Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier: TBnFNbx3rJXFU0DMqqzXinEfgDkINPhR5uq4yt/2H1w=
Subject key identifier: 1D:9A:9F:92:44:57:54:79:F8:54:7B:5B:39:4C:0C:D7:FC:1C:BC:30
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer: /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial: 019E1D9028C76967254C0004479345D46F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number: 083C
Signing time: Tue 12 May 2026 19:00:47 +0000
Manifest this update: Tue 12 May 2026 19:00:47 +0000
Manifest next update: Wed 13 May 2026 19:00:47 +0000
Files and hashes: 1: Z-WbSmra_G1kvyx-Bej3vkhtQis.roa (hash: gk+4vFFmmxKEtInMkLHpcbUkvzWIfqwHSMm2pJIJXSU=)
2: lCTE0e6511lXYUV4jzoQANe1D0c.roa (hash: duBHYLft9CmJTD9gy5FmFbBDQw9Rjhhhi+M/Mn6KU3Y=)
3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: Gn31/9jHF681YqH3w14VMhfJc9snqKtLim+VZ9eHMq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:28:c7:69:67:25:4c:00:04:47:93:45:d4:6f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Validity
Not Before: May 12 19:00:47 2026 GMT
Not After : May 13 19:00:47 2026 GMT
Subject: CN=1d9a9f9244575479f8547b5b394c0cd7fc1cbc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:33:25:d1:cc:92:7f:32:aa:a6:24:09:6a:
a5:f2:bd:ee:66:35:98:0d:f1:54:50:37:51:55:4c:
99:44:e2:fe:0e:e6:98:dc:3a:9c:bb:bc:d3:bc:b3:
2b:d5:e1:ef:ce:21:68:1e:e8:1e:25:2b:16:eb:43:
ca:0c:db:78:e3:e2:21:af:6b:a3:c4:ba:6d:06:09:
23:9e:59:1d:94:63:67:b3:1a:cf:e5:f8:05:fc:46:
15:b1:ec:de:37:f6:74:1d:15:30:bf:41:40:a9:78:
60:11:35:34:68:7a:a4:3c:de:2e:7f:80:f3:df:5c:
a0:96:5c:0b:5a:a7:fe:83:78:7e:30:0b:87:ee:c2:
ba:06:54:5e:fd:a9:66:13:68:81:c7:26:da:70:4b:
74:a8:eb:15:2c:f0:86:ed:bd:e0:66:e1:c4:c0:05:
30:68:a7:52:3f:a5:c1:5c:93:64:a3:7c:55:68:a8:
54:5f:ef:f6:b2:70:cb:af:d9:07:c2:7e:0c:b8:03:
6b:5e:3f:54:8a:db:6d:4c:55:e2:97:42:2b:78:54:
e2:fe:23:83:24:e0:a2:7c:27:3a:1c:6c:b4:c3:eb:
eb:22:32:21:62:85:64:bd:9a:0e:0d:b5:b2:ac:10:
71:8f:11:9f:9f:a5:78:f6:4e:6c:d3:f3:e5:76:e3:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:9F:92:44:57:54:79:F8:54:7B:5B:39:4C:0C:D7:FC:1C:BC:30
X509v3 Authority Key Identifier:
keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b9:5c:cf:74:ec:f6:91:68:72:9d:43:26:9e:14:95:75:d3:
8a:bf:63:3d:4c:eb:93:2d:e7:bb:64:2a:f6:96:f8:2a:6e:e1:
14:06:f0:03:46:06:36:58:68:16:33:4d:a2:db:d0:41:c1:a1:
1b:55:97:e0:78:6d:1c:03:7e:42:f9:7e:7c:99:9c:b4:87:e0:
b3:b8:1c:d7:da:ce:d1:1f:b4:3d:40:a9:99:15:ea:ef:eb:d0:
a2:51:4b:d3:4a:3f:26:7f:73:0c:56:e8:69:12:c8:ff:83:f3:
15:5f:f0:29:f6:90:d4:ff:38:c3:80:84:03:f2:58:6d:cb:61:
6b:bd:af:ee:4f:43:f4:bd:18:1f:cc:75:28:c2:a5:a4:c4:f7:
53:f9:7f:97:16:03:6b:60:9d:c0:43:8f:dc:fd:54:b5:d2:b8:
df:f7:1f:98:ed:ae:4c:87:02:e2:e9:14:48:80:61:79:18:5f:
43:16:79:65:3f:ab:08:e1:ea:66:ab:85:62:3b:e0:72:3c:e6:
9f:75:90:81:93:e7:2e:b7:c0:40:9d:0f:76:6a:9f:de:f0:64:
5f:3f:60:fb:21:9d:8f:c7:14:1c:ad:07:98:d7:f1:41:cc:55:
ca:b7:97:35:4c:de:b9:28:1c:e7:ea:0b:03:ca:91:44:bf:1a:
57:32:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:39 2026 by rpki-client