Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File: o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier: QERXRvYJGfyg2kircZU++o8zrVr9zzw0D3X2J57Lqz8=
Subject key identifier: ED:64:02:B9:FC:04:6F:5A:DC:DF:FD:2D:0E:F2:FA:70:E1:C1:D3:BF
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial: 019E1E6C0CD761FC8D4FE28938597862AA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number: 1918
Signing time: Tue 12 May 2026 23:00:57 +0000
Manifest this update: Tue 12 May 2026 23:00:57 +0000
Manifest next update: Wed 13 May 2026 23:00:57 +0000
Files and hashes: 1: VeJsCt1PB5bgMLVf-MsLYH6e7LQ.roa (hash: PrU9zmhMpmRMgh3C3teCNmvz1i0g6szB8JeyH7euSZk=)
2: _jjiEn_0KRxjLGF802rPc0LFUKE.roa (hash: gAIQze9dIXWej1/MxLektAvIo4bB6BkzbYun5VRQHxI=)
3: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: SQSXzVNDU5mfEM+31MGJhrkSrkXOE1Nim7RGJjmudok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0c:d7:61:fc:8d:4f:e2:89:38:59:78:62:aa:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Validity
Not Before: May 12 23:00:57 2026 GMT
Not After : May 13 23:00:57 2026 GMT
Subject: CN=ed6402b9fc046f5adcdffd2d0ef2fa70e1c1d3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:5a:7e:f1:1e:44:a7:a5:e7:0d:b6:61:ce:
a1:31:e9:68:2c:cd:7e:b7:44:23:06:90:57:04:dd:
c4:63:ae:07:ba:e3:7e:44:13:df:bf:34:ac:11:be:
f1:8e:65:11:5a:e3:d2:ad:55:4f:51:0b:4d:31:26:
e2:d3:b3:3d:b8:7c:30:b4:44:22:9e:c7:1f:58:d6:
38:96:9f:8c:b5:38:9c:45:9d:b8:79:73:ab:19:6f:
c0:98:e9:10:8a:e2:de:51:00:7b:c2:53:36:82:8a:
e6:28:f7:41:4b:e0:b7:a5:fc:cf:4d:c5:08:45:14:
75:94:39:d1:53:0b:6e:5e:79:ba:c1:23:a4:f1:c5:
27:97:b5:71:93:3e:2e:2a:c9:6f:9e:36:fa:44:a8:
b0:68:1e:51:4c:78:7c:dd:78:3c:94:8a:51:29:e9:
cf:30:17:c8:1a:a3:5c:4e:68:39:94:fc:e2:c9:d4:
73:a8:30:06:52:3a:ba:4d:3d:a2:61:fd:93:25:cd:
3d:0f:ed:2f:31:d4:8e:56:3b:7b:8d:0c:3f:48:65:
97:34:fe:68:ea:5e:37:c3:09:99:00:7b:42:9e:7f:
4f:ca:7e:1d:84:57:d0:85:97:81:c1:e5:55:ab:33:
e2:83:1b:b1:a9:f6:6b:ab:10:fd:a0:2f:43:e9:ff:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:64:02:B9:FC:04:6F:5A:DC:DF:FD:2D:0E:F2:FA:70:E1:C1:D3:BF
X509v3 Authority Key Identifier:
keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:aa:ca:64:fe:9a:e9:00:c7:4a:32:20:cb:29:db:d0:c8:61:
75:10:24:f3:4b:ca:f7:4d:58:4f:17:0f:b7:32:4f:bc:75:a1:
71:62:75:ac:79:dc:fe:be:b4:5c:7d:e3:14:26:dc:55:38:10:
51:4a:38:48:de:de:49:6e:b3:c1:1d:ef:e7:af:03:18:89:7e:
78:c7:3a:6c:28:4a:d5:86:f5:4f:65:89:fe:99:42:95:f7:4e:
70:37:a6:45:ef:d0:eb:c0:79:9c:ef:c4:94:ac:ab:d0:70:5d:
18:41:e6:06:2d:91:30:6c:65:e9:08:77:10:c9:d6:18:00:04:
99:b5:c9:3a:e7:c2:3b:08:93:d2:3c:2a:84:b4:16:b5:a9:8a:
b8:5d:f9:8d:34:c4:28:06:b7:b2:45:93:16:13:74:3d:1d:63:
8b:a7:9a:bc:d2:08:b8:3d:41:05:5d:31:86:d8:60:7f:ba:aa:
6b:a6:6c:59:76:a7:89:04:e9:7b:c6:e0:c4:0b:80:6a:30:df:
93:4f:72:6e:72:f3:e2:9c:ea:12:56:59:26:fe:4d:29:b3:d8:
b6:73:63:18:c8:0b:2c:2c:d8:a5:a4:0f:f8:f6:d2:36:f5:e2:
23:3b:1b:f7:ce:b4:92:44:68:f6:1a:da:2c:39:80:e2:b4:8d:
5a:15:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:44 2026 by rpki-client