e5:3e:bb:d3:37:43:cf:07:4f:41:2e:a6:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: May 12 21:00:38 2026 GMT
Not After : May 13 21:00:38 2026 GMT
Subject: CN=25e4f9304ab3fd3a1c091728bd805e31dde7e11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:01:b4:98:7a:48:c9:a7:45:db:78:ba:7e:
6d:16:ee:f0:e8:73:0b:4e:4e:2e:47:55:7b:9d:0b:
be:2c:e6:d2:22:57:ad:51:39:0f:c3:2f:c6:67:ce:
01:7f:d2:24:9f:56:ff:f5:40:c4:0d:fc:b2:56:80:
c7:67:bd:7e:b9:98:45:8d:e5:a9:75:a2:91:30:1a:
aa:e8:a8:4d:86:3d:96:08:b8:74:e4:86:a4:5c:3a:
04:c0:ae:4b:cb:b9:1f:2c:8d:81:e4:ca:71:b0:ce:
26:01:bf:3c:3c:1a:49:12:f7:9e:14:53:c7:be:b8:
16:76:aa:d1:33:cb:87:ee:f2:1f:9d:69:ea:1f:70:
65:c6:28:48:d4:22:ac:0a:05:33:b2:71:f9:ed:9d:
24:33:31:8f:6b:65:5d:6a:57:35:df:a0:56:80:d0:
6c:c3:7e:67:fa:6e:7c:e2:3f:00:91:7e:1a:99:00:
4e:fc:43:66:24:56:8e:b6:81:1d:05:ba:d5:ca:21:
2f:7c:a8:97:4b:40:86:ec:10:24:9a:05:a2:7f:2e:
9a:f3:35:35:00:49:17:3e:33:56:e8:ce:e7:f1:b7:
ca:93:af:da:9b:87:45:39:9c:8e:a2:61:73:45:fa:
4e:a9:10:f5:43:6c:c6:04:41:fc:fc:f0:b5:81:38:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E4:F9:30:4A:B3:FD:3A:1C:09:17:28:BD:80:5E:31:DD:E7:E1:1B
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8e:d4:af:f1:b9:33:e3:ba:95:13:f3:f7:ce:0a:ae:c3:2b:
6e:d4:1f:aa:b0:f9:05:d3:71:f0:fb:5b:09:0b:6b:1b:39:2a:
66:b6:a2:26:57:8b:1b:ba:13:61:52:61:ab:d4:f8:d1:ca:47:
cf:d4:65:41:e6:6f:48:df:62:8a:c1:38:16:f2:6d:09:93:1b:
ef:f2:b8:21:88:23:e7:70:c8:80:e6:d5:42:45:54:f7:98:26:
aa:0b:9f:fd:2b:3f:78:a9:73:b7:e0:a7:54:98:d5:ed:58:56:
89:14:05:34:2b:ee:3f:20:e8:dd:01:4c:c2:92:c3:a1:40:5f:
34:47:53:39:61:e9:60:2a:73:a2:f6:2a:1f:87:6e:4a:41:64:
12:27:f1:24:69:28:40:e9:fe:7c:58:e7:54:c6:83:ba:bd:eb:
88:4d:ce:52:fc:5d:f8:cf:49:c6:a5:93:59:d8:9f:45:0e:d1:
a4:5f:73:2b:b6:08:60:a0:ad:18:74:52:cc:f3:4a:5b:89:cc:
02:1f:7b:82:01:24:49:21:fd:3a:e3:20:ac:a9:70:d7:62:a4:
85:38:d1:44:23:d7:fe:70:73:ad:59:cc:dd:53:6f:b6:12:ac:
2d:75:ec:ef:4d:a4:a2:d9:53:47:dd:d1:13:37:43:d7:41:d3:
78:65:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:46 2026 by rpki-client