Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: +WASyPT17YJZT7oxHDuKQS+9Ja0nXe/JF5nSY41/KyY=
Subject key identifier: DC:FB:BD:F1:EB:87:83:44:6C:4C:44:D5:6C:68:EB:FB:49:1B:D6:B8
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 019E1CB47D29AFC80D1FE6FD08CDDE852E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 15:00:50 +0000
Manifest this update: Tue 12 May 2026 15:00:50 +0000
Manifest next update: Wed 13 May 2026 15:00:50 +0000
Files and hashes: 1: LC2WPuI9QLIZ8RbSjNvSRTUaDs4.asa (hash: TvS/cC1UWjyeu6FeGmxZxswAr/BZFOyjaWFqao1VhuI=)
2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: +kpnljnEBo7l2BIJUpD1KdCrL2DHn5Wnk2/9cW0iINM=)
3: _In4h_FwuHoLeAhLdOO_0gDal3g.roa (hash: 5CWj3iN4WCDtTiUEN45Kg99lLjsQ7Kch3A5A4xC3N5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:7d:29:af:c8:0d:1f:e6:fd:08:cd:de:85:2e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: May 12 15:00:50 2026 GMT
Not After : May 13 15:00:50 2026 GMT
Subject: CN=dcfbbdf1eb8783446c4c44d56c68ebfb491bd6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:06:bf:67:a7:89:6f:79:43:56:0c:94:c6:12:
73:a8:d5:11:bb:81:e0:d3:2b:69:0a:5e:b5:2d:21:
1b:a7:b7:ef:31:9f:a0:7e:10:c0:45:27:7c:a8:ef:
83:f9:54:97:e8:a3:a6:ec:f5:fb:5e:a3:83:68:60:
71:22:8d:24:c3:5b:8c:a9:98:da:3c:12:1f:e5:0b:
51:87:0f:f8:ff:35:9d:97:fe:5e:e4:94:ae:52:28:
2b:c5:2f:8a:c8:c5:13:55:e7:c7:22:5a:1c:b5:65:
d7:b8:c7:0f:35:10:3f:af:f0:89:d1:b4:b9:df:67:
a0:a0:e3:c2:a4:bc:c6:fc:42:cc:51:b1:65:d6:80:
a8:d7:1d:0c:2c:bf:35:67:3d:43:ed:f1:65:d3:32:
9b:9d:2b:c4:e5:03:19:77:3f:d3:48:ed:48:00:a2:
be:57:0d:69:f5:35:58:e1:10:6a:69:da:69:48:9b:
03:ec:2d:52:8e:2b:5d:ed:af:04:6c:07:9c:eb:18:
2b:7a:77:f1:a9:2b:60:65:ac:86:6c:87:1f:b8:8e:
17:19:7c:81:80:e9:4b:a9:6f:ad:91:36:f3:0e:de:
5b:ed:96:18:f7:64:47:e3:67:ca:9c:f3:9d:6d:45:
5b:6e:6a:f4:4a:e4:a5:7d:33:c8:3b:8d:f3:2f:ba:
fa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:BD:F1:EB:87:83:44:6C:4C:44:D5:6C:68:EB:FB:49:1B:D6:B8
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3e:bd:6b:71:a2:9c:a7:1b:70:da:38:b1:77:07:bc:2c:23:
68:a3:26:3d:eb:79:1c:3f:c7:bf:98:1d:d5:d9:95:3b:e4:d9:
18:c3:33:e2:69:bf:cc:b6:3d:49:86:f7:26:64:72:a7:e1:b8:
9f:6d:3f:0c:65:87:7c:bd:0a:6d:cc:9b:1c:26:33:06:4f:16:
05:f4:f8:75:70:87:7c:60:7e:5d:df:0e:92:6f:f4:87:23:8f:
af:03:04:63:7d:69:a7:7d:56:a8:0c:c1:a7:fa:86:3a:38:29:
dd:52:ff:52:a9:1a:76:e3:76:94:d8:82:61:5b:dc:4d:e3:e9:
b3:c5:cb:ac:4f:21:a6:e6:96:9b:35:b9:f8:45:d5:2f:c2:c8:
8f:5e:e7:95:c4:f7:c3:75:a9:5c:70:a8:23:9a:f1:00:f2:72:
74:c4:0f:62:86:a9:eb:72:cf:14:2c:e1:6e:5d:59:c7:80:e1:
2a:be:2f:a2:2e:b8:c2:37:49:0d:fe:6f:eb:94:d1:34:1f:d0:
e1:a1:96:db:19:25:a8:88:7d:8a:97:a7:5a:c5:2b:ce:9f:4f:
46:dc:b1:7d:79:51:ad:6c:44:07:70:c6:04:05:42:a3:f7:83:
fd:a4:e0:d9:4e:ce:89:3b:1c:f4:47:6d:2e:3e:76:ce:16:47:
40:55:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:30 2026 by rpki-client