Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
File: o2n0t4zE2TX7Hzm73syKQTsPr50.mft (raw, json)
Hash identifier: Bfpg3OvhIXWcFWYiDRdFNH6kSRwCkjF6AKPU9irmIb8=
Subject key identifier: 08:76:CC:C3:92:C7:83:21:A9:36:6D:1E:02:57:E1:60:51:04:9E:49
Authority key identifier: A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
Certificate issuer: /CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Certificate serial: 019E1F482371D5E4FFA116BF98786A41A5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
Manifest number: 0237
Signing time: Wed 13 May 2026 03:01:21 +0000
Manifest this update: Wed 13 May 2026 03:01:21 +0000
Manifest next update: Thu 14 May 2026 03:01:21 +0000
Files and hashes: 1: hRuDhXhX54qw1wEPjhcbUnyv6xs.roa (hash: TAW6RX8CSvyYletMRNoT2k5BjZvitleWVxLZc1Ntn/4=)
2: o2n0t4zE2TX7Hzm73syKQTsPr50.crl (hash: XbuU1qNUqXIDgEW3OI6ComoROo6Z1urdLflzuFWb0Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:23:71:d5:e4:ff:a1:16:bf:98:78:6a:41:a5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a369f4b78cc4d935fb1f39bbdecc8a413b0faf9d
Validity
Not Before: May 13 03:01:21 2026 GMT
Not After : May 14 03:01:21 2026 GMT
Subject: CN=0876ccc392c78321a9366d1e0257e16051049e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:c9:dc:74:55:96:03:dd:20:0a:16:05:9c:
55:99:e3:c4:b1:99:dd:a9:da:ab:0a:c7:48:3e:8d:
f9:4a:68:92:d2:e7:37:20:2e:a0:c1:58:b8:2b:52:
83:d1:39:ff:96:b3:c0:b7:d0:2c:c2:e1:84:7d:0b:
fc:12:67:c6:70:88:e0:b4:97:48:62:3e:d7:b5:7b:
4e:87:62:73:f8:73:f3:45:85:d1:c4:9f:bc:11:79:
6e:43:fb:56:93:b7:99:76:d8:e1:59:48:4b:d6:c7:
c6:07:5b:b4:ec:90:17:bf:3a:79:09:c1:78:e0:8c:
96:cb:86:66:40:aa:a6:3c:74:8f:8e:95:36:e6:2d:
62:7d:da:a8:ed:7b:fe:52:86:1a:41:8f:1d:2e:02:
cd:1a:0f:40:3f:b2:3e:20:f6:53:8a:13:34:1e:35:
88:f9:67:9f:df:1b:f0:53:ba:48:60:d7:66:5b:e4:
51:ac:d4:c5:b7:11:61:49:a1:16:c7:b7:30:ff:a3:
ce:8f:86:2b:7a:c1:69:d8:51:19:de:92:51:5b:77:
f6:99:c3:3b:c6:67:1b:14:4c:e9:68:6f:bc:4f:3f:
a5:71:1c:e0:cb:ed:ca:42:55:75:bd:39:d7:06:66:
c4:5c:bb:42:b9:9d:eb:b4:fa:8e:c7:ec:85:ee:69:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:76:CC:C3:92:C7:83:21:A9:36:6D:1E:02:57:E1:60:51:04:9E:49
X509v3 Authority Key Identifier:
keyid:A3:69:F4:B7:8C:C4:D9:35:FB:1F:39:BB:DE:CC:8A:41:3B:0F:AF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2n0t4zE2TX7Hzm73syKQTsPr50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d03982-e753-4e56-ab35-b0adec934671/1/o2n0t4zE2TX7Hzm73syKQTsPr50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b2:0a:8f:39:86:58:f2:d2:87:e8:4e:8e:bb:a6:30:af:9d:
85:73:3e:b8:7b:68:8c:ee:7e:ea:d6:b8:05:04:17:dd:ed:2c:
88:08:da:8b:7f:91:5f:fa:c7:62:ab:cf:95:6e:c3:a4:94:7b:
70:62:89:c5:18:58:8d:d8:52:91:a8:b9:78:4b:b4:54:db:fd:
5c:df:c6:2f:6d:46:69:29:f0:c5:ce:d1:9a:70:95:b9:ce:13:
6d:50:52:1b:8c:21:3d:24:71:20:ea:7f:17:47:87:92:35:2b:
29:cf:ff:6e:e0:07:41:3b:83:62:2e:36:78:9b:90:fd:c7:6c:
42:97:77:fc:43:62:d9:0f:e0:12:59:e6:8e:bc:a2:e3:d0:7c:
c8:b5:36:e5:22:0b:89:b7:d5:33:b4:bc:a0:de:f5:d7:44:94:
7c:8a:8f:f9:69:6c:e7:b2:cf:77:27:34:79:76:9f:85:1e:d4:
18:02:b1:20:fa:5a:8a:b4:92:2f:ee:10:7b:a5:88:cf:82:57:
4c:ce:e4:32:2e:6e:31:4c:03:80:a6:43:e4:83:44:d4:68:0d:
92:ed:3f:ea:21:4a:41:e6:5e:9f:c6:66:e1:e1:b6:b7:e5:0a:
18:c5:4c:c6:8e:26:2d:36:b2:81:39:c8:3c:f5:52:3b:cb:14:
d4:84:ef:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:42 2026 by rpki-client