Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
File: oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft (raw, json)
Hash identifier: cUv1GjHejeknLA4EPE6OcAKwJKkYTD3AXoKHijJjE00=
Subject key identifier: C3:31:AE:33:B1:36:17:1E:38:7C:AB:07:C7:9B:3E:6A:42:AF:8E:4F
Authority key identifier: A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
Certificate issuer: /CN=a06bd308f743288af4cc2119973ec8dc028937f0
Certificate serial: 019E1DFE41CA47A3BF7F27358B88C2D2B16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
Manifest number: 76
Signing time: Tue 12 May 2026 21:01:02 +0000
Manifest this update: Tue 12 May 2026 21:01:02 +0000
Manifest next update: Wed 13 May 2026 21:01:02 +0000
Files and hashes: 1: TOgX3vFm1bBUf7VlKOvS_Q49BQw.roa (hash: XJE7IcrW6rhvGDyAahOo4XtEMNvbsvjLkV3AEh+8sYU=)
2: oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl (hash: 1q5TaToCOlS8UCY50UVPLcIzskcCyFczx0UYAHhn90I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:41:ca:47:a3:bf:7f:27:35:8b:88:c2:d2:b1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06bd308f743288af4cc2119973ec8dc028937f0
Validity
Not Before: May 12 21:01:02 2026 GMT
Not After : May 13 21:01:02 2026 GMT
Subject: CN=c331ae33b136171e387cab07c79b3e6a42af8e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d4:33:18:c8:1b:34:3f:46:c4:94:c5:77:d1:
bc:67:86:3a:83:d0:f9:b3:61:fc:25:41:d8:cb:e5:
8f:7a:17:40:c5:49:7e:eb:4c:79:3c:d9:af:ec:5f:
c2:4d:15:79:6c:c6:2c:a9:cc:3e:4b:9d:65:95:de:
2f:f2:ea:cf:15:ee:be:da:4f:13:e6:ee:69:f1:ba:
0c:3f:65:4b:c2:8a:95:90:15:8d:7c:ad:17:b0:11:
95:87:8a:59:91:e6:75:75:bf:ff:da:74:9c:89:62:
d3:81:0e:1f:f1:30:e5:2d:e8:f4:96:b5:39:ae:48:
be:ec:19:e1:2b:72:f9:08:1f:6f:21:bc:7e:dc:8b:
33:e7:a9:ea:f4:d5:9a:ab:63:d9:ca:e0:bb:eb:b2:
6a:5d:e0:1d:bd:97:71:79:20:40:d8:3c:a7:49:1a:
53:4c:50:f8:ad:9f:af:03:dd:d6:38:82:70:1c:3c:
16:eb:66:f9:6d:b7:e8:9a:7d:05:56:7d:41:ab:28:
c7:aa:45:93:70:9b:ec:3a:7d:53:dc:51:65:e7:6a:
35:9c:4b:5f:c3:d7:de:71:40:93:be:4c:1a:cd:3c:
b8:25:2e:1c:53:ae:36:f8:77:ef:6f:83:2f:1c:f8:
4d:b7:b0:c0:9e:18:39:c4:88:f0:5f:99:df:60:a3:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:AE:33:B1:36:17:1E:38:7C:AB:07:C7:9B:3E:6A:42:AF:8E:4F
X509v3 Authority Key Identifier:
keyid:A0:6B:D3:08:F7:43:28:8A:F4:CC:21:19:97:3E:C8:DC:02:89:37:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGvTCPdDKIr0zCEZlz7I3AKJN_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c1f530-3977-48b8-ae8d-ba41bc1960d8/1/oGvTCPdDKIr0zCEZlz7I3AKJN_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:9c:3f:69:c8:f0:d5:5e:93:73:06:5d:dc:94:38:6e:af:55:
02:22:b7:c7:7d:88:47:37:93:78:77:52:78:48:1f:5f:4a:a2:
e0:c0:b2:fd:c4:d7:98:20:39:7e:3b:83:a9:ab:6d:23:c3:16:
22:69:d3:e1:3e:4b:3c:f1:bf:ae:d7:58:28:77:9b:cd:eb:65:
57:53:46:ac:ab:c2:38:d7:ba:cc:06:af:9b:76:94:ee:26:3c:
8d:b1:47:96:d7:1a:e1:b1:34:86:69:8a:f3:17:78:4c:93:94:
38:d7:56:f7:ed:f9:83:25:4f:c6:d0:aa:98:1f:f1:70:1f:4f:
5c:af:5a:21:8a:1c:06:3d:c8:81:43:67:5e:69:c3:1d:bb:86:
9a:69:16:06:8f:aa:0a:8a:e6:4d:c8:6b:fc:92:4d:3f:0c:5b:
00:5a:1b:3b:92:fc:5a:c9:5c:56:21:89:d4:30:38:a1:19:45:
15:b1:e0:df:6f:62:b4:67:c5:05:32:21:a3:02:e9:57:95:0c:
cb:83:1c:2d:c6:ff:51:26:c1:ce:f6:77:63:f6:42:8f:26:9d:
de:34:e5:c1:52:ae:d5:ac:be:2b:ea:9a:3f:ac:52:f5:19:63:
5f:99:5a:8c:a1:92:3e:eb:5c:5f:8b:db:35:0d:ef:87:d9:3c:
07:76:f5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:18 2026 by rpki-client