Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: 2YPwjohdBhDwrF4w7jsTwQJdgWJQsKXeCkLw/Oi3A0I=
Subject key identifier: 96:A1:E7:5D:C0:54:6B:3F:DC:E5:51:B9:1A:EE:90:A9:D9:EA:88:C0
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 019E1C0FD5B0347AEEC8D396336BBAB39E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 17DE
Signing time: Tue 12 May 2026 12:01:00 +0000
Manifest this update: Tue 12 May 2026 12:01:00 +0000
Manifest next update: Wed 13 May 2026 12:01:00 +0000
Files and hashes: 1: 0XVL1DRx75lawy_xFW5mJsQGHSU.roa (hash: BELOWMUZ3k/HbcEYsajsYqC3iV1ihvP6qfT8um9x+wM=)
2: GpsXVdWfTVrTw1I71qKjHAi-OwY.roa (hash: 37jMyQ9qnFLk9VNqPb2W6JdCqnsDuBdiD0ur3v/oEEw=)
3: NGPMuWiFeknKXkwM3nxouEoeXyk.roa (hash: /tIDGmKeCM03QTIplLTQuWQW/TuDx6K9okVMkl68do8=)
4: XwluJi7gd_3bLnOhsXiaCK78UGQ.roa (hash: Vg2POX67iN2CB7gqcNW3j2zG6gzZxQs5uZV1T7iRkdU=)
5: hl3Yd95fQNxwoRIo3-4kn7W_Dcs.roa (hash: bf3A6eur16fDQenvn2mn0EiiLqdDCmb0v7sPr8NzgvI=)
6: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: 0MMzk5OaPghlcK1DREUkxgubDYjVJUbJ0nqUY2m0B7Q=)
7: sgQIBkFFp9Zlr_0nrRPVgJN0CEQ.roa (hash: S9CdDbT1ld2vusmvuJyBIT32yXTScPbapiKiAqKYB1k=)
8: tBE2DXCg9mo6HQNSmwQwa4AaEKw.roa (hash: /Uu7Wfq1cKcIhIObzC72sU7ALGmExyntY4syvrkFG/U=)
9: vhwquoEVrfx9ZFPHOlvKpZ1eMgQ.roa (hash: /W94YDKehwEOG4IGpuPHROQ+73Ocm3mWSD9qbK70W14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:d5:b0:34:7a:ee:c8:d3:96:33:6b:ba:b3:9e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: May 12 12:01:00 2026 GMT
Not After : May 13 12:01:00 2026 GMT
Subject: CN=96a1e75dc0546b3fdce551b91aee90a9d9ea88c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5c:32:7c:3e:0f:2c:7e:ac:a8:b1:cf:35:e7:
65:eb:22:31:0f:7a:57:86:03:de:92:96:c6:da:6d:
9b:a2:5f:bc:a4:b7:eb:b0:1f:50:41:83:36:9e:e2:
f0:05:0c:25:45:6d:15:30:91:1f:63:41:60:ac:9c:
e4:e9:40:2e:34:c0:89:49:6b:4f:9b:ed:4d:10:20:
f6:7a:25:17:34:09:8c:ba:58:5e:f8:8a:de:58:06:
85:13:6b:d6:b5:de:f0:d3:21:07:6b:14:01:15:fe:
d0:0c:e7:ce:a8:e4:00:4f:7a:a2:97:18:d0:67:42:
ee:39:dd:84:35:d6:f5:94:72:59:0f:74:b1:e6:b5:
34:5e:fe:bd:4e:be:8b:f7:16:e2:7c:77:35:52:6a:
e9:b3:4f:2c:b6:cd:88:39:6e:9f:3d:11:47:e6:da:
14:64:85:7a:91:2f:96:f0:ab:22:01:16:1e:16:37:
e6:1c:25:31:5f:b4:e4:44:88:b3:d4:1e:21:cf:d5:
01:6a:83:b8:c2:81:a6:b3:62:04:b9:c9:1a:6e:36:
1e:e6:16:8d:0f:8f:d2:00:f8:5c:6e:36:cf:7b:fe:
2e:96:08:b1:26:97:0d:39:55:67:cc:66:c5:0d:63:
9d:67:e2:88:a0:f9:5a:da:20:49:6a:db:9a:c9:19:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A1:E7:5D:C0:54:6B:3F:DC:E5:51:B9:1A:EE:90:A9:D9:EA:88:C0
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d6:1a:7d:26:7e:fa:5e:08:f9:a3:04:5a:7d:d4:79:b7:37:
db:94:5c:09:7a:66:1f:c2:37:30:70:bf:11:a4:fd:46:cd:da:
d7:49:b4:ab:01:88:63:e6:93:fd:a3:e7:a7:eb:c8:9e:9f:14:
96:ff:b9:ee:ac:43:ff:74:cf:dc:31:de:6e:67:78:a1:71:32:
e8:2a:90:db:a3:d4:27:e7:fd:f6:c0:2d:2e:e1:f9:ff:37:2b:
6c:d8:3d:07:32:64:05:32:a6:14:f1:01:f7:17:c2:04:ae:b7:
a6:a1:51:14:57:2e:d4:17:5b:e1:6b:21:86:fb:ce:68:d9:48:
79:d0:15:d5:e0:20:de:5c:ba:69:c0:17:e8:af:c0:30:7d:b2:
47:fa:99:ce:eb:96:07:71:69:be:6a:0c:8b:b1:d2:eb:8b:87:
e5:54:bd:4b:8d:16:88:3c:cd:d4:bc:55:49:75:f2:da:da:e0:
e0:86:67:03:0e:d5:e3:1d:30:83:99:a0:92:18:e8:84:d0:ac:
48:7b:5d:09:4c:c5:22:77:13:7e:7b:3d:33:69:7b:96:bb:12:
0b:71:e5:39:c0:fa:7c:97:f1:8b:cc:86:8a:10:ee:ce:ba:b5:
ef:18:95:9d:da:7c:54:1f:89:cd:0a:ff:65:46:91:cf:af:d3:
d3:6c:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:23 2026 by rpki-client