Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File: oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier: P1fr8THCTH7iXbps245Lt27j/qZIi+EAWsfuwswiesg=
Subject key identifier: CD:7C:9A:C2:3A:05:A0:82:91:BF:82:0D:1B:A1:AA:C1:60:5B:73:41
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 019E1F7F7C2A5D6B1AC86BFFF80BB30B42A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number: 0A5C
Signing time: Wed 13 May 2026 04:01:48 +0000
Manifest this update: Wed 13 May 2026 04:01:48 +0000
Manifest next update: Thu 14 May 2026 04:01:48 +0000
Files and hashes: 1: Mob9EPRgvBzo4H6hbqTT2HdD3JA.roa (hash: kvdg8wCS9egZQzAgHG4zTvTOgP+Bu8A9k8hcSeFomOA=)
2: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: 0BZOIbuI3ST081ZJ8kBCC8Hi3U+lliwzZ+fhWFmKRgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:7c:2a:5d:6b:1a:c8:6b:ff:f8:0b:b3:0b:42:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: May 13 04:01:48 2026 GMT
Not After : May 14 04:01:48 2026 GMT
Subject: CN=cd7c9ac23a05a08291bf820d1ba1aac1605b7341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:a8:19:9b:78:08:85:6f:87:f2:21:ca:59:
cb:30:bc:c3:cf:bd:b4:9b:08:d4:5e:3c:25:1b:d7:
65:0b:7a:e7:99:d4:fc:f3:23:84:78:5f:85:3d:8d:
8d:89:27:c6:b1:d0:65:e4:f8:b3:e7:e4:0f:b6:19:
a6:ca:d3:2a:20:64:c8:2e:d5:3a:01:32:38:88:c1:
2b:29:69:f6:52:39:23:dd:06:d9:43:8a:0a:e3:3a:
52:b0:1e:5b:b6:5c:58:8e:04:bc:ce:c1:87:09:cd:
a4:93:c2:10:29:e3:a6:47:96:97:72:09:c2:35:f0:
aa:e8:18:1f:ae:34:aa:17:c7:86:98:7b:b7:0f:8f:
62:7a:72:71:01:65:72:ff:e9:48:3d:1c:cc:9c:c6:
d0:6c:04:4b:95:a0:16:4d:9c:ee:d4:42:88:66:f3:
65:92:f8:06:0b:65:f7:0e:fd:16:16:5f:43:6e:ef:
d6:8a:2c:b2:4c:ed:dc:db:cd:81:e8:6c:6c:1c:56:
43:fc:9c:24:1f:b9:58:2c:f7:19:d2:eb:03:70:c7:
fb:43:2e:98:04:42:53:b3:f6:f6:ce:b3:18:1c:1c:
55:1d:28:c5:7a:cf:ba:cc:77:a0:90:ee:bd:76:1b:
f7:4e:c5:e6:49:8f:c7:ef:4c:9e:d8:bd:75:88:aa:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:9A:C2:3A:05:A0:82:91:BF:82:0D:1B:A1:AA:C1:60:5B:73:41
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:42:48:69:af:d5:6c:a4:33:68:76:3b:27:9f:a7:b1:5b:af:
bf:fe:ae:71:c1:29:97:72:c4:41:d6:39:48:6b:ff:5b:54:ac:
d6:d0:70:f7:79:c3:68:ff:84:d4:ee:67:df:a2:58:77:56:48:
28:cd:26:ee:7b:dd:c6:da:90:ad:04:17:fd:e1:4d:ef:b7:0b:
ed:16:46:f6:03:2a:d1:c2:ec:ff:1e:b3:21:99:c8:d8:0a:66:
06:ac:5a:64:fc:57:61:45:ab:d0:c2:7b:ec:a7:3b:4b:58:43:
a6:3c:fc:df:c3:98:c5:68:f9:1f:d7:72:14:c7:1d:35:dd:48:
d6:7c:42:3b:91:d1:b8:63:f1:0d:15:30:16:8d:1b:49:f5:30:
b6:ed:c9:89:6b:b7:40:4e:3a:95:d0:79:60:67:17:91:82:e8:
d9:a7:27:91:d1:e4:97:8c:40:a3:a2:a1:c8:f8:a6:a6:5d:d9:
4e:8a:1d:1f:ee:2b:4e:7f:e9:87:8a:d5:bc:89:3e:74:4b:83:
7e:57:ab:b9:72:ea:cb:13:d6:65:cc:aa:6f:8f:b0:8e:e9:9a:
16:11:4b:21:a5:ce:df:98:bc:7e:19:46:69:ea:6b:90:9e:8a:
da:52:89:a3:8d:a6:b9:9c:01:00:54:78:d9:10:18:42:88:47:
0d:3b:97:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:47:53 2026 by rpki-client